Advertise on podcast: bountyhunt3rz: life on the blockchain

riptide & flacko take a tour inside Grego AI’s lab including the origin story, why riptide co-founded the company, the AI security narrative, the future of bug hunting with AI, how their depth-first tool stacks up against the rest of the AI-sec space, flacko's humble beginnings and his journey with Grego AI, random discussion about motorcycles, and much, much more …

riptide & n4nika discuss his fluency with almost every programming language on the blockchain, building your skillz via ASM and C, AI on blockchains, offloading investor risk with insurance, hack volume YoY, effectively using AI + manual review, how and why to touch grass, and much, much more ...

Marco and riptide discuss how difficult it is to get paid hunting bugs, publishing on your terms, getting ghosted for months on end, bear market bounty hunting thoughts, disclosures, BB arbitration, how marco looks like Kain from C&C, and much, much, more ...

riptide and philbugcatcher discuss AI, AI, and more AI, transitioning from management consulting to bug hunting, why top notch human auditors will always have a place, adapt or die in crypto, taking risks to succeed, and much, much, more ...

riptide & windhustler discuss how he runs his audit business Burrasec, incentivizing your auditors, methods and tactics, SR talent, is Croatia a new SR hotspot, competing amongst other audit firms, thoughts about specialized audit business models, targeted bounty hunts as a service, and much, much, more ...

riptide & drastic watermelon lounge by the pool at the faena hotel in buenos aires and discuss devconnect, yAudit, CTFs, security outlook, competitions, getting shafted on a juicy bug bounty, judges must be crazy, auditor profit maxxing, AI submissions, and probing the mystery of why each time you order the same type of coffee in buenos aires it changes, and much, much, more ...

riptide & mitchell amador (CEO of Immunefi) discuss the IMU token, it's flywheel effect, and how you can invest in security researchers, why L1s are back in fashion, mitchell's view of 1000 blockchains, security and the future of our industry, the story of Steemit from the ICO era, deep thinking and the bigger picture, cosmology and finding a greater purpose, nicotine maxxing and much, much, more ...

riptide & j4x discuss coming from cybersec and web2 CTFs to web3, a deep dive on rust, the contest game before and now, focusing on less popular languages, nomad bug hunting, why failing high school french and working at a call center helped him as a bug hunter, and much, much, more ...

riptide & tim discuss competitions at immunefi, conditional pots, making the game fair, backroom dealing and shift protocols, why SRs should participate, proxy negotiation, and much, much, more ...

riptide & patrick Patrick Collins (co-founder of @cyfrinaudits, @soloditofficial, @codehawks, and @cyfrnupdraft) discuss how he got here and why he's building in crypto, web3 security and where its going, contests and codehawks, properly incentivizing bug hunters, how money drives decisions, his motivation behind educating bug hunters, a juicy ALPHA DROP for the gym, and much, much, more ...

riptide and alix40 discuss soloaudit: his public good contribution to the security space where devs can find independent security researchers for hire, why valkyrisecurity is offering web2 & web3 security reviews, web2 bug hunting vs web3, web2 defi attack points, how we make this space secure for both grandma and JP Morgan, AI audits, and much, much, more ...

riptide & adrian hetman discuss running the triage department at immunefi, how to write the best bug report, using LLMs wisely, how your report is viewed by triagers and the protocol team, why reports get rejected, cleaning your brain's cache to improve your bug hunting, a juicy ALPHA drop, and much, much, more ...

riptide & montyly (josselin feist, humble slither creator) discuss his tenure at trailofbits, web2 vs web3 security posture, security tooling, internalizing security and solving the human problem, concolic execution/hybrid fuzzing, using LLMs as a force multiplier, an ALPHA drop, why putting underscores in your file names is 32337, and much, much, more ...

riptide & the Obsidian audit team (0xjuann & 0xspearmint) discuss their Fraxlend high severity bug find including a deep dive into ERC4626 vaults, helping hyperliquid builders with their hyper-evm-lib public good, how they use automated tooling during audits, why you should drop out of med school to be an auditor, defi strategies and risk tolerance, alpha drops, and much, much, more ...

riptide & mackenzie discuss the inner workings of immunefi, what happens behind the scenes as soon as you click submit on that juicy bug report, mackenzie's unique omniscient view of bug reports and bug hunters, how to up your negotiation game to get paid, and much, much, more ...