Explore
Every public audit report, paper, talk, podcast, and policy comment we've shipped, searchable in one place.
Major clients · repeat engagements
1020 results
Filters
1020 results
let-fate-decide
solana-vulnerability-scanner
c-review
Kiln Lagoon Vault Diff Review
audit-augmentation
devcontainer-setup
diagramming-code
differential-review
genotoxic
graph-evolution
sharp-edges
trailmark
trailmark-structural
trailmark-summary
agentic-actions-auditor
burpsuite-project-parser
codeql
designing-workflow-skills
dimensional-analysis
dwarf-expert
entry-point-analyzer
firebase-apk-scanner
fp-check
git-cleanup
insecure-defaults
interpreting-culture-index
mutation-testing
sarif-parsing
seatbelt-sandboxer
second-opinion
semgrep
semgrep-rule-creator
semgrep-rule-variant-creator
skill-improver
supply-chain-risk-auditor
zeroize-audit
Ripple Labs XRP Ledger Confidential Transfer
PyPI Warehouse
Franklin Templeton BenjiSwap Differential Review
Gensyn Buyback-and-Burn Vault
Gensyn Bridged Token
Gensyn Delphi Dynamic Paramutuel Markets
cosmos-vulnerability-scanner
crypto-protocol-diagram
mermaid-to-proverif
vector-forge
aflpp
gh-cli
Open Home Foundation SecureTar v3
Anza BLS Signatures
Shape TokenLock
EthStaker Deposit CLI
testing-handbook-generator
variant-analysis
audit-context-building
spec-to-code-compliance
debug-buttercup
property-based-testing
Finding Hidden Overflows in Go: Fuzzing Beyond the Compiler's Limits
Risky Biz
What's in the SOSS? 53
Offchain Labs Arbitrum Quorum Changes
NEAR One Robust ECDSA
DV Labs Charon Pedersen DKG
Aave v4
Chainlink LlamaRisk LlamaGuard NAV CRE
yara-rule-authoring
algorand-vulnerability-scanner
ask-questions-if-underspecified
audit-prep-assistant
cairo-vulnerability-scanner
code-maturity-assessor
guidelines-advisor
modern-python
secure-workflow-guide
substrate-vulnerability-scanner
token-integration-analyzer
ton-vulnerability-scanner
claude-in-chrome-troubleshooting
address-sanitizer
atheris
cargo-fuzz
constant-time-analysis
constant-time-testing
coverage-analysis
fuzzing-dictionary
fuzzing-obstacles
harness-writing
libafl
libfuzzer
ossfuzz
ruzzy
wycheproof
How we made Trail of Bits AI-Native (so far)
Offchain Labs Arbitrum Nitro External DA
Anza Token-2022 Confidential Transfer, Cryptography
Calyx Institute HSM Provisioning Ceremony Scripts
BSV Blockchain TS-SDK
Bron Labs MCP Library
Anza Token-2022 Confidential Transfer, Blockchain
TONCO CLAMM DEX v1.6
Insecure Agents 18
Top TEE bugs you should fix before your audit
Building secure end-to-end encrypted systems
Offchain Labs Arbitrum ArbOS 50 and 51 (Fusaka)
Offchain Labs Arbitrum Chains Genesis File Generator
NEAR One Confidential Key Derivation
After Wiretap and Battering RAM: What Changes for TEE-Based Blockchain Infrastructure
Zama
X XChat
Edera Runtime Container
VeChain VeChainThor Hayabusa Upgrade
Franklin Templeton BenjiSwap Contract
Radius Technology EVMAuth
Detecting Implicit Conversions in OpenVPN2 Using CodeQL
Risky Biz
Zero Signal
DFINITY Orbit
DFINITY Oisy
Gensyn ERC-20 Token
Shape Buyback Contract
Unsupervised Learning
Security Weekly 342
CTF Radiooo 01E
Google Longfellow
Meta WhatsApp Private Processing
Gemini Smart Wallet
Ava Labs AvalancheGo
Starkware StarkEx Diff
EVAA Finance
MCP Security Deep Dive: From Attacks to Defense
