PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

From Mechanic to Top Hacker: Zakaria @0x0w1Pr0xYDEADcAFe (former MrOwl), Success Story

hackenproof.com | blog | #bug-bounty | #web3 | #web-security | #mobile-security | #security-researcher | #career-story | #hackenproof
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Zakaria Eddafri's origin story: from automobile mechanic to top-30 HackenProof hunter with 49 paid reports, self-taught on an Android phone after his computer broke.
Published
Collected

Related coverage

blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · hackenproof.com
Sui Move Smart Contract Security: How Shared Objects Leak and Ownership Breaks
Sui’s VM protects owned objects, not shared ones. See how shared-object, Kiosk, and PTB bugs break protocols, plus a full Sui Move audit checklist.
blog · hackenproof.com
Smart Contract Security in 2026: Risks, Best Practices, and Audits
Top smart contract security risks in 2026, best practices that prevent exploits, and when to audit your contracts. A practical guide for founders and CTOs.
blog · hackenproof.com
Hacker Q&A with Gowtham Ponnana
A Q&A with 18-year-old researcher Gowtham Naidu Ponnana, Head of Security at crypto exchange Cryptoforce, on his path from a school phishing hack to a CVSS 10 account takeover.
research · hackenproof.com
The Light in the Code: Alex Babits’ Journey Through Web3 Security
A profile of Web3 security researcher Alex Babits: a former mechanical engineer ranked #12 on HackenProof with 41 paid reports, focused on cryptography and on-chain privacy.
Back