Skip to content
KitploitKITPLOIT
HerramientasBlog
Enviar
HerramientasBlog
Enviar

¡Herramientas de Hacking, PenTest y Ciberseguridad para tu Arsenal de Seguridad!

Kitploit es un directorio de herramientas de hacking, ciberseguridad y pentesting. Descubre las últimas actualizaciones de proyectos para encontrar vulnerabilidades, analizar sistemas, automatizar pruebas y fortalecer tu seguridad.

··Feeds·Contacto·Privacidad·© 2026 Kitploit

Directorio de Herramientas

Categorías

Ver todas las categorías
Loading categories
publications — Publicaciones de Trail of Bits | Kitploit
Herramientas/GitHubGitHub/trailofbits/publications
Análisis EstáticoFuzzingCriptografíaCTFAnálisis de BinariosPapers e InvestigaciónAprendizaje y EducaciónRecursos Curados
GitHubtrailofbits/publications

publications

Publicaciones de Trail of Bits

Ver Repositorio
1.9k235hace 5 díasRevisado por Kitploit

Más Populares

Ver todos →

Descubre las herramientas más usadas por nuestra comunidad.

Explora todas las herramientas

Explora nuestra colección de herramientas

Ver todas las herramientas →
Compartir
Sitio web

Publicaciones de Trail of Bits

  • Publicaciones de Trail of Bits
    • Artículos académicos
    • Libros blancos
    • Guías y manuales
    • Presentaciones de conferencias
      • Detección y explotación automatizada de bugs
      • Blockchain
      • Compiladores
      • Criptografía
      • Ingeniería
      • Educación
      • Infraestructura
      • Aprendizaje automático
      • Seguridad móvil
      • Programación
      • Canales laterales
      • Cadena de suministro
      • Análisis de amenazas y malware
    • Podcasts
    • Webinars
    • Comentarios públicos
    • Casos de estudio
    • Revisiones de seguridad
      • Clientes principales
        • Frax Finance
        • MobileCoin
        • Offchain Labs
        • Reserve Protocol
        • Scroll
        • Uniswap
        • Western Digital
      • Revisiones de IA/ML
      • Revisiones de criptografía
      • Revisiones de productos tecnológicos
      • Revisiones nativas de la nube
      • Pruebas de invariantes y proyectos de desarrollo
      • Revisiones de blockchain
        • Revisiones de wallets
        • Algorand
        • Avalanche
        • Bitcoin y derivados
        • Ethereum/EVM
        • NervOS
        • Starknet
        • Solana
        • Substrate
        • Tendermint/Cosmos
        • Tezos
        • TON
        • Otros/Multicadena
    • Divulgaciones y exploits
    • Talleres
    • Conjuntos de datos
    • Resúmenes de servicios
  • Leyenda

Artículos académicos

Libros blancos

Guías y manuales

Presentaciones de conferencias

Detección y explotación automatizada de bugs

Blockchain| Título de la presentación | Autor(es) | Año |

| --- | --- | --- | | Mutation Testing with Slither: A New Way to Find High-Severity Issues | Guillermo Larregay | 2025 | | Slither's Model Context Protocol: Giving LLMs Ground Truth from Static Analysis | Ben Samuels | 2025 | | The $1.5B Problem: How Exchanges Can Build Safer Cold Storage | Benjamin Samuels | 2025 | | How to Become a Smart Contract Auditor | nisedo | 2025 | | Test your tests: the do's and don'ts of testing | Kurt Willis | 2023 | | Slither: a static analysis tool for Vyper and Solidity | Troy Sargent | 2023 | | Roundme: rounding analysis made simpler | Josselin Feist | 2023 | | Smart Contracts: The Beta | Nat Chin | 2023 | | Fuzzing like a security engineer | Nat Chin | 2023 | | Write better smart contracts with Slither's Python API | Troy Sargent | 2022 | | Building Secure Cairo | Filipe Casal, Simone Monica | 2022 | | How to fuzz like a pro | Josselin Feist, Nat Chin | 2022 | | Demystifying Fuzzing | Nat Chin | 2022 | | | Josselin Feist | 2021 | | | Josselin Feist | 2021 | | | Josselin Feist | 2021 | | | Sam Moelius | 2020 | | | Dan Guido | 2020 | | | Evan Sultanik | 2019 | | | Josselin Feist | 2019 | | | Josselin Feist | 2019 | | | Dan Guido | 2019 | | | Dan Guido | 2019 | | | JP Smith | 2018 | | | Evan Sultanik | 2018 | | | Josselin Feist | 2018 | | | Ryan Stortz, Jay Little | 2018 | | | Jay Little | 2018 | | | Ryan Stortz | 2018 | | | Dan Guido | 2018 | | | Mark Mossberg | 2018 | | | Felipe Manzano, Josselin Feist | 2017 |

Compiladores

Criptografía

Ingeniería

Educación

Infraestructura

Título de la presentaciónAutor(es)Año
Return to the 100 Acre WoodsStefan Edwards2019
Swimming with the kubectl fish