Offchain Labs Upgrade Executor
Scroll Feynman Upgrade Smart Contract Changes
Swap Coffee TON DEX
Click Here Show
Security Weekly 336
Protect AI
Offchain SetCoreGovernorQuorumAction
Offchain Arbitrum Mint/Burn Precompile
Offchain Arbitrum Block Hash Pusher
Reserve Protocol Solidity 4.0.0
Discord E2EE WebAssembly
Open Source Security
Offchain ArbOS 40 Nitro
NEAR One PedPop+
libVLC
Shape Token Contract
CAP Labs Covered Agent Protocol
Fabric Labs Zipper Protocol
FIVA Yield Protocol
FIVA Evaa Integration
Whales Holders
Whales Nominators
MLSecOps
Risky Biz 786
Offchain Reward Distributor Fixes
Reserve Protocol Solana DTFs
Reserve Folio Solidity-Based Contracts
Scroll Euclid Phase 2
Scroll Euclid Phase 1
Open Quantum Safe liboqs
Lagrange LAToken
Serai DEX
Security Weekly 323
Xyonix
Security Audits: Best Practices with Trail of Bits
Offchain Sequencer Liveness
Offchain Custom Fee Bridge & EIP-7702
Offchain Geth 14.4 Pectra
Offchain Custom Fee Exchange Rate
Offchain Security Council Rotation
Offchain DisableGateway USDT
NEAR One MPC Chain Signatures
Go Crypto Libraries
Zkonduit EZKL
Otim Smart Wallet
Preventing Account Takeovers on Centralized Cryptocurrency Exchanges Recommended Practices
The Impulsive Thinker
NATS Server
Automata
Franklin Templeton Benji Contracts
zkVerify
Buttercup: Autonomously Finding and Fixing Bugs at Scale in Open-Source Software
Buttercup: The Future of Trail of Bits' Solution to DARPA's AI Cyber Challenge
Buttercup and DARPA's AI Cyber Challenge, Ringzer0
Our experience competing in the AI Cyber Challenge
Mutation Testing with Slither: A New Way to Find High-Severity Issues
Slither's Model Context Protocol: Giving LLMs Ground Truth from Static Analysis
The $1.5B Problem: How Exchanges Can Build Safer Cold Storage
How to Become a Smart Contract Auditor
Constant-Time Coding Support in LLVM
Cut To The QUIC: Slashing QUIC's Performance With A Hash DoS
One, Two, TEE: Trust in Numbers Meets Hardware Security
Repeatable Benchmarking: An Exploration of OpenSearch vs Elasticsearch
Weaponizing Image Scaling Against Production AI Systems
Indirect Prompt Injection: Architectural Testing Approaches for Real World AI/ML Systems
From Polyglots to Prompt Injections: Parsing is Still Execution (And Your LLM Didn't Get the Memo)
Frontier AI in Cybersecurity: Risks and Opportunities
macOS Privilege Escalation Via Traceroute6
Attestations: a new generation of signatures on PyPI
ZetaChain Bitcoin Inscriptions
Bunni v2
Everstake Staking
Parabol Smart Contracts Updates
BeethovenX Sonic Staking
ZetaChain Solana Gateway
STON.fi DEX V2
Tact Compiler
Shape Gasback
Denial of Service in protobuf-python
Vulnerabilities in LUKS2 disk encryption for confidential VMs
Prompt injection to RCE in AI agents
Code integrity bypass in Electron applications
Weaponizing image scaling against production AI systems
Prompt injection engineering for attackers: Exploiting GitHub Copilot
Memory corruption in NVIDIA Triton Inference Server
Exploiting zero days in abandoned hardware
MCP plaintext API key storage
MCP ANSI escape sequence attacks
MCP Line Jumping vulnerability
User to root privilege escalation from an integer overflow in libinfo
Input-Driven Recursion: Ongoing Security Risks
Offchain BoLD Fixes
Scopely Monopoly Go!
