Skip to content
View floflo777's full-sized avatar
24 followers · 12 following

Sponsoring

@antonk52

Achievements

Achievement: Public SponsorAchievement: Starstruckx2Achievement: Pull Sharkx3Achievement: Pair Extraordinairex4Achievement: QuickdrawAchievement: YOLO

Achievements

Achievement: Public SponsorAchievement: Starstruckx2Achievement: Pull Sharkx3Achievement: Pair Extraordinairex4Achievement: QuickdrawAchievement: YOLO

Block or report floflo777

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
floflo777/README.md

0xFlorent

Punk#3315 | Builder and explorer 🤠

Most of what I do starts from a self-hosted Ethereum node and a lot of reading old Solidity by hand.

White-hat recoveries

  • ~1,003 ETH unlocked from the failed 2016 HongCoin ICO, frozen for 9 years. I found the path (an unchecked overflow in the team's own admin function), proved it on a Foundry mainnet fork, and disclosed it to the original team, who executed it on-chain. No funds taken, no fee. See hongcoin-recovery.
  • ~19.3 ETH returned in earlier cases: a dormant 2018 ICO refund (5.1 ETH) and 7 expired Liquality HTLCs (14.2 ETH).

On-chain puzzles

  • 0.01 BTC claimed from various on-chain puzzles, most of it four Bitcoin key puzzles hidden in Kary Finlow-Bates' book (BIP39 mnemonic repair, XOR of printed hashes, English to Italian wordlist localization, triple-SHA256 of a hidden phrase), unsolved for years, plus a couple of smaller ones. See finlow-bates-solutions.
  • 0.5 ETH claimed on Teikhos bounty 735B, by recovering a winning ECDSA public key that had leaked in a failed 2022 attempt's calldata. See teikhos-735b.

Protocol security

  • 8 bugs (Critical and High) reported on the Akash BME incentivized testnet, each with a reproduction: stuck mints, vault, lease and escrow state inconsistencies, and an oracle config mismatch. Earned $320 in AKT as a rewarded tester. See akash-bme-testnet-bugs.
  • Ongoing differential research on Ethereum execution and consensus clients, and zkVM soundness.

DeFi and ZK

  • Won a $100,000 hackathon for a private lending protocol I built on Aleo, written in Leo. Ask me on X for details.

Contact

X @0xFlorent_ · ENS 0xflorent.eth

Pinned Loading

  1. hongcoin-recovery hongcoin-recovery Public

    White-hat recovery of ~1,003 ETH stuck in the 2016 HongCoin ICO contract

    Solidity

  2. open-crypto-puzzles open-crypto-puzzles Public

    Unsolved crypto puzzles worth ~10 BTC, ~12 ETH and ~1,900 AR still on-chain: escrow addresses, author clues, and my research on each. A few solved, with payout proofs.

    Python 173 64

  3. akash-bme-testnet-bugs akash-bme-testnet-bugs Public

    8 Critical/High bugs found on the Akash BME incentivized testnet, each with a reproduction

    Shell

  4. claude-rag-skills claude-rag-skills Public

    Professional RAG development skills for Claude Code - audit, evaluate, optimize, and scaffold RAG pipelines

    34 4