Skip to content

Instantly share code, notes, and snippets.

View ep0chzer0's full-sized avatar
🎯
Focusing

ep0chzer0

🎯
Focusing
View GitHub Profile
@ep0chzer0
ep0chzer0 / Dockerfile
Last active January 17, 2026 00:33
PoC: Emergency Withdrawal Accounting Gap - Kinetiq Protocol (CWE-691)
# Vulnerability PoC: Emergency Withdrawal Accounting Gap
# Uses official Foundry image for reproducible testing
FROM ghcr.io/foundry-rs/foundry:latest
WORKDIR /poc
# Copy PoC files (run-poc.sh should be executable before copying)
COPY --chmod=755 . /poc/
@ep0chzer0
ep0chzer0 / 2_run.sh
Last active January 14, 2026 01:49
ECDSA 2PC Timing Side-Channel → Private Key Recovery PoC (cb-mpc)
#!/bin/bash
#
# ECDSA 2PC Timing Side-Channel Attack - Reproduction Script
# Target: cb-mpc (Coinbase)
#
set -e
echo "============================================================"
echo "ECDSA 2PC Timing Side-Channel → Key Recovery PoC"
echo "============================================================"
@ep0chzer0
ep0chzer0 / README.md
Last active January 12, 2026 14:37
PayloadsQueue Data Race PoC - op-node EngineController (Optimism Bug Bounty)

PayloadsQueue Data Race - PoC

Vulnerability Summary

A data race exists in op-node's EngineController.PeekUnsafePayload() where the non-thread-safe PayloadsQueue is accessed without mutex protection.

Field Value
Component op-node
File op-node/rollup/engine/engine_controller.go