Register and share your invite link to earn from video plays and referrals.

Cantina 🪐
@cantinasecurity
We specialize in cyber offense and defense. Our AI pentesting agent is #1# on HackerOne US. Found bugs in Apple, Anthropic, Coinbase + more.
24 Following    21.2K Followers
today we're releasing apex-flash-1, our first open-weights model for security research post-trained on real vulnerabilities we found and got paid for. we are also releasing the abliterated variant for researchers who want fewer refusals in their own authorized workflows. how we built it:
Show more
0
91
1.5K
170
Forward to community
rogue agents and prompt injection are currently considered the biggest unresolved threat in security. picture this: you ask claude code to review a PR, the agent reads a compromised package and gets tricked to exfiltrate your environment keys. we are building cyber defense to solve this exact kind of problems. Clarion can ingest any kind of telemetry, integrate with platforms, triage and resolve issues at machine speed. in this example Clarion is set up to ingest agent telemetry. the developer was using Claude Code and a prompt injection made the agent post his AWS keys to a remote attacker server. the attacker then logged into his AWS account using that same key. Clarion is able to correlate actions across different environments and take action. here it detected the exfiltration via Claude telemetry, confirmed the abuse by correlating CloudTrail with auth from a differnet IP, contained the host using CrowdStrike Falcon, blocked the attacker address and escalated the issue. all this in ~6 minutes. a human operator alone would have not found out in weeks.
Show more
Researchers, fresh bug bounty just landed @tenbinlabs is building a tokenization protocol that brings assets and their underlying liquidity on-chain, starting with yield-bearing BRL and MXN, alongside commodities like gold. the core code is live for hunting on Cantina. Who’s taking the first pass? Find a crit and receive up to $40,000 USDC:
Show more
We spent years finding vulnerabilities before attackers did. That was the easy part. Teams already know what's broken. Nobody has the bandwidth to close it. Today we raised $16.5M to make Cantina the security workforce for your security workforce.
Show more
What's the most expensive place to find a bug in financial infrastructure? The bridge. @MezoNetwork just opened a $500,000 bug bounty on Cantina, and the cross-chain bridge is one of four special focus areas. Full program details:
Show more