Publications from Trail of Bits
# Publications from Trail of Bits
- [Publications from Trail of Bits](#publications-from-trail-of-bits)
- [Academic Papers](#academic-papers)
- [White Papers](#white-papers)
- [Guides and Handbooks](#guides-and-handbooks)
- [Conference Presentations](#conference-presentations)
- [Automated bug finding and exploitation](#automated-bug-finding-and-exploitation)
- [Blockchain](#blockchain)
- [Compilers](#compilers)
- [Cryptography](#cryptography)
- [Engineering](#engineering)
- [Education](#education)
- [Infrastructure](#infrastructure)
- [Machine Learning](#machine-learning)
- [Mobile security](#mobile-security)
- [Programming](#programming)
- [Side channels](#side-channels)
- [Supply chain](#supply-chain)
- [Threat analysis \& malware](#threat-analysis--malware)
- [Podcasts](#podcasts)
- [Webinars](#webinars)
- [Public Comments](#public-comments)
- [Case Studies](#case-studies)
- [Security Reviews](#security-reviews)
- [Major Clients](#major-clients)
- [Frax Finance](#frax-finance)
- [MobileCoin](#mobilecoin)
- [Offchain Labs](#offchain-labs)
- [Reserve Protocol](#reserve-protocol)
- [Scroll](#scroll)
- [Uniswap](#uniswap)
- [Western Digital](#western-digital)
- [AI/ML Reviews](#aiml-reviews)
- [Cryptography Reviews](#cryptography-reviews)
- [Technology Product Reviews](#technology-product-reviews)
- [Cloud-Native Reviews](#cloud-native-reviews)
- [Invariant Testing and Development Engagements](#invariant-testing-and-development-engagements)
- [Blockchain Reviews](#blockchain-reviews)
- [Wallet Reviews](#wallet-reviews)
- [Algorand](#algorand)
- [Avalanche](#avalanche)
- [Bitcoin \& Derivatives](#bitcoin--derivatives)
- [Ethereum/EVM](#ethereumevm)
- [NervOS](#nervos)
- [Starknet](#starknet)
- [Solana](#solana)
- [Substrate](#substrate)
- [Tendermint/Cosmos](#tendermintcosmos)
- [Tezos](#tezos)
- [TON](#ton)
- [Other/Multi-Chain](#othermulti-chain)
- [Disclosures and exploits](#disclosures-and-exploits)
- [Workshops](#workshops)
- [Datasets](#datasets)
- [Service Overviews](#service-overviews)
- [Legend](#legend)
## Academic Papers
| Paper Title | Venue | Publication Date |
| --- | --- | --- |
| [A Broad Comparative Evaluation of Software Debloating Tools](https://github.com/trailofbits/publications/blob/master/papers/debloater-eval.pdf) | [USENIX Security 2024](https://www.usenix.org/conference/usenixsecurity24) | 2024 |
| [PolyTracker: Whole-Input Dynamic Information Flow Tracing](https://github.com/trailofbits/publications/blob/master/papers/issta24-polytracker.pdf) | [ISSTA 2024](https://conf.researchr.org/details/issta-ecoop-2024/issta-ecoop-2024-tool-demonstrations/7/PolyTracker-Whole-Input-Dynamic-Information-Flow-Tracing) | 2024 |
| [Endokernel: A Thread Safe Monitor for Lightweight Subprocess Isolation](https://github.com/trailofbits/publications/blob/master/papers/usenixsecurity24-endokernel.pdf) | [Usenix Security 2024](https://www.usenix.org/conference/usenixsecurity24/presentation/yang-fangfei) | 2024 |
| [Design and Implementation of a Coverage-Guided Ruby Fuzzer](https://github.com/trailofbits/publications/blob/master/papers/ruzzy-ruby-fuzzer.pdf) | [CSET 24](https://cset24.isi.edu/) | 2024 |
| [Test Harness Mutilation](https://github.com/trailofbits/publications/blob/master/papers/test_harness_mutilation.pdf) | [Mutation 2024](https://conf.researchr.org/home/icst-2024/mutation-2024) | 2024 |
| [VAST: MLIR compiler for C/C++](https://github.com/trailofbits/publications/blob/master/papers/vast-eurollvm-poster.pdf) | [EuroLLVM Devs' Meeting 2024](https://llvm.swoogo.com/2024eurollvm) | 2024 |
| [PoTATo: Points-to analysis via domain specific MLIR dialect](https://github.com/trailofbits/publications/blob/master/papers/potato-eurollvm-poster.pdf) | [EuroLLVM Devs' Meeting 2024](https://llvm.swoogo.com/2024eurollvm) | 2024 |
