Bug Bounty Hunter, Red Team @ BT6 | 🥈 2x Google bugSWAT 2nd Place | 🥇 1x Google bugSWAT Best AI VRP Researcher

Brazil
Joined November 2015
btw that's the reason I have a weird Discord profile pic now, I am too lazy to change it back
Been having way too much fun hacking games lately. GLM 5.3 + steering found a really cool bug, then something downstream broke it :( Big lesson: AI is great at finding leads but bad at judging severity. Here it called a CRITICAL a LOW. 🧵⬇️
1
5
630
Been having way too much fun hacking games lately. GLM 5.3 + steering found a really cool bug, then something downstream broke it :( Big lesson: AI is great at finding leads but bad at judging severity. Here it called a CRITICAL a LOW. 🧵⬇️
6
3
1
100
6,167
But a colleague (@rafabyte_) says there might be a Discord bypass to set your avatar to any URL. If that’s real, I get URL control back, and the whole thing reopens. Future work. Updates soon. Just wanted to share a few learnings 🫡
1
2
338
oh i almost forgot total GLM API spend for this whole thing? about $5. a critical-grade bug chain for the price of a coffee. the future is weird and i’m here for it.
1
5
318
Is anyone building a collaborative open dataset of prompts that cause AI refusals? I want to build a benchmark.
2
1
16
976
guess who screwed up
7
1
65
3,423
This is such a good question, damn
How do you all feel about this? == if someone tells you that they need to have their agents research something before they can form an opinion on a topic == (I'll tell you my perspective in the comments later but I dont wanna poison anything)
1
6
2,301
I give up, I gotta vibe code my own game too
here's how to build a game like this with Claude Opus 5.5 + Blender + Unity 6... the trick is preparing everything before Opus writes a single line, but there's a smart way to set it up: - step 1: connect Claude Code to Unity and Blender through MCP - step 2: write one big brief: the world, the mechanics, the UI, the mood, plus reference images - step 3: add a CLAUDE.md with your rules, and design docs as the single source of truth so Opus never guesses - step 4: split the work into subagents: design, modeling, textures, and one reviewer that only looks and approves - step 5: Opus models the assets in Blender: the island, palms, pier, boat, fishing hut - step 6: it builds a greybox in Unity first, plays it, fixes it, and repeats - step 7: mechanics one layer at a time: walking, casting, bait, catching, day and night - step 8: you watch and give feedback with a reason: "too dark at dusk", "cut the water stripes" and the two rules that make it work... the agent that builds is never the one that approves every fix gets written into a file, so the next project starts smarter start small, a fishing game is the perfect first project
12
1,155
Vitor Falcão "busfactor" retweeted
I built a game and I can't stop playing it, I just traded for the HackerOne card Every wikipedia article is a card and we're up to 600+ players so far Come try it! ❤️ kosmora.io/s/1hn3Ih4Rpk3j2YN…
4
6
3
29
7,076