Aligned
Istio Ztunnel
RubyGems.org
Balancer v3
ULTI
EthStaker Deposit CLI
PixelSwap DEX
Arkis Prime
Kraken Wallet In-App Browser
Nomic
Plume
Orga and Merk
Bugcrowd
Risky Biz
Offchain Stylus Emergency Fixes
Offchain BoLD History Commits
Offchain Nitro with BoLD
Franklin Templeton Aptos
Offchain Stylus
Discord DAVE
Kraken Wallet iCloud Backup
Treehouse tETH Protocol
OpenSearch Benchmark Assessment
Cedar, Rego, and OpenFGA Policy Languages: Comparative Language Security Assessment
Risky Biz 759
Offchain RARI
Offchain Office Hours Action
Offchain Timeboost Auction
Offchain Orbit Actions
Discord DAVE
Elixir Protocol
Onchain Pass
Offchain USDC Gateway
Uniswap v4 Core
Hugging Face Gradio
Taraxa Ficus Bridge
Mastering Web Research with Burp Suite
Offchain BoLD & DAC Rewards
Scroll zstd Compression
Lit Protocol Cait-Sith
Zoo KittyCAD
Devcon Auction Raffle
Aladdin f(x) Oracle
Resilience Rundown
Offchain Arbitrum Stylus
Polygon Labs Iden3 Circuits
Panoptic
AiLayer 6079 Contracts
Hydrogen Rover Protocol
Lisk Smart Contracts
Parabol Smart Contracts
Wonderland Prophet
Risky Biz
Offchain L1-L3 Teleporter
Offchain ArbOS 31
Offchain ArbOS 30 Nitro
Offchain BoLD
Scroll ZkEVM 4844 Blob
Iron Fish FishHash
MLSecOps March 20
Introduction to CodeQL: Examples, Tools and CI Integration
Curvance
SEDA Chain Token Migration
Lisk Smart Contracts
Bondex Smart Contracts
Aladdin f(x) Protocol
Puffer Finance Contracts
Intuition
TON Foundation Multisignature Wallet
Offchain ArbOS
Uniswap Browser Extension
Silence Laboratories Silent Shard
Helios Global
ScopeLift Stealth Addresses
A Broad Comparative Evaluation of Software Debloating Tools
PolyTracker: Whole-Input Dynamic Information Flow Tracing
Endokernel: A Thread Safe Monitor for Lightweight Subprocess Isolation
Design and Implementation of a Coverage-Guided Ruby Fuzzer
Test Harness Mutilation
VAST: MLIR compiler for C/C++
PoTATo: Points-to analysis via domain specific MLIR dialect
Buttercup and DARPA's AI Cyber Challenge, CSAW
A Broad Comparative Evaluation of Software Debloating Tools
Repurposing LLVM analyses in MLIR: Also there and back again across the tower of IRs
Weak Fiat-Shamir attacks on modern proof systems
Building a Rusty path validation library for PyCA Cryptography
Implementing X.509 path validation for Python
Introduction to Semgrep
The Present and Future of AI and Security
Incubated Machine Learning Exploits: Backdooring ML Pipelines Using Input-Handling Bugs
Holistic ML Threat Models
The Next 5 Years of Supply Chain Security on PyPI
PEP 740 and PyPI: Bootstrapping Provenance for the Python Ecosystem
Imagining a zero-trust future for PyPI
Build Provenance: Lessons (so far) from Homebrew
Introduction to Semgrep
Offchain Arbitrum
Snow
Kraken Mobile Wallet
MetaLayer Blast
Cryptography bugs in elliptic library
Crash due to uncontrolled recursion in Well-KnownText
Crash due to uncontrolled recursion in innerForbidCircularReferences
Crash due to uncontrolled recursion in Wire
Crash due to uncontrolled recursion in protobuf crate
Denial of Service in XStream
Denial of Service in protobuf-java
Insufficient validation of integration timestamp in sigstore-python
Rust crates "stable" and "nightly" might be installed instead of the corresponding toolchains
num-bigint disclosure
Memory corruption during X.509 validation in GnuTLS
Linux kernel modules kASLR bypass
Pedersen DKG vulnerability disclosure
LeftoverLocals disclosure
yWhales
Automated Artifical Intelligence Bill Of Materials for AI/ML Ops
Offchain Token Bridge Creator
Eclipse Temurin
Arch Linux Pacman
cURL HTTP3
Unibot Router
Acronym Foundation
Pyth Entropy
Opus
Open-Source Software Security: Areas of Long-Term Focus and Prioritization
Ockam
Dfinity Candid
Immutable Bridge
Solang Code Generation
Solang Code Generation, Part 1
YOLOv7
Axiom Halo2 Library Upgrades
Aleo snarkVM, snarkOS, BullsharkBFT
Salty.IO Protocol
Spiko Smart Contracts
Squads V4
Offchain Custom Fee Token
Scroll ZkEVM Wave 3
