Balvant.in Contact me ↗

About

Balvant Chavda (0x0doteth)

Who is 0x0doteth?

0x0doteth is the security research handle of Balvant Chavda (also written as Chavda Balvant). Balvant is an independent cybersecurity researcher from India who specializes in vulnerability discovery, bug bounty hunting, and responsible disclosure.

Under the handle 0x0doteth, Balvant has published 11+ CVEs affecting products from Adobe Commerce, Adobe Content Credentials, and Nextcloud. He has been acknowledged in security Hall of Fame programs by 25+ organizations including Google, Microsoft, Apple, Meta, Amazon Web Services, Adobe, GitHub, Intel, Coinbase, PayPal, Salesforce, Philips, the UK Government, the Dutch Government, and NCIIPC (Indian Government).

The username 0x0doteth appears on HackerOne, Adobe Security Bulletins (APSB26-49, APSB26-73, APSB26-92, APSB26-111), Nextcloud Security Advisories, and GitHub Security Advisories as a credited vulnerability reporter.

Research Areas

Balvant Chavda (0x0doteth) researches vulnerabilities across:

  • Web application security (SQL injection, XSS, authentication bypasses)
  • Android and iOS mobile security (WebView exploits, deep link hijacking, OAuth interception)
  • Smart contract auditing (Solidity, DeFi protocols, minting vulnerabilities)
  • Cloud security (AWS, Azure misconfigurations)
  • CVE research and responsible disclosure

Published CVEs by Balvant Chavda (0x0doteth)

Hall of Fame and Security Acknowledgements

Balvant Chavda (0x0doteth) has been recognized by the following organizations for responsible vulnerability disclosure:

Google, Microsoft, Apple, Meta, Amazon Web Services (AWS), Adobe, Nextcloud, Intel, GitHub, Coinbase, PayPal, Salesforce, Philips, NCIIPC (Indian Government), UK Government, Dutch Government, Visma, Lenskart, Reckitt, Baloise International, Robeco, Rechtspraak (Netherlands Judiciary), ResMed, Bloom & Wild, Evri, and more.

Connect with Balvant Chavda (0x0doteth)