| [Careful with MAc-then-SIGn: A Computational Analysis of the EDHOC Lightweight Authenticated Key Exchange Protocol](https://github.com/trailofbits/publications/blob/master/papers/edhoc-euros%26P-2023.pdf) | [Euro S&P 2023](https://www.ieee-security.org/TC/EuroSP2023/index.html) | 2023 |
| [Weak Fiat-Shamir Attacks on Modern Proof Systems](https://github.com/trailofbits/publications/blob/master/papers/weakfs_ieee_s%26p_2023.pdf) | [IEEE S&P 2023](https://eprint.iacr.org/2023/691) | 2023 |
| [Endoprocess: Programmable and Extensible Subprocess Isolation](https://dl.acm.org/doi/10.1145/3633500.3633507) | [NSPW 2023](https://www.nspw.org/2023/program) | 2023 |
| [CIVSCOPE: Analyzing Potential Memory Corruption Bugs in Compartment Interfaces](https://github.com/trailofbits/publications/blob/master/papers/civscope.pdf) | SOSP [KISV 2023](https://dl.acm.org/doi/abs/10.1145/3625275.3625399) | 2023 |
| [Detecting variability bugs through hybrid control and data flow analysis](https://github.com/trailofbits/publications/blob/master/papers/ubet_langsec_2023.pdf) | [LangSec 2023](https://langsec.org/spw23/papers.html#variability) | 2023 |
| [Blind Spots: Automatically detecting ignored program inputs](https://arxiv.org/abs/2301.08700) | [LangSec 2023](https://langsec.org/spw23/papers.html) | 2023 |
| [Efficient Proofs of Software Exploitability for Real-world Processors](https://github.com/trailofbits/publications/blob/master/papers/sieve-msp430-pets2023.pdf) | [PETS 2023](https://petsymposium.org/2023/index.php) | 2023 |
| [Toward Comprehensive Risk Assessments and Assurance of AI Systems](https://github.com/trailofbits/publications/blob/master/papers/toward_comprehensive_risk_assessments.pdf) | arXiv | 2023 |
| [A Broad Comparative Evaluation of x86-64 Binary Rewriters](https://github.com/trailofbits/publications/blob/master/papers/cset22.pdf) | [CSET 22](https://cset22.isi.edu/index.html) | 2022 |
| [On the Optimization of Equivalent Concurrent Computations](https://github.com/trailofbits/publications/blob/master/papers/eqsat-pldi-egraphs2022.pdf) | [PLDI EGRAPHS 2022](https://pldi22.sigplan.org/program/program-egraphs-2022/) | 2022 |
| [Evaluating Static Analysis Tools via Differential Mutation](https://github.com/trailofbits/publications/blob/master/papers/qrs21.pdf) | [QRS 2021](https://qrs21.techconf.org/) | 2021 |
| [echidna-parade: Diverse multicore smart contract fuzzing](https://github.com/trailofbits/publications/blob/master/papers/echidna-parade_issta21.pdf) | [ISSTA 2021](https://conf.researchr.org/home/issta-2021) | 2021 |
| [Differential analysis of x86-64 instruction decoders](https://github.com/trailofbits/publications/blob/master/papers/mishegos-langsec2021.pdf) | [LangSec 2021](https://langsec.org/spw21/) | 2021 |
| [Echidna: effective, usable, and fast fuzzing for smart contracts](https://github.com/trailofbits/publications/blob/master/papers/echidna_issta2020.pdf) | [ISSTA 2020](https://conf.researchr.org/home/issta-2020) | 2020 |
| [ICARUS: Understanding De Facto Formats By Way of Feathers and Wax](https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=9283834) | [LangSec 2020](http://spw20.langsec.org/) | 2020 |
| [Toward Automated Grammar Extraction via Semantic Labeling of Parser Implementations](https://github.com/trailofbits/publications/blob/master/papers/semantic_labeling_langsec2020.pdf) | [LangSec 2020](http://spw20.langsec.org/) | 2020 |
| [What are the Actual Flaws in Important Smart Contracts?](https://github.com/trailofbits/publications/blob/master/papers/smart_contract_flaws_fc2020.pdf) | [FC 2020](https://fc20.ifca.ai/program.html) | 2020 |
| [Echidna: A Practical Smart Contract Fuzzer](https://github.com/trailofbits/publications/blob/master/papers/echidna_fc_poster.pdf) | [FC 2020](https://fc20.ifca.ai/program.html) | 2020 |
| [RSA GTFO](https://github.com/trailofbits/publications/blob/master/papers/rsagtfo.pdf) | [PoC\|\|GTFO 0x20](https://www.sultanik.com/pocorgtfo/#0x20) | 2020 |
| [Manticore: Symbolic Execution for Binaries and Smart Contracts](https://github.com/trailofbits/publications/blob/master/papers/manticore.pdf) | [ASE 2019](https://2019.ase-conferences.org/) | 2019 |