Uniswap
Lisk SDK 6.1 modules
OpenSSL
PyPI Warehouse
wasmCloud
Hyperlane v3
Elixir Contracts
Solang Parser and Semantic Analysis
Offchain Arbitrum Challenge v2
Scroll l2geth (diff)
Scroll l2geth (initial)
Scroll ZkEVM Wave 2
Worldcoin
Homebrew
DigitalOcean OIDC
Flux
NZDD token
Immutable
Aura
Berachain polaris-geth
Understanding the National Security Implications of AI
Scroll zkTrie
Lisk SDK
DragonFly2
dappOS v2 wallet
Sandclock
Arcade
Solang Solana Library
AI Accountability, Regulation, and Audits
A Comprehensive Risk Assessment Framework for AI Assurance in Ethical, Legal, and Societal Domains
Axiom Halo2 Libraries
Dfinity ckBTC and BTC Integration
Dfinity SNS Phase 2
Thesis tss-lib BitForge
Nested Tetris/HyVM
Berachain berachain
Risky Biz 707
FraxGov
Eclipse JKube
Franklin Templeton
Scroll ZkEVM Wave 1
Chainflip
Chainflip
Prysm
Ajna Protocol
Raft
MYSO v2
Smardex AMM
Toward Comprehensive Risk Assessments and Assurance of AI-Based Systems
Understanding Crypto Markets Security
SafeTensors
Eclipse Mosquitto
Eclipse Jetty
Spool Platform
WalletConnect v2.0
Waymont
Atlendis
Primitive Hyper
Wormhole Governors and Watchers
ASW 229
Stealth Addresses
Succinct ZK Light Client
Succinct Light Client
Nested Finance
Token-2022 Program
Careful with MAc-then-SIGn: A Computational Analysis of the EDHOC Lightweight Authenticated Key Exchange Protocol
Weak Fiat-Shamir Attacks on Modern Proof Systems
Endoprocess: Programmable and Extensible Subprocess Isolation
CIVSCOPE: Analyzing Potential Memory Corruption Bugs in Compartment Interfaces
Detecting variability bugs through hybrid control and data flow analysis
Blind Spots: Automatically detecting ignored program inputs
Efficient Proofs of Software Exploitability for Real-world Processors
Toward Comprehensive Risk Assessments and Assurance of AI Systems
Your Mitigations are My Opportunities
Detecting variability bugs with hybrid control and data flow
Blind Spots: Identifying Exploitable Program Inputs
MLIR is the future of program analysis
Test your tests: the do's and don'ts of testing
Slither: a static analysis tool for Vyper and Solidity
Roundme: rounding analysis made simpler
Smart Contracts: The Beta
Fuzzing like a security engineer
Careful with MAc-then-SIGn
Using Graph-Based Machine Learning Algorithms for Software Analysis
What does it look like to code-sign for an entire packaging ecosystem?
Securing your Package Ecosystem with Trusted Publishing
Trusted Publishing: Lessons from PyPI
Ergonomic codesigning for the Python ecosystem with Sigstore
Risky Biz 690
Fraxlend and veFPIS
noble-curves Library
Redpanda Platform
Injective Labs Options Market
OpenVPN3
Polygon Edge
Billion hashes attack against Go JOSE libraries
Expo Secure Store: Shortening AES GCM Authentication Tags
YOLOv7 disclosure
Numbers turned weapons: DoS in Osmosis’ math library
The issue with ATS in Apple’s macOS and iOS
Eth ABI DoS disclosure
L2 finality bugs in Juno and Pathfinder
Security flaws in an SSO plugin for Caddy
ktor Path Traversal
ParaSpace
OpenVPN2
OpenArchive Save (Android)
KEDA
Optimism
Paxos PayPal PYUSD
Nostra
StarkGate
Drift Protocol
ParaSpace
Phantom Wallet
ParaSpace
Enclave Markets
Fiat Ramps
Terraform Enterprise
Nomad Enterprise
Phantom Wallet
GameStop iOS Web Wallet
Folks Finance Protocol
ParaSpace
Fraxlend and FraxFerry
SimpleX Chat
cURL
CloudEvents
OpenArchive Save (iOS)
GSquared
Meson Protocol
Managed Pools
Ondo
StarkEx
Dfinity
Aleo snarkVM
AlphaSOC API
Consul Enterprise
snarkVM
Maple Protocol v2
Increment Protocol
Subspace Farmer
Optimism
Nayms
DFINITY Canister Sandbox
DFINITY ECDSA/BTC
Reserve Protocol
Uniswap Mobile Wallet
Aggregator
The Franchiser
Risky Biz 672
MobileCoin
Microsoft/Verasion Go-COSE
BLS Signature Scheme
Hashicorp Boundary
Skiff
Meson Protocol
ChainPort
Relay
Beanstalk
Purpose for Profit
Solon
Roll
StarkNet token
FROST BLS Protocols
SORA Trustless Bridge
Are Blockchains Decentralized? Unintended Centralities in Distributed Ledgers
