Oct 2026
LowEthereum
Lighthouse Consensus
—Disclosed
Duplicate
No writeup yet
Bug bounties
Bugs found in the wild, reported first.
Vulnerabilities reported to live protocols through bounty programs and responsible disclosure, with severity, payout, and writeups where public.
$46,055
Total awarded
70
Reports
30
Critical & high
70
Publicly disclosed
Bounty log
Every report, tracked.
Search by protocol, asset, or severity.
70 reports
Shaded rows are still in review (19)
Oct 2026
LowEthereum
Lodestar Consensus
Confirmed, no payoutDisclosed
Original
No writeup yet
Oct 2026
HighEthereum
Lodestar Consensus
—Disclosed
Duplicate
No writeup yet
Oct 2026
LowRipple
Consensus Client
In reviewDisclosed
No writeup yet
Oct 2026
MediumEthereum
Lighthouse Consensus
In reviewDisclosed
No writeup yet
Oct 2026
MediumEthereum
Lighthouse Consensus
In reviewDisclosed
No writeup yet
Oct 2026
HighRipple
Consensus Client
—Disclosed
Duplicate
No writeup yet
Oct 2026
MediumRipple
Consensus Client
—Disclosed
Duplicate
No writeup yet
Oct 2026
HighEthereum
Prysm Consensus
In reviewDisclosed
No writeup yet
Oct 2026
HighEthereum
Prysm Consensus
—Disclosed
Duplicate
No writeup yet
Oct 2026
HighApple
iOS
In reviewDisclosed
No writeup yet
Oct 2026
HighEthereum
Nimbus Consensus
—Disclosed
Duplicate
No writeup yet
Oct 2026
MediumRipple
Consensus Client
Confirmed, no payoutDisclosed
Original
No writeup yet
Oct 2026
LowEthereum
Teku Consensus
In reviewDisclosed
No writeup yet
Oct 2026
HighEthereum
Nimbus Consensus
—Disclosed
Duplicate
No writeup yet
Oct 2026
MediumPlasma
Consensus Client
Confirmed, no payoutDisclosed
Original
No writeup yet
Sep 2026
HighTitan M2 RSA
—Disclosed
Duplicate
No writeup yet
Sep 2026
LowPlasma
Consensus Client
In reviewDisclosed
No writeup yet
Sep 2026
HighArc
Consensus Client
In reviewDisclosed
No writeup yet
Sep 2026
HighArc
Consensus Client
—Disclosed
Duplicate
No writeup yet
Sep 2026
HighKeystore2 StrongBox HMAC
—Disclosed
Duplicate
No writeup yet
Sep 2026
MediumRipple
Consensus Client
—Disclosed
Duplicate
No writeup yet
Sep 2026
LowEthereum
Lodestar Consensus
$1,000Disclosed
Original
No writeup yet
Sep 2026
HighRipple
Consensus Client
—Disclosed
Duplicate
No writeup yet
Sep 2026
MediumApple
Webkit
In reviewDisclosed
No writeup yet
Sep 2026
HighApple
Webkit
In reviewDisclosed
No writeup yet
Sep 2026
HighRipple
Consensus Client
In reviewDisclosed
No writeup yet
Sep 2026
HighRipple
Consensus Client
$10,000Disclosed
Original
No writeup yet
Sep 2026
HighCosmos
ICA
Confirmed, no payoutDisclosed
Duplicate
No writeup yet
Sep 2026
CriticalRipple
Consensus Client
—Disclosed
Duplicate
No writeup yet
Sep 2026
HighGmail Android (Sidekick)
In reviewDisclosed
No writeup yet
Sep 2026
HighGmail Android (Message URI)
In reviewDisclosed
No writeup yet
Sep 2026
HighGmail Android (MailActivity)
Confirmed, no payoutDisclosed
Original
No writeup yet
Sep 2026
HighGmail Android (HTML Base)
In reviewDisclosed
No writeup yet
Sep 2026
MediumPhantom
Android App
In reviewDisclosed
No writeup yet
Sep 2026
LowPlasma
Consensus Client
$1,000Disclosed
Original
No writeup yet
Sep 2026
MediumPhantom
Browser Extension
—Disclosed
Duplicate
No writeup yet
Aug 2026
LowMorpho
Curator
$100Disclosed
Original
No writeup yet
Aug 2026
LowMorpho
Curator
$100Disclosed
Original
No writeup yet
Aug 2026
MediumPhantom
Browser Extension
$1,500Disclosed
Original
No writeup yet
Aug 2026
HighBase
Node
—Disclosed
Duplicate
No writeup yet
Aug 2026
HighCoinbase
Wallet
—Disclosed
Duplicate
No writeup yet
Aug 2026
HighUniswap
Chrome Extension
In reviewDisclosed
No writeup yet
Aug 2026
LowUniswap
Chrome Extension
In reviewDisclosed
No writeup yet
Aug 2026
LowUniswap
Chrome Extension
In reviewDisclosed
No writeup yet
Aug 2026
LowUniswap
Chrome Extension
$390Disclosed
Original
No writeup yet
Aug 2026
LowUniswap
Chrome Extension
$465Disclosed
Original
No writeup yet
Aug 2026
HighUniswap
Chrome Extension
—Disclosed
Duplicate
No writeup yet
Aug 2026
LowUniswap
Chrome Extension
