Pinned post
@QED_Audit found CVE-2026-19174, an integer overflow in V8 that gives you arbitrary code execution in Chrome. The bug is one line of constant arithmetic. It survived 3.5 years of fuzzing, manual audit, and LLM-driven review. (1/n)
QED Audit
Verified account This account is verified. Learn more@QED_Audit
Concluding web3 security.
6 Following 1.1K Followers 104 Posts
Latest posts 5
*6 targets
We didn't make it into this year's Pwn2Own, but we still pwned five targets.
Hopefully we'll be able to publish the vulnerabilities soon, along with walkthroughs of how we broke each one.
Had a lot of fun collaborating with @qvipinb at @vert3x_io 🫡View quoted post on X
We didn't make it into this year's Pwn2Own, but we still pwned five targets.
Hopefully we'll be able to publish the vulnerabilities soon, along with walkthroughs of how we broke each one.
Had a lot of fun collaborating with @qvipinb at @vert3x_io 🫡
Hopefully we'll be able to publish the vulnerabilities soon, along with walkthroughs of how we broke each one.
Had a lot of fun collaborating with @qvipinb at @vert3x_io 🫡
1/
We found a full collision for the Poseidon1 Collision Prize instance and submitted it on July 31.
Two different messages, identical 16-word output after all 28 rounds, verified on the Initiative's official implementation.
The technical breakdown and full story ⬇️
We found a full collision for the Poseidon1 Collision Prize instance and submitted it on July 31.
Two different messages, identical 16-word output after all 28 rounds, verified on the Initiative's official implementation.
The technical breakdown and full story ⬇️
We found a key-recovery attack on TALUS v4, a PQ threshold signature scheme in NIST’s Threshold Call, using @QED_Audit’s bug finder.
Huge thanks to the authors for the quick response and fix in v5.
📄 Attack: eprint.iacr.org/2026/1668
🛠️ TALUS v5: arxiv.org/abs/2603.22109…
Huge thanks to the authors for the quick response and fix in v5.
📄 Attack: eprint.iacr.org/2026/1668
🛠️ TALUS v5: arxiv.org/abs/2603.22109…