Do You Really Need a Blockchain? An Operational Risk Assessment
Cloud Security Reinvented
Terraform Cloud
HashiCorp Cloud
Alkimiya Silica V2
Sherlock
FlareFinance
TBTv2
Morpho
Relayer Contracts
CAT Standard
Frax
Binance CGGMP21 and FROST
Datadog
MATTR
Ante Protocol
AuctionRaffle
Seaport Protocol
Shell Protocol v2
DFINITY Threshold ECDSA
ArmorLock
Aleo snarkVM & snarkOS
Phantom Wallet
ArmorLock
DigitalOcean Function
Auvik Collector
Ava Labs
Optimism
NFTX
ReserveLending+
Firefly
Solana
Kolibri
Skiff Office Hours
Parallel Finance
Fuchsia Platform
BitcoinBeach
Tekton
GameStop Wallet
Maple Finance
Gyroscope
LooksRare
Symbiosis
Parallel Finance
Arbitrum Nitro
Polkadex
Linkerd
RAILGUN
RAILWAY
Persistence ETH2.0
Advanced Blockchain
Perpetual Protocol V2
Futureswap V4.1
Firefly
API3
Beethoven X
Polkadex
Umee
DeGate
A Broad Comparative Evaluation of x86-64 Binary Rewriters
On the Optimization of Equivalent Concurrent Computations
Write better smart contracts with Slither's Python API
Building Secure Cairo
How to fuzz like a pro
Demystifying Fuzzing
VAST: MLIR for program analysis of C/C++
A Broad Comparative Evaluation of x86-64 Binary Rewriters
On the Optimization of Equivalent Concurrent Computations
die, PGP, die
A mostly gentle introduction to LLVM
Sigstore for Python Packaging: Next Steps for Adoption
Python Packaging Mystery Meat
Automated Tools for Securing the Software Supply Chain
Risky Biz 652
Optimus ROM
Optimus ROM
osquery
CoreDNS
Minterest Finance
pSTAKE
Primitive
Strips Finance
StarkPerpetual
Columbus-5
Specialized Zero-Knowledge Proof failures
Forgery in Amis' Alice library
Keeping the wolves out of wolfSSL
Escaping misconfigured VSCode extensions - Live Preview XSS
Escaping misconfigured VSCode extensions - Live Preview Path Traversal
Escaping well-configured VSCode extensions (for profit) - VSCode localResourceRoots Bypass
Escaping misconfigured VSCode extensions - Sarif Viewer XSS
Stranger Strings: An exploitable flaw in SQLite
json-viewer XSS
ERC721 improper token transfer in cairo-contracts
Frax
Redjack
Cardstack
Sherlock Protocol V2
Polkadex
IBC Protocol
ShardX
DeGate
Secureum Safecast #3
DigitalOcean Cloud
Terraform Enterprise
Nomad Enterprise
Maple
Advanced Blockchain
Opyn
Aave V3
StarkEx
Threshold-DSA
DFINITY Consensus
Secureum Safecast #2
SpruceID
Consul Enterprise
Vault Enterprise
STAS SDK
Tokemak
Fuji Finance
V2 Vault
PolySign HSM
Doppler
STAS-JS SDK
Yield V2
Gro protocol
Futureswap V4
PINT
Hop Protocol V2
Golden Gate Library
PolySign
Qredo Blockchain
Arbitrum
Datadog Agent
RocketPool
AlphaX
Bug Bounty Platform
88mph V3
Polkaswap
THORChain
go-schnorrkel
ShardX
Press Freedom Foundation
Casper Web Wallet
Timeswap
CompliFi
Optics
AElf
CrossChain-Bridge
Uniswap V3 Staker
Appian
Cashero-2.0
HashiCorp Cloud
FlareFinance
Abyss Lockup
Futureswap V3
CompliFi
xUDT
AlephBFT
Acala Network
Frax
Syndicate
Opyn Gamma
Compound Chain
DFINITY
Linux Kernel
Orbit
VGS Proxy
Yearn v2 Vaults
Balancer v2
DFX Finance
Tokemak
Warp Contracts
FlareFinance
Open Oracle
Employee Cycle
Uniswap V3
Argo
Flare Network
MC Dai
dForce Lending
Nervos -RSA
Risky Biz 614
Skiff
Liquity Proxy Contract
Liquity Protocol
RAY-DAO
Cheque Cell & ORU
Force Bridge - Solidity
Force Bridge - Rust
Arbitrum V2
Evaluating Static Analysis Tools via Differential Mutation
echidna-parade: Diverse multicore smart contract fuzzing
Differential analysis of x86-64 instruction decoders
A Sermon on the Indulgences of Computational Sacrifice; or, The Superabundant Benedictions of Programming an Absurd NES Game
Differential analysis of x86-64 instruction decoders
Building a Practical Static Analyzer for Smart Contracts
Testing and Verifying Smart Contracts: From Theory to Practice
Safely integrating with ERC20 tokens
JWTs, and why they suck
Exploiting Machine Learning Pickle Files
Building Better Systems 6
Fog Protocol
CircleCI Server 3.0
BitMEX
Terraform Cloud
Bitcoin SV
Futureswap
Balancer V2
C.R.E.A.M.