Aprendizaje automático

Seguridad móvil

Programación

Canales laterales

Título de la presentaciónAutor(es)Año
Hardware side channels in virtualized environmentsSophia D'Antoine2015
Exploiting Out-of-Order Execution

Cadena de suministro

Análisis de amenazas y malware

Título de la presentaciónAutor(es)Año
Peeling back the 'Shlayers' of macOS MalwareJosh Watson, Erika Noerenberg2019
The Exploit Intelligence Project Revisited

Podcasts| Podcast | Invitado | Fecha | Tema(s) |

| --- | --- | --- | --- | | Risky Biz | Dan Guido | Feb 2026 | IA en Trail of Bits | | What's in the SOSS? 53 | Michael Brown | Feb 2026 | AIxCC y Buttercup | | Insecure Agents 18 | Kikimora Morozova | Dec 2025 | Inyecciones de prompts de IA | | Risky Biz | Keith Hoodlet | Sep 2025 | Inyecciones de prompts de IA | | Zero Signal | Keith Hoodlet | Sep 2025 | Seguridad de la IA | | Unsupervised Learning | Michael Brown | Aug 2025 | AIxCC | | Security Weekly 342 | Will Vandevanter | Aug 2025 | Divulgación de vulnerabilidades de NVIDIA | | CTF Radiooo 01E | Michael Brown y Evan Downing | Aug 2025 | AIxCC | | Click Here Show | Dan Guido | Jun 2025 | Ataques de control remoto de Zoom | | Security Weekly 336 | Artur Cygan | Jun 2025 | Fuzzing de códigos de barras | | Protect AI | Keith Hoodlet | Jun 2025 | Seguridad de MCP | | Open Source Security | William Woodruff | May 2025 | Zizmor y seguridad de GitHub Actions | | MLSecOps | Keith Hoodlet | Apr 2025 | Seguridad de IA/ML | | Risky Biz 786 | Tjaden Hess | Apr 2025 | Criptografía y blockchain | | Security Weekly 323 | Keith Hoodlet | Mar 2025 | GenAI en Appsec | | Xyonix | Keith Hoodlet | Mar 2025 | Seguridad de IA/ML | | The Impulsive Thinker | Dan Guido | Feb 2025 | Neurodivergencia | | | Keith Hoodlet | Oct 2024 | Sesgo en IA/ML | | | Dan Guido | Oct 2024 | Criptografía poscuántica | | () | Dan Guido | Aug 2024 | AI Cyber Challenge de DARPA | | | Josiah Dykstra | May 2024 | Sesgo en seguridad | | | Dan Guido | Apr 2024 | Herramientas de código abierto | | | William Woodruff | Mar 2024 | Seguridad de la cadena de suministro | | | Dan Guido | Dec 2023 | Seguridad de blockchain | | | Dan Guido | May 2023 | Seguridad del ML | | | Nick Selby | Feb 2023 | Modelado de amenazas, auditorías nativas de la nube | | | Dan Guido | Jan 2023 | Divulgación de vulnerabilidades | | | Dan Guido | Jul 2022 | Seguridad de blockchain | | | Nick Selby | Jun 2022 | Seguridad en la nube | | | Dan Guido | Mar 2022 | Tecnología de privacidad | | | Dan Guido | Jan 2022 | Pruebas de conocimiento cero | | | Josselin Feist | Nov 2021 | Seguridad de blockchain | | | Dan Guido | Oct 2021 | Seguridad de blockchain | | | Dan Guido | Jul 2021 | Seguridad móvil e iVerify | | | Hannah Hanks | Mar 2021 | Primera contratación de PeopleOps | | | Dan Guido | Feb 2021 | iVerify | | | Dan Guido | Jan 2021 | Lo que blockchain hizo bien | | | Dan Guido | Sep 2020 | Años sabáticos y contratación de becarios | | | Dan Guido | Aug 2020 | Seguridad de Apple | | | Dan Guido | Jun 2020 | Seguridad de contratos inteligentes | | | Stefan Edwards | May 2020 | Modelado de amenazas | | | Dan Guido | May 2020 | Seguridad de DeFi | | | Dan Guido | Apr 2020 | Votación móvil | | | Stefan Edwards | Apr 2020 | Votación móvil | | | Ben Perez | Mar 2020 | Revisiones de criptografía, ZKP | | | Dan Guido | Jan 2020 | AlgoVPN | | | Stefan Edwards | Oct 2019 | Kubernetes | | | William Woodruff | Sep 2019 | Mejoras de seguridad de PyPI | | | William Woodruff | Aug 2019 | Seguridad, UX y sostenibilidad de PyPI | | | Stefan Edwards, Bobby Tonic | Aug 2019 | Kubernetes | | | Dan Guido | Jul 2019 | Pruebas de contratos inteligentes | | | Stefan Edwards | May 2019 | Android, lenguajes de programación | | | Stefan Edwards | Apr 2019 | Pruebas de seguridad | | | Dan Guido, Josselin Feist | Jan 2019 | El fallido EIP-1283 de Ethereum | | | JP Smith | Jan 2019 | Criptografía poscuántica en CTF | | | Stefan Edwards | Nov 2018 | Lenguajes de programación, symbex | | | Lauren Pearl | Aug 2018 | Ingeniería de seguridad de código abierto | | | Stefan Edwards | Oct 2018 | Pruebas de seguridad, blockchain | | | JP Smith | Aug 2018 | Herramientas de seguridad y auditoría de Trail of Bits | | | JP Smith | Mar 2018 | Seguridad de contratos inteligentes | | | JP Smith | Feb 2018 | Pruebas de contratos inteligentes con Manticore | | | Dan Guido | Oct 2017 | Cómo desarrollar software seguro | | | Dan Guido | May 2017 | y Tor | | | Dan Guido | Apr 2017 | | | | Dan Guido | Mar 2017 | Integridad del flujo de control | | | Dan Guido | Sep 2016 | Resumen de las noticias de la semana | | | Dan Guido | Aug 2016 | Hacking de automóviles y las noticias de la semana | | | Dan Guido | Jul 2016 | DARPA Cyber Grand Challenge | | | Dan Guido | Feb 2016 | | | | Dan Guido | Jun 2015 | DARPA Cyber Grand Challenge | | | Dan Guido | Feb 2015 | DARPA Cyber Grand Challenge |

