anshh.bohara·Sep 20How I Found an Undocumented GraphQL Endpoint Leaking Home Addresses of French Company Owners (EUR…The documented unauthenticated endpoint had 1 query. The undocumented one had 7 queries and 7 mutations. One of those queries returned…
Ishaq Ahmad Mohammad·Aug 31Why Is an API Key Not the Same as Delegated Authority for an AI Agent?If you ask a standard LLM agent to monitor prices, negotiate vendor deals, or manage bounties, the current industry status quo forces you…
Amir Mohseni·Aug 16Critical Security Assessment of Veilo Privacy Protocol Smart ContractsPrepared for: Veilo Bug Bounty Program (Superteam) Date: August 16, 2026 Repository Analyzed: VeiloSolana/privacy-program Mainnet Program…
EMTIAZ AHMED 🍥·Apr 17Bug Bounty 2026: Why the “End of the World” is Actually a $500k OpportunityThe “death” of bug bounty hunting has been predicted every year since 2015. Yet, here we are in 2026, and the industry is more lucrative —…