Acala Network
eFIL
Shamir's Secret Sharing vulnerabilities
SecureDrop
Citizen Browser
LUSD
Tezori (T2)
wXTZ
wALGO
Origin Dollar
Zerion SDK
Teller Protocol
Hermez
Highway Consensus
MobileCoin BFT
Consul
Graph Protocol
OVM
Nervos SUDT
WCBS 880
Prysm
DODO
Stacks V2
Risky Biz 594
MobileCoin
Ren
Nomad
Helm
Argent
Yield Protocol
Smart Pool
DeFiner
ETH2.0 Deposit CLI
VRFs
Meld Gold
Zcoin
CurveDAO
Amp
Federated Bridge
dForce dToken
Celo Oracle
Arbitrum
MYKEY
Symbol
Ledger Filecoin
Epicenter 346
Hey.com
Azure Sphere
Magma
Matic
Lighthouse
Dexter
Chainlink
Absolute AppSec 97
Unchained 170
Zoom
tBTC
Chainlink Flux
Risky Biz 580
Absolute AppSec 91
Secure Transport
Secure Transport
Zcash
QTUM
Hegic
Zero Knowledge 122
Standard Notes
ZeroTier 2.0
Terraform
OPA
Golem Network
Elrond
Voatz
Vault
Chai
Compound
Echidna: effective, usable, and fast fuzzing for smart contracts
ICARUS: Understanding De Facto Formats By Way of Feathers and Wax
Toward Automated Grammar Extraction via Semantic Labeling of Parser Implementations
What are the Actual Flaws in Important Smart Contracts?
Echidna: A Practical Smart Contract Fuzzer
How to find bugs when (ground) truth isn't real
Toward Automated Grammar Extraction via Semantic Labeling of Parser Implementations
Detecting transaction replacement attacks with Manticore
DeFi Hacks and Future Threats: The Role of Economics in Secure Protocol Design
PrivacyRaven: Comprehensive Privacy Testing for Deep Learning
Changelog
Western Digital Sweet B
Voice
etcd
WorkLock
Balancer
Curve.fi
EOSIO SDK
Breaking Aave Upgradeability
Accidentally stepping on a DeFi lego
Smart contract vulnerabilities due to Tezos message passing architecture
Bug Hunting with Crytic
Rook
Pixel
Zcash
Zcash
Paymail Protocol
NEAR Protocol
Risky Business 559
Dharma Wallet
Simple Ledger
Livepeer
Topo Finance
0x Protocol
EOSIO 2.0
Status-go
Smart Contract Security Automation
FOSS Weekly 545
Flexa
AZTEC Protocol
Oasis Labs
Aave Protocol
Celo
Podcast.init 225
Absolute AppSec 68
MC Dai
Staked
Compound
Parity Fether
Blockchain.com
Smart Contract Audit Findings
Hashing it Out 53
Computable
Azure Sphere
RandomX
Absolute AppSec 60
SanDisk X600
Kubernetes
Numerai
MerkleX
TokenCard
Interest Token
Loom
Absolute AppSec 55
ZecWallet
Unity Coin
Compound
Reserve Protocol
Algorand
Ocean Protocol
UMA Project
Centrifuge
Nomisma
Set Protocol
Tendermint
NuCypher
Manticore: Symbolic Execution for Binaries and Smart Contracts
Slither: A Static Analysis Framework For Smart Contracts
The Treachery of Files and Two New Tools that Tame It
Symbolically Executing a Fuzzy Tyrant
Kernel space fault injection with KRF
Binary Symbolic Execution With KLEE-Native
Going sicko mode on the Linux Kernel
Fantastic Bugs and How to Squash Them; or, the Crimes of Solidity
SlithIR: High-Precision Security Analysis with an IR for Solidity
Slither: A Static Analysis Framework for Smart Contracts
What blockchain got right
Traditional Infosec for Blockchain Firms
Seriously, stop using RSA
Best Practices for Cryptography in Python
Evidence-driven Security Engineering
Linux Security Event Monitoring with osquery