| [Slither: A Static Analysis Framework For Smart Contracts](https://github.com/trailofbits/publications/blob/master/papers/wetseb19.pdf) | [WETSEB 2019](http://www.agilegroup.eu/wetseb2019/) | 2019 |
| [Toward Smarter Vulnerability Discovery Using Machine Learning](https://github.com/trailofbits/publications/blob/master/papers/ceo.pdf) | [AISec 2018](http://aisec2018.icsi.berkeley.edu/aisec2018/index.html) | 2018 |
| [The Past, Present, and Future of Cyberdyne](https://github.com/trailofbits/publications/blob/master/papers/cyberdyne.pdf) | [IEEE S&P](https://ieeexplore.ieee.org/xpl/tocresult.jsp?isnumber=8328963) | 2018 |
| [DeepState - Symbolic Unit Testing for C and C++](https://github.com/trailofbits/publications/blob/master/papers/deepstate-bar18.pdf) | [BAR 2018](https://www.ndss-symposium.org/ndss2018/cfp-ndss2018-bar/) | 2018 |
| [Cyber-Deception and Attribution in Capture-the-Flag Exercises](https://github.com/trailofbits/publications/blob/master/papers/deception_attribution_ctf.pdf) | [FOSINT-SI 2015](http://fosint-si.cpsc.ucalgary.ca/2015/) | 2015 |
## White Papers
| Paper Title | Author(s) | Publication Date |
| --- | --- | --- |
| [Detecting Implicit Conversions in OpenVPN2 Using CodeQL](https://github.com/trailofbits/publications/blob/master/reports/detecting-implicit-conversions-in-openvpn2-using-codeql-casestudy.pdf) | Paweł Płatek | Sep 2025 |
| [Preventing Account Takeovers on Centralized Cryptocurrency Exchanges Recommended Practices](https://github.com/trailofbits/publications/blob/master/papers/account-takeover-recommended-practices.pdf) | Shaun Mirani, Kelly Kaoudis, and Evan Sultanik | Feb 2025 |
| [Input-Driven Recursion: Ongoing Security Risks](https://github.com/trailofbits/publications/blob/master/papers/trailofbits-20241218-recursion-whitepaper.pdf) | Alexis Challande and Brad Swain | Dec 2024 |
| [OpenSearch Benchmark Assessment](https://github.com/trailofbits/publications/blob/master/reports/OpenSearch-Benchmarking.pdf) | Evan Downing, Riccardo Schirone, Francesco Bertolaccini, and Ronald Eytchison | Aug 2024 |
| [Cedar, Rego, and OpenFGA Policy Languages: Comparative Language Security Assessment](https://github.com/trailofbits/publications/blob/master/reports/Policy_Language_Security_Comparison_and_TM.pdf) | Ian Smith and Kelly Kaoudis | Aug 2024 |
| [Toward Comprehensive Risk Assessments and Assurance of AI-Based Systems](https://github.com/trailofbits/publications/blob/master/papers/trailofbits-20230307-ai-risk-assessments-whitepaper.pdf) | Heidy Khlaaf | Mar 2023 |
| [Are Blockchains Decentralized? Unintended Centralities in Distributed Ledgers](https://github.com/trailofbits/publications/blob/master/papers/trailofbits-20220601-are-blockchain-decentralized-whitepaper.pdf) | Evan Sultanik et al. | Jun 2022 |
| [Do You Really Need a Blockchain? An Operational Risk Assessment](https://github.com/trailofbits/publications/blob/master/papers/trailofbits-20220601-do-you-really-need-a-blockchain-whitepaper.pdf) | Evan Sultanik and Mike Myers | Jun 2022 |
## Guides and Handbooks
| Link | Description |
| ---- | ----------- |
| [Testing Handbook](https://appsec.guide/) | Guides for configuring and automating static and dynamic analysis tools |
| [ZKDocs](https://www.zkdocs.com/) | Interactive documentation on zero-knowledge proof systems |
| [Building Secure Smart Contracts](https://secure-contracts.com/) | Best practices for developing secure smart contracts |
| [CTF Field Guide](https://trailofbits.github.io/ctf/) | Field guide to winning at Capture The Flag competitions |
| [Ruby Security Field Guide](https://trailofbits.github.io/rubysec/) | Practical Ruby security guide |
## Conference Presentations
### Automated bug finding and exploitation
| Presentation Title | Author(s) | Year |
| --- |---------------------------------------------------| --- |
| [Auditing Scapy With Agents](https://github.com/trailofbits/publications/blob/master/presentations/Auditing%20Scapy%20With%20Agents) | Clinton Thomas | 2026 |
| [Finding Hidden Overflows in Go: Fuzzing Beyond the Compiler's Limits](https://github.com/trailofbits/publications/blob/master/presentations/Finding%20Hidden%20Overflows%20in%20Go%3A%20Fuzzing%20Beyond%20the%20Compiler%27s%20Limits) | Kevin Valerio | 2026 |
| [Buttercup: Autonomously Finding and Fixing Bugs at Scale in Open-Source Software](https://github.com/trailofbits/publications/blob/master/presentations/Buttercup%3A%20Autonomously%20Finding%20and%20Fixing%20Bugs%20at%20Scale%20in%20Open-Source%20Software/buttercup-cucyber.pdf) | Ronald Eytchison | 2025 |
| [Buttercup: The Future of Trail of Bits' Solution to DARPA's AI Cyber Challenge](https://github.com/trailofbits/publications/blob/master/presentations/Buttercup%3A%20The%20Future%20of%20Trail%20of%20Bits%27%20Solution%20to%20DARPA%27s%20AI%20Cyber%20Challenge) | Trent Brunson | 2025 |
| [Buttercup and DARPA's AI Cyber Challenge, Ringzer0](https://github.com/trailofbits/publications/blob/master/presentations/Buttercup%20and%20DARPA%27s%20AI%20Cyber%20Challenge%2C%20Henrik%20Brodin%20and%20Ronald%20Eytchison) | Henrik Brodin, Ronald Eytchison | 2025 |
| [Our experience competing in the AI Cyber Challenge](https://github.com/trailofbits/publications/blob/master/presentations/Our%20experience%20competing%20in%20the%20AI%20Cyber%20Challenge/Our_experience_competing_in_the_AI_Cyber_Challenge.pdf) | Michael Brown et al. | 2025 |
| [Buttercup and DARPA's AI Cyber Challenge, CSAW](https://github.com/trailofbits/publications/blob/master/presentations/Buttercup%20and%20DARPA%27s%20AI%20Cyber%20Challenge%2C%20Ronald%20Eytchison) | Ronald Eytchison | 2024 |
| [Your Mitigations are My Opportunities](https://github.com/trailofbits/publications/blob/master/presentations/Your%20Mitigations%20are%20My%20Opportunities) | Yarden Shafir | 2023 |
| [Detecting variability bugs with hybrid control and data flow](https://github.com/trailofbits/publications/blob/master/presentations/Automatically%20Detecting%20Variability%20Bugs%20Through%20Hybrid%20Control%20and%20Data%20Flow%20Analysis) | Kelly Kaoudis, Henrik Brodin, Evan Sultanik | 2023 |
| Blind Spots: Identifying Exploitable Program Inputs | Henrik Brodin, Evan Sultanik, and Marek Surovič | 2023 |
| [MLIR is the future of program analysis](https://github.com/trailofbits/publications/blob/master/presentations/MLIR%20is%20the%20future%20of%20program%20analysis) | Peter Goodman | 2023 |
| [A Sermon on the Indulgences of Computational Sacrifice; or, The Superabundant Benedictions of Programming an Absurd NES Game](https://www.youtube.com/watch?v=RTjP3fnQ5d8) | Evan Sultanik | 2021 |
| [Differential analysis of x86-64 instruction decoders](https://github.com/trailofbits/publications/blob/master/presentations/Differential%20analysis%20of%20x86-64%20decoders) | William Woodruff, Niki Carroll, Sebastiaan Peters | 2021 |
| [How to find bugs when (ground) truth isn't real](https://github.com/trailofbits/publications/blob/master/presentations/Differential%20fuzzing%2C%20or%20how%20to%20find%20bugs%20when%20%28ground%29%20truth%20isn%27t%20real) | William Woodruff | 2020 |
| [Toward Automated Grammar Extraction via Semantic Labeling of Parser Implementations](https://github.com/trailofbits/publications/blob/master/presentations/Semantic%20Labeling%20of%20Parsers) | Carson Harmon, Brad Larsen, Evan Sultanik | 2020 |
| [The Treachery of Files and Two New Tools that Tame It](https://github.com/trailofbits/publications/blob/master/presentations/The%20Treachery%20of%20Files) | Evan Sultanik | 2019 |
| [Symbolically Executing a Fuzzy Tyrant](https://github.com/trailofbits/publications/blob/master/presentations/Symbolically%20Executing%20a%20Fuzzy%20Tyrant) | Stefan Edwards | 2019 |
| [Kernel space fault injection with KRF](https://github.com/trailofbits/publications/blob/master/presentations/Kernel%20space%20fault%20injection%20with%20KRF) | William Woodruff | 2019 |
| [Binary Symbolic Execution With KLEE-Native](https://github.com/trailofbits/publications/blob/master/presentations/Binary%20Symbolic%20Execution%20With%20KLEE-Native) | Sai Vegasena | 2019 |
| [Going sicko mode on the Linux Kernel](https://github.com/trailofbits/publications/blob/master/presentations/Going%20sicko%20mode%20on%20the%20Linux%20Kernel) | William Woodruff | 2019 |
| [Vulnerability Modeling with Binary Ninja](https://github.com/trailofbits/publications/blob/master/presentations/Vulnerability%20Modeling%20with%20Binary%20Ninja) | Josh Watson | 2018 |
| [File Polyglottery; or, This PoC is also a picture of cats](https://github.com/trailofbits/publications/blob/master/presentations/The%20Treachery%20of%20Files) | Evan Sultanik | 2017 |
| [Be a binary rockstar](https://vimeo.com/215511922#t=27m33s) | Sophia D'Antoine | 2017 |
| [Symbolic Execution for Humans](https://github.com/trailofbits/publications/blob/master/presentations/Symbolic%20Execution%20for%20Humans) | Mark Mossberg | 2017 |
| [The spirit of the 90s is still alive in Brooklyn](https://github.com/trailofbits/publications/blob/master/presentations/The%20spirit%20of%20the%2090s%20is%20alive%20in%20Brooklyn) | Ryan Stortz, Sophia D'Antoine | 2017 |
| [The dream of a static and dynamic analysis shootout](https://github.com/trailofbits/publications/blob/master/presentations/The%20dream%20of%20a%20static%20and%20dynamic%20analysis%20shootout) | Ryan Stortz | 2016 |
| [Binary constraint solving for automatic exploit generation](https://github.com/trailofbits/publications/blob/master/presentations/Binary%20constraint%20solving%20for%20automatic%20exploit%20generation) | Sophia D'Antoine | 2016 |
| [The Smart Fuzzer Revolution](https://github.com/trailofbits/publications/blob/master/presentations/The%20Smart%20Fuzzer%20Revolution) | Dan Guido | 2016 |
| [Making a scaleable automated hacking system](https://github.com/trailofbits/publications/blob/master/presentations/Cyber%20Grand%20Challenge) | Artem Dinaburg | 2016 |
| [Cyberdyne - Automatic bug-finding at scale](https://github.com/trailofbits/publications/blob/master/presentations/Cyber%20Grand%20Challenge) | Peter Goodman | 2016 |
| [McSema: Static translation of x86 to LLVM IR](https://github.com/trailofbits/publications/blob/master/presentations/McSema%20-%20Static%20Translation%20of%20x86%20instructions%20to%20LLVM%20IR) | Andrew Ruef, Artem Dinaburg | 2014 |
### Blockchain
| Presentation Title | Author(s) | Year |
| --- | --- | --- |
| [Mutation Testing with Slither: A New Way to Find High-Severity Issues](https://github.com/trailofbits/publications/blob/master/presentations/Mutation%20Testing%20with%20Slither%3A%20A%20New%20Way%20to%20Find%20High-Severity%20Issues) | Guillermo Larregay | 2025 |
| [Slither's Model Context Protocol: Giving LLMs Ground Truth from Static Analysis](https://github.com/trailofbits/publications/blob/master/presentations/Slither%27s%20Model%20Context%20Protocol%3A%20Giving%20LLMs%20Ground%20Truth%20from%20Static%20Analysis) | Ben Samuels | 2025 |
| [The $1.5B Problem: How Exchanges Can Build Safer Cold Storage](https://github.com/trailofbits/publications/blob/master/presentations/The%20%241.5B%20Problem%3A%20How%20Exchanges%20Can%20Build%20Safer%20Cold%20Storage) | Benjamin Samuels | 2025 |
| [How to Become a Smart Contract Auditor](https://github.com/trailofbits/publications/blob/master/presentations/How%20to%20Become%20a%20Smart%20Contract%20Auditor) | nisedo | 2025 |
| [Test your tests: the do's and don'ts of testing](https://github.com/trailofbits/publications/blob/master/presentations/TrustX%202023/Test%20Your%20Tests) | Kurt Willis | 2023 |
| [Slither: a static analysis tool for Vyper and Solidity](https://github.com/trailofbits/publications/blob/master/presentations/TrustX%202023/Slither%20a%20Vyper%20and%20Solidity%20static%20analyzer) | Troy Sargent | 2023 |
