🤝
Make a deal with CryptoCat
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Followers
509
Account age
3 yrs
💰 Suggested sponsorship rate
$40 – $65 / sponsored post
Estimated from audience size & typical reach — every deal is negotiable and held in SocialDB escrow.
🎁 Free analysisfor CryptoCat
Known for
📊 Post engagement
2
Avg engagement / post
0.4%
Engagement vs followers
Jun 2023
On Bluesky since
🔥 Top post: WP2Shell coming soon to @metasploit-r7.bsky.social 👀 · 6 likes + reposts
📊 Activity & format
Posting cadence
1.3 / week
A lower-frequency account — each post lands with more weight.
Content mix
Mostly text
Recent: 10 text · 0 image · 2 video.
Follower / following
5.9×
Follows 86 back. A strong ratio — an audience that follows them, not a follow-for-follow network.
Recent posts
View on Bluesky ↗
▶
🔥 Top post
WP2Shell coming soon to @metasploit-r7.bsky.social 👀
Write-up for a (out of scope 😕) stored XSS [A]I found in the Quiz and Survey Master plugin 😼
cryptocat.me/blog/researc...
Bonus episode of the @rapid7.com podcast this week! @stephenfewer.bsky.social joins @fulmetalpackets.bsky.social and myself to talk about all things #Pwn2Own 😎
I also show off a P2O inspired CTF challenge I made for @hackinghub.bsky.socia…
Write-up for a stored XSS [A]I found in the UsersWP plugin 👇
cryptocat.me/blog/researc...
Last week I posted about the KindaRails2Shell (CVE-2026-66066) @metasploit-r7.bsky.social module I put together. Here's a @rapid7.com technical analysis to go with it! 💜
www.rapid7.com/blog/post/ra...
▶
💎 🚄 2️⃣ 🐚 🔜 @metasploit-r7.bsky.social
Another Essential Addons bug.. with a much smaller bounty! 😁
A Contributor could poison the site-wide Reading Progress bar with JavaScript. Once their post was published, moving over the bar on an unrelated page ran the payload in the vis…
It might not be RCE in core, but I was awarded an $859 bounty for this bug 🙏
When entering a victim email into a password reset field, you can inject a newline and [silenty] BCC the attacker on the password reset email 😼
cryptocat.me/blo…
Another day, another WP plugin writeup 🫡
cryptocat.me/blog/researc...
It took a while, but the third (and final) vulnerability I reported in ProfileGrid has been published 💥
cryptocat.me/blog/researc...
I found a stored XSS in the slideshow feature of Hedgedoc. It was the preview release, so no CVE (or patch), but here's the writeup anyway! 🦔
cryptocat.me/blog/researc...
Here's the writeup for CVE-2026-53943, a cache poisoning -> XSS vuln I found in Ghost CMS 👻
cryptocat.me/blog/researc...
▶
💎 🚄 2️⃣ 🐚 🔜 @metasploit-r7.bsky.social
Another Essential Addons bug.. with a much smaller bounty! 😁
A Contributor could poison the site-wide Reading Progress bar with JavaScript. Once their post was published, moving over the bar on an unrelated page ran the payload in the vis…
It might not be RCE in core, but I was awarded an $859 bounty for this bug 🙏
When entering a victim email into a password reset field, you can inject a newline and [silenty] BCC the attacker on the password reset email 😼
cryptocat.me/blo…
Another day, another WP plugin writeup 🫡
cryptocat.me/blog/researc...
It took a while, but the third (and final) vulnerability I reported in ProfileGrid has been published 💥
cryptocat.me/blog/researc...
I found a stored XSS in the slideshow feature of Hedgedoc. It was the preview release, so no CVE (or patch), but here's the writeup anyway! 🦔
cryptocat.me/blog/researc...
Here's the writeup for CVE-2026-53943, a cache poisoning -> XSS vuln I found in Ghost CMS 👻
cryptocat.me/blog/researc...
🦋 Handle & authenticity
✅ Domain-verified
@cryptocat.me
The handle is the domain cryptocat.me. On Bluesky a domain handle proves the owner controls that website — so this is verifiably the real cryptocat.me account, not an impersonator.
On Bluesky since
Jun 2023
An early adopter from the invite-only beta (before the Feb 2024 public launch) — an original, established account.
💡 Facts
🗓️Joined Bluesky in 2023 — 3 years ago.
👁️Averages 2 views per post.
📤Posts about 1.3× per week.
🕵️ Fake follower check
Estimated66/100
Good
Credibility score
89%
Real
Real audience
Low
Fake-follower risk
High
Data confidence
- Est. 89% real, active audience · Low fake-follower risk.
- Engagement (~0.4% of followers engage each post) is around typical for Bluesky.
- Established account (3+ years old).
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
Security Researcher @rapid7.com 😈
Hacking Content @ https://yt.cryptocat.me 💜
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →
Bluesky
＋
Kostas Giannopoulos Photography
@kostasphoto.bsky.social
509
Followers
Bluesky
＋
The Birds of America
@thebirdsofamerica.bsky.social
509
Followers
Bluesky
＋
GM-Tom|PNGTuber
@gamemastertom.bsky.social
509
Followers
Bluesky
＋
Yvonne Shieck
@yshieck.bsky.social
509
Followers
Bluesky
＋
Vibeform (TEAM MYSTERY ‘26)
@vibeformnet.com
509
Followers
Bluesky
＋
pierre
@upint-games.itch.io
509
Followers
Frequently asked questions
How much does CryptoCat charge for a sponsorship?
CryptoCat hasn't published fixed prices yet. Send a proposal through SocialDB and agree terms directly — your payment is held in escrow until the work is approved.
How do I contact CryptoCat for a brand deal or collaboration?
Send a paid deal or collab request right here on SocialDB — we notify CryptoCat, and once they accept, your payment is held safely in escrow and released when the work is approved. You don't need to track down an email.
How many followers does CryptoCat have?
CryptoCat has 509 followers on Bluesky.
✉ Message CryptoCat
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with CryptoCat
Booking an event / appearance is a Pro feature. Upgrade to book CryptoCat for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ CryptoCat gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
🚀
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Bluesky's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove