How Your NFTs Could Have Been Stolen in Just One Click

Authorization bypass due to cache misconfiguration

The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover

Exploiting Broken Authentication Control In GraphQL

Lessons Learned From Exposing Unusual XSS Vulnerabilities

Universal Code Execution by Chaining Messages in Browser Extensions