| [Roundme: rounding analysis made simpler](https://github.com/trailofbits/publications/blob/master/presentations/TrustX%202023/roundme) | Josselin Feist | 2023 |
| [Smart Contracts: The Beta](https://github.com/trailofbits/publications/blob/master/presentations/Smart%20Contracts%3A%20The%20Beta/DSS%20101.pdf) | Nat Chin | 2023 |
| [Fuzzing like a security engineer](https://github.com/trailofbits/publications/blob/master/presentations/How%20to%20Fuzz%20Like%20a%20Pro/Eth%20Taipei%20Workshop.pdf) | Nat Chin | 2023 |
| [Write better smart contracts with Slither's Python API](https://github.com/trailofbits/publications/blob/master/presentations/Write%20Better%20Smart%20Contracts%20By%20Checking%20Them%20With%20Slither%27s%20Python%20API) | Troy Sargent | 2022 |
| [Building Secure Cairo](https://github.com/trailofbits/publications/blob/master/presentations/Building%20Secure%20Cairo) | Filipe Casal, Simone Monica | 2022 |
| [How to fuzz like a pro](https://github.com/trailofbits/publications/blob/master/presentations/How%20to%20Fuzz%20Like%20a%20Pro) | Josselin Feist, Nat Chin | 2022 |
| [Demystifying Fuzzing](https://github.com/trailofbits/publications/blob/master/presentations/Demystifying%20Fuzzing) | Nat Chin | 2022 |
| [Building a Practical Static Analyzer for Smart Contracts](https://github.com/trailofbits/publications/blob/master/presentations/Building%20a%20Practical%20Static%20Analyzer%20for%20Smart%20Contracts) | Josselin Feist | 2021 |
| [Testing and Verifying Smart Contracts: From Theory to Practice](https://github.com/trailofbits/publications/blob/master/presentations/Testing%20and%20Verifying%20Smart%20Contracts%3A%20From%20Theory%20to%20Practice) | Josselin Feist | 2021 |
| [Safely integrating with ERC20 tokens](https://github.com/trailofbits/publications/blob/master/presentations/Safely%20integrating%20with%20ERC20%20tokens) | Josselin Feist | 2021 |
| [Detecting transaction replacement attacks with Manticore](https://github.com/trailofbits/publications/blob/master/presentations/Detecting%20transaction%20replacement%20attacks%20with%20Manticore) | Sam Moelius | 2020 |
| [DeFi Hacks and Future Threats: The Role of Economics in Secure Protocol Design](https://github.com/trailofbits/publications/blob/master/presentations/DeFi%20Hacks%20and%20Future%20Threats) | Dan Guido | 2020 |
| [Fantastic Bugs and How to Squash Them; or, the Crimes of Solidity](https://github.com/trailofbits/publications/blob/master/presentations/Anatomy%20of%20an%20unsafe%20programming%20language) | Evan Sultanik | 2019 |
| [SlithIR: High-Precision Security Analysis with an IR for Solidity](https://github.com/trailofbits/publications/blob/master/presentations/SlithIR%2C%20An%20Intermediate%20Representation%20of%20Solidity%20to%20enable%20High%20Precision%20Security%20Analysis) | Josselin Feist | 2019 |
| [Slither: A Static Analysis Framework for Smart Contracts](https://github.com/trailofbits/publications/blob/master/presentations/Slither%3A%20A%20Static%20Analysis%20Framework%20for%20Smart%20Contracts) | Josselin Feist | 2019 |
| [What blockchain got right](https://github.com/trailofbits/publications/blob/master/presentations/What%20blockchain%20got%20right) | Dan Guido | 2019 |
| [Traditional Infosec for Blockchain Firms](https://github.com/trailofbits/publications/blob/master/presentations/Traditional%20Infosec%20for%20Blockchain%20Firms) | Dan Guido | 2019 |
| [Property-testing of smart contracts](https://github.com/trailofbits/publications/blob/master/presentations/Property-based%20testing%20of%20smart%20contracts) | JP Smith | 2018 |
| [Anatomy of an unsafe programming language](https://github.com/trailofbits/publications/blob/master/presentations/Anatomy%20of%20an%20unsafe%20programming%20language) | Evan Sultanik | 2018 |
| [Contract upgrade risks and recommendations](https://github.com/trailofbits/publications/blob/master/presentations/Contract%20upgrade%20risks%20and%20recommendations) | Josselin Feist | 2018 |
