Bloqarl | Zealynx

I stopped asking AI to find bugs. I've built an AI workflow that runs semi-automatically and consistently finds Critical issues.

I used this system alone in the @immunefi audit competition for @QuantusNetwork. It found a Critical issue nobody else did, and I finished 2nd out of 98 researchers.

Then, with two days left in the @Firelightfi Audit Competition, I ran it and found a paid High.

Same for the ENS Audit Comp. I launched it in the last two days and found me a Critical.

Honestly, I’m very proud of this AI workflow I've built. And I'm still improving it to work for Bug Bounties even more autonomously.

I already knew the system worked because it constantly finds issues in private client repos. But seeing it work in a public contest, with everyone looking at the same code, is different.

And yes, I genuinely need to start doing bug bounties.

I wrote an article explaining exactly how I did it, which models I used, what worked, and also what failed.

Btw, screenshot with proof below.

An AI agent that holds its own signing key isn't an agent. It's a hot wallet with a prompt.

One poisoned webpage and the balance is gone.

If it can sign, it shouldn't be the thing that decides what to sign.

A lender to an AI agent can be skipped with one fresh address.

Yesterday I reviewed a draft standard where a loan an agent took for a job gets repaid out of that job's payout. The repayment was tied to the agent's address, but the example escrow let the client name the payee on every payout. Pay the agent at a new address and the lender gets nothing.

The author agreed that afternoon and merged the fix by the evening 🔥

I’ve been delaying so much to start studying and getting deep into AI Red Teaming and AI Agents security that I’m 95% convinced of start streaming on YouTube while I learn and practice.

The idea would be that people keep me accountable and to go to a whole new level of learning in public.

I prepared half a year ago a whole repo with resources in form of a path and journey through different existing platforms.

I dare you to challenge me to an amount of streamed hours!

Who wants to see me to fail at streaming for the first time ever!?!??