osql: The community oriented osquery fork
Return to the 100 Acre Woods
Swimming with the kubectl fish
Python internals - let's talk about dicts
Improving PyPI's security with Two Factor Authentication
Peeling back the 'Shlayers' of macOS Malware
Hashing it Out 35
Risky Biz 526
AMP StableWire
EIP-1283
Absolute AppSec 37
Bitcoin SV
Ampleforth
Origin Protocol
ndau
Introduction to Smart Contract Exploitation
Manticore EVM Workshop
Absolute AppSec 34
Paxos Standard
Basecoin
Pantheon
Smart Contract Security Automation
DeepState: Bringing Vulnerability Detection Tools into the Dev Cycle
Compound
Smart Contract Security Automation
Risky Biz 510
The Smartest Contract 15
Project Callisto
NuCypher
Building Blocks
CENTRE
Bloom
Parity
Tezori
Gemini Dollar
Dharma
Golem
Zero Knowledge 16
Web3
LivePeer
Manticore EVM Workshop
Risky Biz 488
Toward Smarter Vulnerability Discovery Using Machine Learning
The Past, Present, and Future of Cyberdyne
DeepState - Symbolic Unit Testing for C and C++
Vulnerability Modeling with Binary Ninja
Property-testing of smart contracts
Anatomy of an unsafe programming language
Contract upgrade risks and recommendations
Blackhat Ethereum
Blockchain Autopsies - Analyzing Smart Contract Deaths
Rattle - an Ethereum EVM binary analysis framework
Securing value on the Ethereum blockchain
Binary analysis, meet the blockchain
Getting started with osquery
osquery Super Features
osquery Extension Skunkworks
Low-level debugging with Pwndbg
Insecure Things to Avoid in Python
DappHub
RSKj
Risky Biz 474
MakerDAO Sai
Manticore Workshop
Omega One
Georgian Partners 47
VUC 643
Risky Biz 449
File Polyglottery; or, This PoC is also a picture of cats
Be a binary rockstar
Symbolic Execution for Humans
The spirit of the 90s is still alive in Brooklyn
Automatic bug finding for the blockchain
The Joy of Pwning
Risky Biz 425
zlib
Risky Biz 421
Risky Biz 416
Risky Biz 399
The dream of a static and dynamic analysis shootout
Binary constraint solving for automatic exploit generation
The Smart Fuzzer Revolution
Making a scaleable automated hacking system
Cyberdyne - Automatic bug-finding at scale
Swift Reversing
Modern iOS Application Security
OSX slack:// protocol handler javascript injection
Regulation of Intrusion and Surveillance Software
Risky Biz 348
Risky Biz 370
Cyber-Deception and Attribution in Capture-the-Flag Exercises
Hardware side channels in virtualized environments
Exploiting Out-of-Order Execution
Double free in VLC's 3GP file format
McSema: Static translation of x86 to LLVM IR
Build it Break it Fix it
How to CTF - Getting and using Other People's Computers (OPC)
Low-level Security
Security and Your Business
Bringing nothing to the party
The Exploit Intelligence Project Revisited
Analyzing the MD5 collision in Flame
From One Ivory Tower to Another
The Mobile Exploit Intelligence Project
A Tale of Mobile Threats
AI Safety & Security Training
Building Secure Smart Contracts
CTF Field Guide
RSA GTFO
Ruby Security Field Guide
Testing Handbook
ZKDocs
Nothing matches these filters. Clear one to widen the search.