| [Blackhat Ethereum](https://github.com/trailofbits/publications/blob/master/presentations/Blackhat%20Ethereum) | Ryan Stortz, Jay Little | 2018 |
| [Blockchain Autopsies - Analyzing Smart Contract Deaths](https://github.com/trailofbits/publications/blob/master/presentations/Blockchain%20Autopsies%20-%20Analyzing%20Smart%20Contract%20Deaths) | Jay Little | 2018 |
| [Rattle - an Ethereum EVM binary analysis framework](https://github.com/trailofbits/publications/blob/master/presentations/Rattle%20-%20an%20Ethereum%20EVM%20binary%20analysis%20framework) | Ryan Stortz | 2018 |
| [Securing value on the Ethereum blockchain](https://github.com/trailofbits/publications/blob/master/presentations/Securing%20value%20on%20the%20Ethereum%20blockchain) | Dan Guido | 2018 |
| [Binary analysis, meet the blockchain](https://github.com/trailofbits/publications/blob/master/presentations/Binary%20analysis%2C%20meet%20the%20blockchain) | Mark Mossberg | 2018 |
| [Automatic bug finding for the blockchain](https://github.com/trailofbits/publications/blob/master/presentations/Automatic%20bugfinding%20for%20the%20blockchain) | Felipe Manzano, Josselin Feist | 2017 |
### Compilers
| Presentation Title | Author(s) | Year |
| --- | --- | --- |
| [Constant-Time Coding Support in LLVM](https://github.com/trailofbits/publications/blob/master/presentations/Constant-Time%20Coding%20Support%20in%20LLVM) | Julius Alexandre | 2025 |
| [A Broad Comparative Evaluation of Software Debloating Tools](https://github.com/trailofbits/publications/blob/master/presentations/A%20Broad%20Comparative%20Evaluation%20of%20Software%20Debloating%20Tools/debloater-eval.pdf) | Michael D. Brown, Adam Meily, Eric Kilmer, Ronald Eytchison | 2024 |
| [Repurposing LLVM analyses in MLIR: Also there and back again across the tower of IRs](https://github.com/trailofbits/publications/blob/master/presentations/Repurposing%20LLVM%20analyses%20in%20MLIR%3A%20Also%20there%20and%20back%20again%20across%20the%20Tower%20of%20IRs) | Henrich Lauko | 2024 |
| [VAST: MLIR for program analysis of C/C++](https://github.com/trailofbits/publications/blob/master/presentations/VAST%3A%20MLIR%20for%20program%20analysis%20of%20C) | Henrich Lauko | 2022 |
| [A Broad Comparative Evaluation of x86-64 Binary Rewriters](https://github.com/trailofbits/publications/blob/master/presentations/A%20Broad%20Comparative%20Evaluation%20of%20x86-64%20Binary%20Rewriters/A%20Broad%20Comparative%20Evaluation%20of%20x86-64%20Binary%20Rewriters.pdf) | Michael D. Brown | 2022 |
| [On the Optimization of Equivalent Concurrent Computations](https://github.com/trailofbits/publications/blob/master/presentations/On%20the%20Optimization%20of%20Equivalent%20Concurrent%20Computations/PLDI-EGRAPHS-2022.pdf) | Henrich Lauko, Lukáš Korenčik, Peter Goodman | 2022 |
### Cryptography
| Presentation Title | Author(s) | Year |
| --- | --- | --- |
| [Cut To The QUIC: Slashing QUIC's Performance With A Hash DoS](https://github.com/trailofbits/publications/blob/master/presentations/Cut%20To%20The%20QUIC%3A%20Slashing%20QUIC%27s%20Performance%20With%20A%20Hash%20DoS) | Paul Bottinelli | 2025 |
| [One, Two, TEE: Trust in Numbers Meets Hardware Security](https://github.com/trailofbits/publications/blob/master/presentations/One%2C%20Two%2C%20TEE%3A%20Trust%20in%20Numbers%20Meets%20Hardware%20Security) | Paul Bottinelli | 2025 |
| [Weak Fiat-Shamir attacks on modern proof systems](https://github.com/trailofbits/publications/blob/master/presentations/Weak%20Fiat-Shamir%20attacks%20on%20modern%20proof%20systems) | Jim Miller | 2024 |
| [Building a Rusty path validation library for PyCA Cryptography](https://github.com/trailofbits/publications/blob/master/presentations/Building%20a%20Rusty%20path%20validation%20library%20for%20PyCA%20Cryptography) | William Woodruff | 2024 |
| [Implementing X.509 path validation for Python](https://github.com/trailofbits/publications/blob/master/presentations/Implementing%20X.509%20path%20validation%20for%20Python) | William Woodruff | 2024 |
