V12 Found a Critical Bug in Better Auth
Better Auth kept OAuth state and magic-link tokens in the same table, so an attacker could redeem their own OAuth state as a magic-link token and sign in as any user. Fixed in Better Auth 1.7.7.
Posts
Rick de Jager, V12 Seokchan Yoon, V12 V12 Found Two High-Impact Vulnerabilities in LNbits
An authentication-cache bypass gave scoped API tokens wallet-admin access, and PayPal payments were credited before capture. Both are fixed in LNbits v1.6.0.
Renwa, V12 The XSS inside your favorite iOS app
How a default WKWebView implementation makes thousands of apps vulnerable to sandboxed HTML/CSS injection or XSS.
Nihal, V12 Compromising Signal's Contact Discovery Enclave
V12 found two critical object-lifetime vulnerabilities that allow the untrusted host server to break the enclave boundary.
William Bowling, V12 Ambire Wallet: Five vulnerabilities V12 found across provider and approval boundaries
V12 found five vulnerabilities while reviewing Ambire Wallet v6.13.4, a browser extension for Ethereum and EVM networks.
V12 How to raise a $10M seed round
We raised $10M from Electric Capital. We're building dangerously powerful offensive security tools, and recently won a $2.5M bug bounty—the largest bounty ever received by an AI agent.