—Disclosed
Duplicate
No writeup yet
Aug 2026
HighUniswap
Chrome Extension
—Disclosed
Duplicate
No writeup yet
Aug 2026
LowUniswap
Chrome Extension
—Disclosed
Duplicate
No writeup yet
Aug 2026
HighUniswap
Chrome Extension
—Disclosed
Duplicate
No writeup yet
Aug 2026
LowUniswap
Chrome Extension
—Disclosed
Duplicate
No writeup yet
Aug 2026
MediumMetamask
Wallet
—Disclosed
Duplicate
No writeup yet
Jul 2026
LowPhantom
Browser Extension
$500Disclosed
Original
No writeup yet
Jul 2026
LowPhantom
Browser Extension
$500Disclosed
Original
No writeup yet
Jul 2026
MediumPhantom
Browser Extension
—Disclosed
Duplicate
No writeup yet
Jul 2026
MediumPhantom
Browser Extension
In reviewDisclosed
No writeup yet
Jul 2026
MediumInjective
Injective Core
$1,500Disclosed
Original
No writeup yet
Jul 2026
MediumInjective
Injective Core
—Disclosed
Duplicate
No writeup yet
Jul 2026
HighInjective
Injective Core
—Disclosed
Duplicate
No writeup yet
Jul 2026
MediumOndo
Perps Backend
Confirmed, no payoutDisclosed
Original
No writeup yet
Apr 2026
LowAave
V3 on Aptos
Confirmed, no payoutDisclosed
Original
No writeup yet
Mar 2026
LowAave
V3 on Aptos
Confirmed, no payoutDisclosed
Original
No writeup yet
Oct 2025
LowEco
Vault contract (refunds)
Confirmed, no payoutDisclosed
Original
Jun 2025
HighHyperlane
RateLimited ISM & Hook
Confirmed, no payoutDisclosed
Original
Nov 2024
MediumRelay
Solver signature API
Confirmed, no payoutDisclosed
Original
Oct 2024
HighHyperlane
RateLimited ISM (warp routes)
$2,000Disclosed
Original
Oct 2023
—Socket
Data Layer (colluded transmitters)
$20,000Disclosed
Original
Oct 2023
—Socket
SocketSurge LootBox-II
$7,000Disclosed
Original
| Protocol | Project / Asset | Severity | Date | Bounty awarded | Disclosure | Duplicate | Writeup |
|---|---|---|---|---|---|---|---|
| Ethereum | Lighthouse Consensus | Low | Oct 2026 | — | Disclosed | Duplicate | — |
| Ethereum | Lodestar Consensus | Low | Oct 2026 | Confirmed, no payout | Disclosed | Original | — |
| Ethereum | Lodestar Consensus | High | Oct 2026 | — | Disclosed | Duplicate | — |
| Ripple | Consensus Client | Low | Oct 2026 | In review | Disclosed | Pending | — |
| Ethereum | Lighthouse Consensus | Medium | Oct 2026 | In review | Disclosed | Pending | — |
| Ethereum | Lighthouse Consensus | Medium | Oct 2026 | In review | Disclosed | Pending | — |
| Ripple | Consensus Client | High | Oct 2026 | — | Disclosed | Duplicate | — |
| Ripple | Consensus Client | Medium | Oct 2026 | — | Disclosed | Duplicate | — |
| Ethereum | Prysm Consensus | High | Oct 2026 | In review | Disclosed | Pending | — |
| Ethereum | Prysm Consensus | High | Oct 2026 | — | Disclosed | Duplicate | — |
| Apple | iOS | High | Oct 2026 | In review | Disclosed | Pending | — |
| Ethereum | Nimbus Consensus | High | Oct 2026 | — | Disclosed | Duplicate | — |
| Ripple | Consensus Client | Medium | Oct 2026 | Confirmed, no payout | Disclosed | Original | — |
| Ethereum | Teku Consensus | Low | Oct 2026 | In review | Disclosed | Pending | — |
| Ethereum | Nimbus Consensus | High | Oct 2026 | — | Disclosed | Duplicate | — |
| Plasma | Consensus Client | Medium | Oct 2026 | Confirmed, no payout | Disclosed | Original | — |
| Titan M2 RSA | High | Sep 2026 | — | Disclosed | Duplicate | — | |
| Plasma | Consensus Client | Low | Sep 2026 | In review | Disclosed | Pending | — |
| Arc | Consensus Client | High | Sep 2026 | In review | Disclosed | Pending | — |
| Arc | Consensus Client | High | Sep 2026 | — | Disclosed | Duplicate | — |
| Keystore2 StrongBox HMAC | High | Sep 2026 | — | Disclosed | Duplicate | — | |
| Ripple | Consensus Client | Medium | Sep 2026 | — | Disclosed | Duplicate | — |
| Ethereum | Lodestar Consensus | Low | Sep 2026 | $1,000 | Disclosed | Original | — |
| Ripple | Consensus Client | High | Sep 2026 | — | Disclosed | Duplicate | — |
| Apple | Webkit | Medium | Sep 2026 | In review | Disclosed | Pending | — |
| Apple | Webkit | High | Sep 2026 | In review | Disclosed | Pending | — |
