Immunefi
truthlover
- All-time rank
- 61st
- Total earnings
- $324,939
- Status
- Top Ranked
- Bug bounty reports
- 23
- Audit competition reports
- 6
- Member since
- 6 Feb 2026
In God we trust, all others must verify their code.
I hunt vulnerabilities in blockchain protocols and smart contracts. Since January 2026 that has meant 60 paid findings across Immunefi and HackenProof, 34 of them critical or high.
- Immunefi all-time leaderboard
- 61st
- Bounties earned on Immunefi and HackenProof
- $453,339
- HackenProof leaderboard
- 19th
- Critical findings paid
- 7
Sixty findings, by severity
Immunefi bug bounties 23
CCCHHHHHHHHHHHHMMMMLLLL
Immunefi audit competitions 6
HHHMML
HackenProof bug bounties 31
CCCCHHHHHHHHHHHHMMMMMMMMMLLLLLL
- Critical7
- High27
- Medium15
- Low11
| Source | CriticalC | HighH | MediumM | LowL | Total |
|---|---|---|---|---|---|
| Immunefi bug bounties | 3 | 12 | 4 | 4 | 23 |
| Immunefi audit competitions | 0 | 3 | 2 | 1 | 6 |
| HackenProof bug bounties | 4 | 12 | 9 | 6 | 31 |
| All | 7 | 27 | 15 | 11 | 60 |
Standing
HackenProof
@0xtruthlover
- Rank
- 19th
- Total earnings
- $128,400
- Reputation
- 2,886
- Identity
- KYC verified
- Programs influenced
- 42
- Achievements
- Fatality, First Blood, HackenProof Vanguard
- Member since
- 7 Jan 2026
- January: paid report
- February: paid report
- March: paid report
- April: paid report
- May: no paid report
- June: paid report
- July: paid report
- August: paid report
- September: no paid report
Where the findings landed
- Firedancer V1
Solana validator client written in C. A $1,000,000 audit competition over 636,000 lines of code. Ranked 21st with 6 valid bugs, 3 of them high.
Immunefi - Lido
Liquid staking protocol.
Immunefi - Hydration
DeFi chain in the Polkadot ecosystem.
Immunefi - deBridge
Cross-chain bridge and messaging.
Immunefi - AtomOne
Community fork of the Cosmos Hub. Top 5 on the program leaderboard.
HackenProof - Walrus Protocol
Decentralized storage network. Top 5 on the program leaderboard.
HackenProof - Cronos
Blockchain protocols.
HackenProof - Bucket Protocol
Smart contracts.
HackenProof - Calyx
Smart contracts.
HackenProof
Plus 7 more programs on Immunefi, 3 of them private, and 37 more on HackenProof.
On the record
“This security researcher has been absolutely crushing it since joining Immunefi in February 2026.”
“This SR joined Immunefi in February 2026 and already has $67,000 in total bounties.”
Immunefi, .Post on X. “A $100,000 reminder that great research gets rewarded.”
HackenProof, .Post on X. “$100,000. That’s what @0xtruthlover just scored for finding a critical vulnerability.”
Immunefi, .Post on X.
Writing
All writing →- High severity:A block one Solana client killed and the other voted forA validly signed block from one leader can split Solana's two validator clients onto forks that won't rejoin on their own.
- High severity:40,400 signature checks for a Stellar transaction nobody paid forAn invalid, fee-free Stellar transaction could make every validator that saw it run 40,400 Ed25519 checks on one shared thread.
- Medium severity:A free Flow dry run that would take 7,300 years to finishFlow's EVM dry run never charged for gas, so one free script could start a loop on an Access Node that no timeout could stop.
Available for hire
Open to security review work on blockchain protocols, smart contracts and web apps. Reach me on X.
@0xtruthlover