Seminarios web

Comentarios públicos

Casos prácticos

Análisis en profundidad de cómo los clientes han trabajado con Trail of Bits: el desafío, nuestro enfoque y los resultados. El nivel de esfuerzo se expresa en semanas de ingeniería.

Revisiones de seguridad

Las empresas que nos han permitido hablar de nuestro trabajo se encuentran aquí. Muchas otras permanecen confidenciales.

Clientes principales

Los siguientes clientes han contratado a Trail of Bits para 5 o más revisiones de seguridad:

Frax Finance

MobileCoin

Offchain Labs| Producto | Fecha | Nivel de
esfuerzo | Anuncio | Informe |

| --- | --: | :-: | --- | :-: | | Offchain Labs Arbitrum ArbOS 60/61 | jul 2026 | 24 | | 📄 | | Offchain Labs Reward Distributor Fixes | jun 2026 | 0.8 | | 📄 | | Offchain Labs Stylus SDK | abr 2026 | 9 | | 📄 | | Offchain Labs Arbitrum Quorum Changes | feb 2026 | 1.2 | | 📄 | | Offchain Labs Arbitrum Nitro External DA | ene 2026 | 4 | | 📄✅ | | Offchain Labs Arbitrum ArbOS 50 and 51 (Fusaka) | dic 2025 | | | 📄 | | Offchain Labs Arbitrum Chains Genesis File Generator | dic 2025 | 1.6 | | 📄✅ | | Offchain Labs Upgrade Executor | jul 2025 | 0.2 | | 📄 | | Offchain SetCoreGovernorQuorumAction | jun 2025 | 1.2 | | 📄 | | Offchain Arbitrum Mint/Burn Precompile | jun 2025 | 1.8 | | 📄✅ | | | jun 2025 | 1.8 | | | | | may 2025 | 6 | | | | | abr 2025 | 0.8 | | | | | mar 2025 | 3 | | | | | mar 2025 | 1 | | | | | mar 2025 | 0.8 | | | | | mar 2025 | 1 | | | | | mar 2025 | 1.6 | | | | | mar 2025 | 0.4 | | | | | dic 2024 | 0.8 | | | | | oct 2024 | 2 | | | | | oct 2024 | 2 | | | | | oct 2024 | 2.6 | | | | | sep 2024 | 2 | | | | | ago 2024 | 0.6 | | | | | ago 2024 | 0.6 | | | | | ago 2024 | 3 | | | | | ago 2024 | 1 | | | | | jul 2024 | 2 | | | | | jun 2024 | 3 | | | | | may 2024 | 47 | | | | | abr 2024 | 2 | | | | | abr 2024 | 2 | | | | | abr 2024 | 6 | | | | | abr 2024 | 5 | | | | | feb 2024 | 4 | | | | | ene 2024 | 2 | | | | | dic 2023 | 6 | | | | | sep 2023 | 3 | | | | | ago 2023 | 20 | | |

Reserve Protocol

Scroll

Uniswap

Western Digital

Revisiones de IA/ML

Revisiones de Criptografía| Producto | Fecha | Nivel de
Esfuerzo | Anuncio | Informe |