| [Careful with MAc-then-SIGn](https://github.com/trailofbits/publications/blob/master/presentations/Careful%20with%20MAc-then-SIGn/128_Careful_with_MAC_then_SIGn.pdf) | Marc Ilunga | 2023 |
| [die, PGP, die](https://github.com/trailofbits/publications/blob/master/presentations/die%2C%20PGP%2C%20die) | William Woodruff | 2022 |
| [Seriously, stop using RSA](https://github.com/trailofbits/publications/blob/master/presentations/Seriously%2C%20stop%20using%20RSA) | Ben Perez | 2019 |
| [Best Practices for Cryptography in Python](https://github.com/trailofbits/publications/blob/master/presentations/Best%20Practices%20for%20Cryptography%20in%20Python) | Paul Kehrer | 2019 |
| [Analyzing the MD5 collision in Flame](https://github.com/trailofbits/publications/blob/master/presentations/Analyzing%20the%20MD5%20Collision%20in%20Flame) | Alex Sotirov | 2012 |
### Engineering
| Presentation Title | Author(s) | Year |
| --- | --- | --- |
| [Repeatable Benchmarking: An Exploration of OpenSearch vs Elasticsearch](https://github.com/trailofbits/publications/blob/master/presentations/Repeatable%20Benchmarking%3A%20An%20Exploration%20of%20OpenSearch%20vs%20Elasticsearch) | Evan Downing | 2025 |
| [Evidence-driven Security Engineering](https://github.com/trailofbits/publications/blob/master/presentations/Evidence-driven%20Security%20Engineering) | Dan Guido | 2019 |
| [Linux Security Event Monitoring with osquery](https://github.com/trailofbits/publications/blob/master/presentations/osquery%20Linux%20security%20event%20monitoring) | Alessandro Gario | 2019 |
| [osql: The community oriented osquery fork](https://github.com/trailofbits/publications/blob/master/presentations/osql%3A%20The%20community%20oriented%20osquery%20fork) | Stefano Bonicatti, Mark Mossberg | 2019 |
| [Getting started with osquery](https://github.com/trailofbits/publications/blob/master/presentations/Getting%20started%20with%20osquery) | Lauren Pearl, Andy Ying | 2018 |
| [osquery Super Features](https://github.com/trailofbits/publications/blob/master/presentations/osquery%20Super%20Features) | Lauren Pearl | 2018 |
| [osquery Extension Skunkworks](https://github.com/trailofbits/publications/blob/master/presentations/osquery%20Extension%20Skunkworks) | Mike Myers | 2018 |
| [Build it Break it Fix it](https://github.com/trailofbits/publications/blob/master/presentations/Build%20it%20Break%20it%20Fix%20it) | Andrew Ruef | 2014 |
### Education
| Presentation Title | Author(s) | Year |
| --- | --- | --- |
| [Introduction to Semgrep](https://github.com/trailofbits/publications/blob/master/presentations/Introduction%20To%20Semgrep/Testing%20Handbook%20-%20Semgrep.pdf) and<br /> [Semgrep Practice Exercises](https://github.com/trailofbits/publications/blob/master/presentations/Introduction%20To%20Semgrep/TrailofBits_Semgrep_Practice_Exercises.pdf) | Maciej Domański, Matt Schwager, Spencer Michaels | 2024 |
| [A mostly gentle introduction to LLVM](https://github.com/trailofbits/publications/blob/master/presentations/A%20mostly%20gentle%20introduction%20to%20LLVM) | William Woodruff | 2022 |
| [JWTs, and why they suck](https://github.com/trailofbits/publications/blob/master/presentations/JWTs%2C%20and%20why%20they%20suck) | Rory M | 2021 |
| [The Joy of Pwning](https://github.com/trailofbits/publications/blob/master/presentations/The%20Joy%20of%20Pwning) | Sophia D'Antoine | 2017 |
| [How to CTF - Getting and using Other People's Computers (OPC)](https://github.com/trailofbits/publications/blob/master/presentations/How%20to%20CTF%20-%20Getting%20and%20Using%20OPC) | Jay Little | 2014 |
| [Low-level Security](https://github.com/trailofbits/publications/blob/master/presentations/Low-level%20Security) | Andrew Ruef | 2014 |
| [Security and Your Business](https://github.com/trailofbits/publications/blob/master/presentations/Security%20and%20Your%20Business) | Andrew Ruef | 2014 |
---
[Read more](https://github.com/trailofbits/publications)