| Ripple | Consensus Client | High | Sep 2026 | In review | Disclosed | Pending | — |
| Ripple | Consensus Client | High | Sep 2026 | $10,000 | Disclosed | Original | — |
| Cosmos | ICA | High | Sep 2026 | Confirmed, no payout | Disclosed | Duplicate | — |
| Ripple | Consensus Client | Critical | Sep 2026 | — | Disclosed | Duplicate | — |
| Gmail Android (Sidekick) | High | Sep 2026 | In review | Disclosed | Pending | — | |
| Gmail Android (Message URI) | High | Sep 2026 | In review | Disclosed | Pending | — | |
| Gmail Android (MailActivity) | High | Sep 2026 | Confirmed, no payout | Disclosed | Original | — | |
| Gmail Android (HTML Base) | High | Sep 2026 | In review | Disclosed | Pending | — | |
| Phantom | Android App | Medium | Sep 2026 | In review | Disclosed | Pending | — |
| Plasma | Consensus Client | Low | Sep 2026 | $1,000 | Disclosed | Original | — |
| Phantom | Browser Extension | Medium | Sep 2026 | — | Disclosed | Duplicate | — |
| Morpho | Curator | Low | Aug 2026 | $100 | Disclosed | Original | — |
| Morpho | Curator | Low | Aug 2026 | $100 | Disclosed | Original | — |
| Phantom | Browser Extension | Medium | Aug 2026 | $1,500 | Disclosed | Original | — |
| Base | Node | High | Aug 2026 | — | Disclosed | Duplicate | — |
| Coinbase | Wallet | High | Aug 2026 | — | Disclosed | Duplicate | — |
| Uniswap | Chrome Extension | High | Aug 2026 | In review | Disclosed | Pending | — |
| Uniswap | Chrome Extension | Low | Aug 2026 | In review | Disclosed | Pending | — |
| Uniswap | Chrome Extension | Low | Aug 2026 | In review | Disclosed | Pending | — |
| Uniswap | Chrome Extension | Low | Aug 2026 | $390 | Disclosed | Original | — |
| Uniswap | Chrome Extension | Low | Aug 2026 | $465 | Disclosed | Original | — |
| Uniswap | Chrome Extension | High | Aug 2026 | — | Disclosed | Duplicate | — |
| Uniswap | Chrome Extension | Low | Aug 2026 | — | Disclosed | Duplicate | — |
| Uniswap | Chrome Extension | High | Aug 2026 | — | Disclosed | Duplicate | — |
| Uniswap | Chrome Extension | Low | Aug 2026 | — | Disclosed | Duplicate | — |
| Uniswap | Chrome Extension | High | Aug 2026 | — | Disclosed | Duplicate | — |
| Uniswap | Chrome Extension | Low | Aug 2026 | — | Disclosed | Duplicate | — |
| Metamask | Wallet | Medium | Aug 2026 | — | Disclosed | Duplicate | — |
| Phantom | Browser Extension | Low | Jul 2026 | $500 | Disclosed | Original | — |
| Phantom | Browser Extension | Low | Jul 2026 | $500 | Disclosed | Original | — |
| Phantom | Browser Extension | Medium | Jul 2026 | — | Disclosed | Duplicate | — |
| Phantom | Browser Extension | Medium | Jul 2026 | In review | Disclosed | Pending | — |
| Injective | Injective Core | Medium | Jul 2026 | $1,500 | Disclosed | Original | — |
| Injective | Injective Core | Medium | Jul 2026 | — | Disclosed | Duplicate | — |
| Injective | Injective Core | High | Jul 2026 | — | Disclosed | Duplicate | — |
| Ondo | Perps Backend | Medium | Jul 2026 | Confirmed, no payout | Disclosed | Original | — |
| Aave | V3 on Aptos | Low | Apr 2026 | Confirmed, no payout | Disclosed | Original | — |
| Aave | V3 on Aptos | Low | Mar 2026 | Confirmed, no payout | Disclosed | Original | — |
| Eco | Vault contract (refunds) | Low | Oct 2025 | Confirmed, no payout | Disclosed | Original | Read |
| Hyperlane | RateLimited ISM & Hook | High | Jun 2025 | Confirmed, no payout | Disclosed | Original | Read |
| Relay | Solver signature API | Medium | Nov 2024 | Confirmed, no payout | Disclosed | Original | Read |
| Hyperlane | RateLimited ISM (warp routes) | High | Oct 2024 | $2,000 | Disclosed | Original | Read |
| Socket | Data Layer (colluded transmitters) | — | Oct 2023 | $20,000 | Disclosed | Original | Read |
| Socket | SocketSurge LootBox-II | — | Oct 2023 | $7,000 | Disclosed | Original | Read |
Direct contact
Bring me the system you can't stop thinking about.
My schedule is primarily committed to Spearbit, with selected windows available for independent collaborations.