| ---| --: | :-: | --- | :-: | | MAGIC Grants Monero FCMP ++ Crypto | Jul 2026 | 2 | | 📄✅ | | Ripple Labs XRP Ledger Confidential Transfer | Abr 2026 | 6 | | 📄✅ | | HyperLink AWS Nitro TEE | Mar 2026 | 2,2 | | 📄✅ | | Open Home Foundation SecureTar v3 | Mar 2026 | 1 | | 📄✅ | | Obsidian Sync | Dic 2025 | 2 | | 📄✅ | | NEAR One PedPop+ | May 2025 | 4 | | 📄 | | NEAR One MPC Chain Signatures | Mar 2025 | 6 | | 📄 | | NEAR One Robust ECDSA | Feb 2026 | 6,4 | | 📄✅ | | Anza BLS Signatures | Mar 2026 | 1 | | 📄 | | DV Labs Charon Pedersen DKG | Feb 2026 | 2 | | 📄✅ | | Anza Token-2022 Confidential Transfer, Cryptography | Ene 2026 | 7 | | | | | Ene 2026 | 1 | | | | | Ene 2026 | 6 | | | | | Ene 2026 | 8 | | | | | Dic 2025 | 4 | | | | | Oct 2025 | 32,2 | | | | | Sep 2025 | 4 | | | | | Sep 2025 | 4 | | | | | Ago 2025 | 4,6 | | | | | Abr 2025 | 5 | | | | | Mar 2025 | 12 | | | | | Mar 2025 | 11 | | | | | Dic 2024 | 2 | | | | | Dic 2024 | 3 | | | | | Sep 2024 | 5 | | | | | Ago 2024 | 4 | | | | | Jun 2024 | 10 | | | | | Abr 2024 | 1 | | | | | Mar 2024 | 4 | | | | | Feb 2024 | 5 | | | | | Ene 2024 | 4 | | | | | Nov 2023 | 11 | | | | | Nov 2023 | 3 | | | | | Oct 2023 | 6 | | | | | Oct 2023 | 18 | | | | | Jun 2023 | 14 | | | | | Jun 2023 | 2,5 | , | | | | Jun 2023 | 2,5 | , | | | | Jun 2023 | 0,2 | | | | | Abr 2023 | 12 | | | | | Feb 2023 | 2 | | | | | Feb 2023 | 8 | | | | | Ene 2023 | 2 | | | | | Dic 2022 | 1 | | | | | Nov 2022 | 2 | | | | | Nov 2022 | 7 | | | | | Oct 2022 | 1 | | | | | Sep 2022 | 4 | , | | | | Sep 2022 | 12 | | | | | Jul 2022 | 4 | | | | | Jul 2022 | 1 | | | | | May 2022 | 8 | | | | | Abr 2022 | 12 | | | | | Abr 2022 | 4 | | | | | Mar 2022 | 6 | | | | | Feb 2022 | 10 | | | | | Abr 2021 | 2 | | | | | Mar 2020 | 1 | | | | | Ago 2018 | 5 | | |

Reseñas de Productos Tecnológicos| Producto | Fecha | Nivel de
Esfuerzo | Anuncio | Informe |

| --- | --: | :-: | --- | :-: | | PyTorch ExecuTorch | jun 2026 | 9 | OSTIF| 📄✅ | | Turnkey Key Management System | jun 2026 | 8 | | 📄✅ | | Persona Identities Claims Verification | may 2026 | 3 | | 🔖 | | PyPI Warehouse | abr 2026 | 6 | | 📄 | | Propeller Heads Turbine Front End and SDK | mar 2026 | 2 | | 📄✅ | | Propeller Heads Turbine | mar 2026 | 8 | | 📄✅ | | Zoo Text-to-CAD Platform | mar 2026 | 4 | | 📄✅ | | iVerify | jun 2026 | 2 | | 📄✅ | | X XChat | oct 2025 | 4 | | 📄✅ | | Edera Runtime Container | oct 2025 | 4 | | 📄 | | Meta WhatsApp Private Processing | ago 2025 | 12 | , | | | | jun 2025 | 3 | | | | | may 2025 | 5 | | | | | feb 2025 | 6 | | | | | dic 2024 | 2 | , | | | | dic 2024 | 5 | | | | | nov 2024 | 4 | | | | | sep 2024 | 2 | | | | | jul 2024 | 4 | , | | | | jun 2024 | 4.6 | | | | | may 2024 | 2 | | | | | ene 2024 | 7 | | | | | dic 2023 | 4 | , , | | | | dic 2023 | 2 | | | | | dic 2023 | 4 | , | | | | sep 2023 | 4 | | | | | sep 2023 | 9 | , | | | | sep 2023 | 10 | , | | | | sep 2023 | 6 | | | | | ago 2023 | 6 | | | | | ago 2023 | 6 | | | | | ago 2023 | 4 | | | | | ago 2023 | 4 | , | | | | jul 2023 | 30 | | | | | jul 2023 | 4 | , | | | | may 2023 | 5 | , | | | | abr 2023 | 12 | | | | | mar 2023 | 4 | , | | | | mar 2023 | 6 | , | | | | mar 2023 | 8 | | | | | ene 2023 | 4 | | | | | ene 2023 | 4 | | | | | ene 2023 | 6 | | | | | dic 2022 | 4 | | | | | dic 2022 | 1 | | | | | nov 2022 | 9 | | | | | nov 2022 | 4 | | | | | oct 2022 | 9.5 | , . | | | | oct 2022 | 4 | | | | | oct 2022 | 1.2 | | | | | sep 2022 | 1 | | | | | sep 2022 | 6 | | | | | sep 2022 | 12 | | | | | jul 2022 | 6 | | | | | jul 2022 | 6 | | | | jun 2022 | 6 | | | | | may 2022 | 6 | | | | | may 2022 | 4 | | | | | abr 2022 | 6 | | | | | abr 2022 | 4 | | | | | abr 2022 | 8 | | | | | mar 2022 | 8 | | | | ene 2022 | 4 | | | | | mar 2022 | 4 | | | | | ene 2022 | 6 | | | | | dic 2021 | 2 | | | | nov 2021 | 12 | | | | oct 2021 | 12 | | | | | sep 2021 | 4 | | | | ago 2021 | 8 | | | | jun 2021 | 4 | | | | | jun 2021 | 4 | | | | | abr 2021 | 1 | | | | | abr 2021 | 4 | | | | | feb 2021 | 4 | | | | | ene 2021 | 6 | | | | ene 2021 | 4 | | | | | dic 2020 | 8 | | | | | dic 2020 | 0.43 | | | | ago 2020 | 4 | | | | | jun 2020 | 1 | | | | | jun 2020 | 12 | | | | may 2020 | 9 | | | | abr 2020 | 4 | | | | mar 2020 | 2 | | | | | feb 2020 | 12 | , | | | | feb 2020 | 12 | | | | ene 2020 | 4 | | | | jun 2019 | 12 | | | | | sep 2016 | 1 | | |

