AndrewMohawk⁽ⁿᵘˡˡ⁾ ✨ 𝓲𝓷 𝓿𝓮𝓰𝓪𝓼 ✨ (@AndrewMohawk) / X

AndrewMohawk⁽ⁿᵘˡˡ⁾ ✨ 𝓲𝓷 𝓿𝓮𝓰𝓪𝓼 ✨

12.9K posts

AndrewMohawk⁽ⁿᵘˡˡ⁾ ✨ 𝓲𝓷 𝓿𝓮𝓰𝓪𝓼 ✨

@AndrewMohawk

Sec/Madness @privy_io principal security , @_seal_org technical council prev: HoS @uniswap, D&R/IR @RobinhoodApp, IR @BitMEX, Built @Paterva Maltego with RT

New York, USA

Joined February 2008

Pinned
AndrewMohawk⁽ⁿᵘˡˡ⁾ ✨ 𝓲𝓷 𝓿𝓮𝓰𝓪𝓼 ✨
@AndrewMohawk
Dec 11, 2025
Fun react bug, (CVE-2025-55183) if you have a server side component and it explicitly or implicitly exposes a stringified argument you can get the source code for that function. Also found DoS, but reported it to vercel instead of meta and some else reported the next day 🙃
00:00
AndrewMohawk⁽ⁿᵘˡˡ⁾ ✨ 𝓲𝓷 𝓿𝓮𝓰𝓪𝓼 ✨
@AndrewMohawk
Aug 8
Uhhh @_JohnHammond , @endingwithali is looking for you
AndrewMohawk⁽ⁿᵘˡˡ⁾ ✨ 𝓲𝓷 𝓿𝓮𝓰𝓪𝓼 ✨
@AndrewMohawk
Aug 6
wordpress.org/news/2026/08/w… Another lil find for the latest Wordpress
AndrewMohawk⁽ⁿᵘˡˡ⁾ ✨ 𝓲𝓷 𝓿𝓮𝓰𝓪𝓼 ✨
@AndrewMohawk
Aug 6
Token usage: total=1,886,178 input=1,699,072 (+ 106,108,672 cached) output=187,106 (reasoning 91,845) About $67.16 used in 5.6-sol playing the CTF fwiw
AndrewMohawk⁽ⁿᵘˡˡ⁾ ✨ 𝓲𝓷 𝓿𝓮𝓰𝓪𝓼 ✨
@AndrewMohawk
Aug 6
Was such a fun ctf, was really neck and neck with one team (maybe @TheoriqAI ?) till the last minute! Thanks so much @Tenzai_Labs , looking forward to training my own models! Go play tomorrow and you can win another DGX!
AndrewMohawk⁽ⁿᵘˡˡ⁾ ✨ 𝓲𝓷 𝓿𝓮𝓰𝓪𝓼 ✨
@AndrewMohawk
Aug 6
Was such a fun ctf, was really neck and neck with one team (maybe @TheoriqAI ?) till the last minute! Thanks so much @Tenzai_Labs , looking forward to training my own models! Go play tomorrow and you can win another DGX!
Tenzai
@Tenzai_Labs
Aug 6
We have a WINNER! 🃏 @AndrewMohawk, of @privy_io, is the proud owner of a shiny new Nvidia DGX Spark , after getting to #1 on the Tenzai CTF Leaderboard at Black Hat. Jealous, much? Think you have what it takes? You have another shot tomorrow at Booth 1561 ---> get a code, and