Skip to content
View floflo777's full-sized avatar
21 followers · 11 following

Sponsoring

@antonk52

Achievements

Achievement: Public SponsorAchievement: Starstruckx2Achievement: Pull Sharkx3Achievement: Pair Extraordinairex4Achievement: QuickdrawAchievement: YOLO

Achievements

Achievement: Public SponsorAchievement: Starstruckx2Achievement: Pull Sharkx3Achievement: Pair Extraordinairex4Achievement: QuickdrawAchievement: YOLO

Block or report floflo777

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
floflo777/README.md

0xFlorent

Punk#3315 | Builder and explorer 🤠

Most of what I do starts from a self-hosted Ethereum node and a lot of reading old Solidity by hand.

White-hat recoveries

  • ~1,003 ETH unlocked from the failed 2016 HongCoin ICO, frozen for 9 years. I found the path (an unchecked overflow in the team's own admin function), proved it on a Foundry mainnet fork, and disclosed it to the original team, who executed it on-chain. No funds taken, no fee. See hongcoin-recovery.
  • ~19.3 ETH returned in earlier cases: a dormant 2018 ICO refund (5.1 ETH) and 7 expired Liquality HTLCs (14.2 ETH).

On-chain puzzles

  • 0.01 BTC claimed from various on-chain puzzles, most of it four Bitcoin key puzzles hidden in Kary Finlow-Bates' book (BIP39 mnemonic repair, XOR of printed hashes, English to Italian wordlist localization, triple-SHA256 of a hidden phrase), unsolved for years, plus a couple of smaller ones. See finlow-bates-solutions.
  • 0.5 ETH claimed on Teikhos bounty 735B, by recovering a winning ECDSA public key that had leaked in a failed 2022 attempt's calldata. See teikhos-735b.

Protocol security

  • 8 bugs (Critical and High) reported on the Akash BME incentivized testnet, each with a reproduction: stuck mints, vault, lease and escrow state inconsistencies, and an oracle config mismatch. Earned $320 in AKT as a rewarded tester. See akash-bme-testnet-bugs.
  • Ongoing differential research on Ethereum execution and consensus clients, and zkVM soundness.

DeFi and ZK

  • Won a $100,000 hackathon for a private lending protocol I built on Aleo, written in Leo. Ask me on X for details.

Contact

X @0xFlorent_ · ENS 0xflorent.eth

Pinned Loading

  1. hongcoin-recovery hongcoin-recovery Public

    White-hat recovery of ~1,003 ETH stuck in the 2016 HongCoin ICO contract

    Solidity

  2. claude-rag-skills claude-rag-skills Public

    Professional RAG development skills for Claude Code - audit, evaluate, optimize, and scaffold RAG pipelines

    33 3

  3. akash-bme-testnet-bugs akash-bme-testnet-bugs Public

    8 Critical/High bugs found on the Akash BME incentivized testnet, each with a reproduction

    Shell

  4. finlow-bates-solutions finlow-bates-solutions Public

    Solutions to four Bitcoin key puzzles hidden in Kary Finlow-Bates' blockchain book

  5. teikhos-735b teikhos-735b Public

    How the 0.5 ETH Teikhos 735B bounty was solved by recovering a leaked public key