Revisiones Cloud-Native

Pruebas de Invariantes y Compromisos de Desarrollo

Revisiones de Blockchain

Revisiones de Billeteras

Algorand

Avalanche

Bitcoin y Derivados| Producto | Fecha | Nivel de
esfuerzo | Anuncio | Informe |

| ---| --: | :-: | --- | :-: | | ZetaChain Bitcoin Inscriptions | Jan 2025 | 2 | | 📄✅ | | Nomic | Nov 2024 | 10 | Nomic | 📄✅ | | STAS SDK | Oct 2021 | 4 | | | | STAS-JS SDK | Sep 2021 | 4 | | | | Bitcoin SV | Jan 2021 | 6 | | | Zcoin | Jul 2020 | 2 | Zcoin | 📄 | | Zcash | Apr 2020 | 3 | Electric Coin Co. | 📄 | | Zcash | Nov 2019 | 6 | Revisiones de seguridad de NU3, Blossom y Sapling| 📄 | | Zcash | Nov 2019 | 6 | | 📄 | | Paymail Protocol | Nov 2019 | 7 | | | | Simple Ledger | Oct 2019 | 3 | | | | Bitcoin SV | Nov 2018 | 12 | | | RSKj | Nov 2017 | 6 | Resultados de la auditoría de seguridad de RSK | |

