Technical Blog

When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF

LucidBit Labs research shows how Samsung's FIVE integrity subsystem exposed an app-reachable kernel use-after-free with multiple exploit-relevant primitives.

Remote Unauthenticated Memory Safety Flaw in Firedancer's Packet Path

LucidBit Labs discovered a remote unauthenticated memory safety flaw in Firedancer's XDP packet path, recovered a realistic GRE delivery path, and earned a $100,000 Immunefi bounty after demonstrating remote crash impact.

Strong Cryptography, Weak Assumptions: Breaking Trust in Mobile Crypto Wallets

LucidBit Labs vulnerability research reveals how application-level failures in a mobile crypto wallet bypassed strong cryptography, exposing users to real financial risk.

Bypassing Commercial RASP and Root Detection - A Reality Check

We bypassed leading Android root-detection SDKs and show what that means for banking, government-ID and anti-fraud apps running on rooted devices.