Client portal
AI security · offensive research

AI security and penetration testing, as reproducible research.

SIRENBOW is an independent research group working on AI system security and full-stack penetration testing. We publish our methodologies, vulnerability analyses, and field reports in full — every conclusion traceable, every result verifiable.

Focus areas
AI · Web · Cloud · Blockchain · Mobile
Research
1 published, fully reproducible
Disclosure
CVSS · CWE · MITRE ATT&CK

Latest research

All research →
2026-07-23
The missing check: a full-chain post-mortem of the $7.54M Verus bridge exploit
The Verus↔Ethereum bridge was drained for a second time. The attacker spent 0 ETH on the Ethereum side and forged a single cross-chain import. The root cause is one line that was never written: the bridge checked that the data was intact, but never that the withdrawal was backed by equal value.
CROSS-CHAIN-BRIDGEVALUE-CONSERVATIONPOST-MORTEM
11 min

Security reports

Client engagement reports are private. Public summaries and redacted case studies will appear here.