Ethereum/EVM| Producto | Fecha | Nivel de
esfuerzo | Anuncio | Informe |

| ---| --: | :-: | --- | :-: | | Arcus Labs Rootchain v5 Smart Contracts | Jun 2026 | 2 | | 📄✅ | | Kiln Lagoon Vault Diff Review | May 2026 | 1 | | 📄✅ | | Franklin Templeton BenjiSwap Differential Review | Apr 2026 | 1.2 | | 📄✅ | | Gensyn Buyback-and-Burn Vault | Apr 2026 | 1 | | 📄✅ | | Gensyn Bridged Token | Apr 2026 | 0.2 | | 📄 | | Gensyn ERC-20 Token | Sep 2025 | 0.2 | | 📄 | | Gensyn Delphi Dynamic Paramutuel Markets | Apr 2026 | 3.4 | | 📄✅ | | Shape TokenLock | Mar 2026 | 0.4 | | 📄✅ | | Aave v4 | Feb 2026 | 6 | | 📄✅ | | VeChain VeChainThor Hayabusa Upgrade | Oct 2025 | 6 | | 📄✅ | | | Oct 2025 | 1 | | | | | Oct 2025 | 1.2 | | | | | Sep 2025 | 0.4 | | | | | Aug 2025 | 0.2 | | | | | May 2025 | 1 | | | | | May 2025 | 9 | | | | | May 2025 | 1 | | | | | Apr 2025 | 3 | | | | | Apr 2025 | 3 | | | | | Feb 2025 | 8 | | | | | Jan 2025 | 8 | | | | | Jan 2025 | 3 | | | | | Jan 2025 | 0.4 | | | | | Jan 2025 | 1 | | | | | Dec 2024 | 6 | | | | | Dec 2024 | 1 | | | | | Dec 2024 | 4 | | | | | Nov 2024 | 1 | | | | | Sep 2024 | 4 | | | | | Aug 2024 | 4 | | | | | Aug 2024 | 1 | | | | | Jul 2024 | 1.6 | | | | | Jun 2024 | 1 | | | | | Jun 2024 | 2 | | | | | May 2024 | 3 | | | | | May 2024 | 0.45 | | | | | May 2024 | 4 | | | | | May 2024 | 2 | | | | | May 2024 | 4 | | | | | Mar 2024 | 1 | | | | | Mar 2024 | 4.6 | | | | | Mar 2024 | 0.6 | | | | | Mar 2024 | 4 | | | | | Mar 2024 | 1.2 | | | | | Mar 2024 | 2 | | | | | Feb 2024 | 1 | | | | | Feb 2024 | 1 | | | | | Jan 2024 | 4 | | | | | Dec 2023 | 1.6 | | | | | Dec 2023 | 4 | | | | | Dec 2023 | 4 | | | | | Nov 2023 | 2 | | | | | Oct 2023 | 6 | | | | | Oct 2023 | 1 | | | | | Sep 2023 | 2 | | | | | Sep 2023 | 2 | | | | | Aug 2023 | 0.6 | | | | | Aug 2023 | 4 | | | | | Jul 2023 | 8 | | | | | Jul 2023 | 8 | | | | | Jun 2023 | 1 | | | | | May 2023 | 4 | | | | | Apr 2023 | 8 | | | | | Apr 2023 | 12 | | | | | Apr 2023 | 2 | | | | | Apr 2023 | 2 | | | | | Apr 2023 | 2 | | | | | Mar 2023 | 1 | | | | | Mar 2023 | 6 | | | | | Mar 2023 | 8 | | | | | Feb 2023 | 8 | | | | | Feb 2023 | 4 | | | | | Jan 2023 | 6 | | | | | Dec 2022 | 8 | | | | | Dec 2022 | 1 | | | | | Oct 2022 | 6 | | | | | Oct 2022 | 6 | | | | | Oct 2022 | 4 | | | | | Oct 2022 | 4 | | | | | Sep 2022 | 8 | | | | | Sep 2022 | 4 | | | | | Sep 2022 | 2 | | | | | Sep 2022 | 16 | | | | | Sep 2022 | 6 | | | | | Aug 2022 | 2 | | | | | Aug 2022 | 3 | | | | | Jul 2022 | 0.6 | | | | | Jul 2022 | 8 | | | | | Jul 2022 | 1 | | | | | Jul 2022 | 8 | | | | | Jul 2022 | 3 | | | | | Jul 2022 | 6 | | | | | Jul 2022 | 2 | | | | | May 2022 | 2 | | | | | Jun 2022 | 4 | | | | | Jun 2022 | 4 | | | | | Jun 2022 | 6 | | | | | Jun 2022 | 4 | | | | | Jun 2022 | 2 | | | | | May 2022 | 2 | | | | | May 2022 | 4 | | | | | May 2022 | 4 | | | | | Apr 2022 | 6 | | | | | Apr 2022 | 4 | | | | | Apr 2022 | 4 | | | | | Apr 2022 | 4 | | | | | Mar 2022 | 1 | | | | | Mar 2022 | 6 | | | | | Mar 2022 | 4 | | | | | Mar 2022 | 2 | | | | | Feb 2022 | 4 | | | | | Feb 2022 | 4 | | | | | Feb 2022 | 6 | | | | | Feb 2022 | 4 | | | | | Feb 2022 | 4 | | | | | Feb 2022 | 8 | | | | | Feb 2022 | 8 | | | | | Feb 2022 | 1 | | | | | Jan 2022 | 6 | | | | | Jan 2022 | 6 | | | | | Jan 2022 | 8 | | | | | Jan 2022 | 8 | | | | | Dec 2021 | 4 | | | | | Dec 2021 | 4 | | | | | Nov 2021 | 4 | | | | | Nov 2021 | 6 | | | | | Nov 2021 | 6 | | | | | Nov 2021 | 12 | | | | | Oct 2021 | 3 | | | | | Oct 2021 | 6 | | | | | Oct 2021 | 4 | | | | | Sep 2021 | 6 | | | | | Sep 2021 | 2 | | | | | Sep 2021 | 6 | | | | | Aug 2021 | 5 | | | | | Aug 2021 | 6 | | | | | Aug 2021 | 8 | | | | | Aug 2021 | 6 | | | | | Jul 2021 | 2 | | | | | Jul 2021 | 6 | | | | | Jul 2021 | 2 | | | | | Jun 2021 | 4 | | | | | Jun 2021 | 2 | | | | | Jun 2021 | 6 | | | | | Jun 2021 | 6 | | | | | May 2021 | 4 | | | | | May 2021 | 6 | | | | | Apr 2021 | 6 | | | | | Apr 2021 | 4 | | | | | Apr 2021 | 6 | | | | | Apr 2021 | 1 | | | | | Apr 2021 | 6 | | | | | Apr 2021 | 3 | | | | | Mar 2021 | 6 | | | | | Mar 2021 | 6 | | | | | Feb 2021 | 0.57 | | | | | Feb 2021 | 8 | | | | | Feb 2021 | 4 | | | | | Jan 2021 | 2 | | | | | Jan 2021 | 6 | | | | | Jan 2021 | 1 | | | | | Dec 2020 | 8 | | | | | Nov 2020 | 4 | | | | | Nov 2020 | 4 | | | | | Nov 2020 | 4 | | | | | Nov 2020 | 4 | | | | | Oct 2020 | 3 | | | | | Oct 2020 | 6 | | | | | Sep 2020 | 6 | | | | | Sep 2020 | 3 | | | | | Aug 2020 | 6 | | | | | Aug 2020 | 1 | | | | | Aug 2020 | 1 | | | | | Aug 2020 | 4 | | | | | Jul 2020 | 6 | | | | | Jul 2020 | 3 | | | | | Jul 2020 | 1 | | | | | Jul 2020 | 2 | | | | | Jun 2020 | 4 | | | | | Jun 2020 | 4 | | | | | May 2020 | 6 | | | | | Apr 2020 | 0.43 | | | | | Apr 2020 | 0.43 | | | | | Mar 2020 | 2 | | | | | Mar 2020 | 1 | | | | | Feb 2020 | 0.28 | | | | | Feb 2020 | 2 | | | | | Jan 2020 | 2 | | | | | Jan 2020 | 4 | | | | | Jan 2020 | 1 | | | | | Oct 2019 | 3 | | | | | Oct 2019 | 4 | | | | | Oct 2019 | 10 | | | | | Sep 2019 | 2 | | | | | Sep 2019 | 10 | | | | | Sep 2019 | 13 | | | | | Sep 2019 | 4 | | | | | Aug 2019 | 13 | | | | | Aug 2019 | 4 | | | | | Aug 2019 | 2 | | | | | Jul 2019 | 8 | | | | | May 2019 | 3 | | | | | May 2019 | 4 | | | | | May 2019 | 5 | | | | Unity Coin | Apr 2019 | 1 | | | | | Apr 2019 | 8 | | | | | Mar 2019 | 4 | | | | | Mar 2019 | 3 | | | | | Mar 2019 | 5 | | | | | Mar 2019 | 1 | | | | | Mar 2019 | 5 | | | | | Feb 2019 | 4 | | | | | Jan 2019 | 1 | | | | | Jan 2019 | 1 | | | | | Nov 2018 | 4 | | | | | Nov 2018 | 4 | | | | | Oct 2018 | 4 | | | | | Oct 2018 | 12 | | | | | Oct 2018 | 8 | | | | | Sep 2018 | 12 | | | | | Aug 2018 | 12 | | | | | Jul 2018 | 4 | | | | Jul 2018 | 1 | | | | Jun 2018 | 8 | | | | | May 2018 | 1 | | | | | Apr 2018 | 4 | | | | | Mar 2018 | 4 | | | | | Dec 2017 | 8 | | | | | Oct 2017 | 8 | | | | | Aug 2017 | 6 | | |#### NervOS

