Hacktivity
Every decision, on the record.
Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.
Disclosed
1
Paid in this view
$665k
Filtered by program:voltgrid ×
- highPGN-10463
Settlement amount mutated after signature via delimiter-free field concatenation
The HMAC covered concatenated fields with no separator, so a shifted boundary between amount and session id verified under the original signature.
$16,000Resolved
Hacktivity
Connecting