About

Zayne Zhang is Co-Founder and CEO of Hacktron. He has been credited with 15 CVEs, including three in the Node.js HTTP parser, and ranked first in the Singapore Ministry of Defence’s 2022 bug bounty and in three private Singapore government programs. He placed second at the DEF CON CTF finals in 2023 and 2024 with Blue Water, and founded Social Engineering Experts, Singapore’s top-ranked CTF team. Previously, Zayne did security research at TikTok and audits for Cure53. He began his career at the Singapore Armed Forces’ Cyber Defence School, where he graduated top of his cohort. He studied computer science at Cambridge with first-class results before leaving to start Hacktron.

Mohan Pedhapati is Co-Founder and CTO of Hacktron. He has found remote code execution in Discord, VS Code and Element, and his ElectroVolt research, presented at Black Hat USA and DEF CON in 2022, compromised 20 widely used Electron apps, including Microsoft Teams. At Hacktron his team earned $170,000 of the more than $1 million Vercel paid for React2Shell firewall bypasses, and he found critical vulnerabilities in OpenAI’s ChatGPT Atlas and Perplexity’s Comet browsers. Previously, Mohan was a senior security auditor at Cure53 and founded Electrovolt, a security consultancy that grew to €1.5 million in revenue.

Harsh Jaiswal is Co-Founder and Chief Research Officer at Hacktron. His remote code execution findings on Meta’s and Apple’s servers earned bounties of $115,000 and $50,000. At Hacktron he and Mohan found CVE-2026-1731, a pre-authentication RCE in BeyondTrust Remote Support with a CVSS score of 9.9. He led the research that reached OpenAI’s internal code repository through employees’ ChatGPT and Codex accounts, and the audit that gained root on GNU Savannah, which hosts Bash. Previously, Harsh was a security researcher at ProjectDiscovery, where he published critical vulnerabilities in GitHub Enterprise, GitLab, Ivanti and Kubernetes Ingress-NGINX. Earlier, he was a security engineer at Vimeo and Zomato. He began hunting bugs on HackerOne in 2016.

Fabian Faessler is Head of Agent Engineering at Hacktron. He is LiveOverflow, whose YouTube channel teaches hacking to more than a million subscribers, and he co-founded Hextree with Thomas Roth. Google sponsors Hextree’s Android hacking courses, which the two built with Google’s Mobile Vulnerability Reward Program team. Previously, Fabian was a senior penetration tester at Cure53, where his audits from 2013 to 2023 included 1Password, Mullvad, SecureDrop and Ethereum’s Mist wallet. He holds a master’s in computer science from TU Berlin.