Starknet

Solana

Substrate

Tendermint/Cosmos

Tezos

TON

Otros/Multi-Chain


Divulgaciones y exploits

Consulta también el repositorio de exploits.


Read more

Descargar herramienta
Título del artículoEventoFecha de publicación
A Broad Comparative Evaluation of Software Debloating ToolsUSENIX Security 20242024
PolyTracker: Whole-Input Dynamic Information Flow TracingISSTA 20242024
Endokernel: A Thread Safe Monitor for Lightweight Subprocess IsolationUsenix Security 20242024
Design and Implementation of a Coverage-Guided Ruby FuzzerCSET 242024
Test Harness MutilationMutation 20242024
VAST: MLIR compiler for C/C++EuroLLVM Devs' Meeting 20242024
PoTATo: Points-to analysis via domain specific MLIR dialectEuroLLVM Devs' Meeting 20242024
Careful with MAc-then-SIGn: A Computational Analysis of the EDHOC Lightweight Authenticated Key Exchange ProtocolEuro S&P 20232023
Weak Fiat-Shamir Attacks on Modern Proof SystemsIEEE S&P 20232023
Endoprocess: Programmable and Extensible Subprocess IsolationNSPW 20232023
CIVSCOPE: Analyzing Potential Memory Corruption Bugs in Compartment InterfacesSOSP KISV 20232023
Detecting variability bugs through hybrid control and data flow analysisLangSec 20232023
Blind Spots: Automatically detecting ignored program inputsLangSec 20232023
Efficient Proofs of Software Exploitability for Real-world ProcessorsPETS 20232023
Toward Comprehensive Risk Assessments and Assurance of AI SystemsarXiv2023
A Broad Comparative Evaluation of x86-64 Binary RewritersCSET 222022
On the Optimization of Equivalent Concurrent ComputationsPLDI EGRAPHS 20222022
Evaluating Static Analysis Tools via Differential MutationQRS 20212021
echidna-parade: Diverse multicore smart contract fuzzingISSTA 20212021
Differential analysis of x86-64 instruction decodersLangSec 20212021
Echidna: effective, usable, and fast fuzzing for smart contractsISSTA 20202020
ICARUS: Understanding De Facto Formats By Way of Feathers and WaxLangSec 20202020
Toward Automated Grammar Extraction via Semantic Labeling of Parser ImplementationsLangSec 20202020
What are the Actual Flaws in Important Smart Contracts?FC 20202020
Echidna: A Practical Smart Contract FuzzerFC 20202020
RSA GTFOPoC||GTFO 0x202020
Manticore: Symbolic Execution for Binaries and Smart ContractsASE 20192019
Slither: A Static Analysis Framework For Smart ContractsWETSEB 20192019
Toward Smarter Vulnerability Discovery Using Machine LearningAISec 20182018
The Past, Present, and Future of CyberdyneIEEE S&P2018
DeepState - Symbolic Unit Testing for C and C++BAR 20182018
Cyber-Deception and Attribution in Capture-the-Flag ExercisesFOSINT-SI 20152015
Título del documentoAutor(es)Fecha de publicación
Detecting Implicit Conversions in OpenVPN2 Using CodeQLPaweł PłatekSep 2025
Preventing Account Takeovers on Centralized Cryptocurrency Exchanges Recommended PracticesShaun Mirani, Kelly Kaoudis, and Evan SultanikFeb 2025
Input-Driven Recursion: Ongoing Security RisksAlexis Challande and Brad SwainDec 2024
OpenSearch Benchmark AssessmentEvan Downing, Riccardo Schirone, Francesco Bertolaccini, and Ronald EytchisonAug 2024
Cedar, Rego, and OpenFGA Policy Languages: Comparative Language Security AssessmentIan Smith and Kelly KaoudisAug 2024
Toward Comprehensive Risk Assessments and Assurance of AI-Based SystemsHeidy KhlaafMar 2023
Are Blockchains Decentralized? Unintended Centralities in Distributed LedgersEvan Sultanik et al.Jun 2022
Do You Really Need a Blockchain? An Operational Risk AssessmentEvan Sultanik and Mike MyersJun 2022
EnlaceDescripción
Testing HandbookGuías para configurar y automatizar herramientas de análisis estático y dinámico
ZKDocsDocumentación interactiva sobre sistemas de prueba de conocimiento cero
Building Secure Smart ContractsMejores prácticas para desarrollar contratos inteligentes seguros
CTF Field GuideGuía de campo para ganar competiciones Capture The Flag
Ruby Security Field GuideGuía práctica de seguridad en Ruby
Título de la presentaciónAutor(es)Año
Finding Hidden Overflows in Go: Fuzzing Beyond the Compiler's LimitsKevin Valerio2026
Buttercup: Autonomously Finding and Fixing Bugs at Scale in Open-Source SoftwareRonald Eytchison2025
Buttercup: The Future of Trail of Bits' Solution to DARPA's AI Cyber ChallengeTrent Brunson2025
Buttercup and DARPA's AI Cyber Challenge, Ringzer0Henrik Brodin, Ronald Eytchison2025
Our experience competing in the AI Cyber ChallengeMichael Brown et al.2025
Buttercup and DARPA's AI Cyber Challenge, CSAWRonald Eytchison2024
Your Mitigations are My OpportunitiesYarden Shafir2023
Detecting variability bugs with hybrid control and data flowKelly Kaoudis, Henrik Brodin, Evan Sultanik2023
Blind Spots: Identifying Exploitable Program InputsHenrik Brodin, Evan Sultanik y Marek Surovič2023
MLIR is the future of program analysisPeter Goodman2023
A Sermon on the Indulgences of Computational Sacrifice; or, The Superabundant Benedictions of Programming an Absurd NES GameEvan Sultanik2021
Differential analysis of x86-64 instruction decodersWilliam Woodruff, Niki Carroll, Sebastiaan Peters2021
How to find bugs when (ground) truth isn't realWilliam Woodruff2020
Toward Automated Grammar Extraction via Semantic Labeling of Parser ImplementationsCarson Harmon, Brad Larsen, Evan Sultanik2020
The Treachery of Files and Two New Tools that Tame ItEvan Sultanik2019
Symbolically Executing a Fuzzy TyrantStefan Edwards2019
Kernel space fault injection with KRFWilliam Woodruff2019
Binary Symbolic Execution With KLEE-NativeSai Vegasena2019
Going sicko mode on the Linux KernelWilliam Woodruff2019
Vulnerability Modeling with Binary NinjaJosh Watson2018
File Polyglottery; or, This PoC is also a picture of catsEvan Sultanik2017
Be a binary rockstarSophia D'Antoine2017
Symbolic Execution for HumansMark Mossberg2017
The spirit of the 90s is still alive in BrooklynRyan Stortz, Sophia D'Antoine2017
The dream of a static and dynamic analysis shootoutRyan Stortz2016
Binary constraint solving for automatic exploit generationSophia D'Antoine2016
The Smart Fuzzer RevolutionDan Guido2016
Making a scaleable automated hacking systemArtem Dinaburg2016
Cyberdyne - Automatic bug-finding at scalePeter Goodman2016
McSema: Static translation of x86 to LLVM IRAndrew Ruef, Artem Dinaburg2014
Building a Practical Static Analyzer for Smart Contracts
Testing and Verifying Smart Contracts: From Theory to Practice
Safely integrating with ERC20 tokens
Detecting transaction replacement attacks with Manticore
DeFi Hacks and Future Threats: The Role of Economics in Secure Protocol Design
Fantastic Bugs and How to Squash Them; or, the Crimes of Solidity
SlithIR: High-Precision Security Analysis with an IR for Solidity
Slither: A Static Analysis Framework for Smart Contracts
What blockchain got right
Traditional Infosec for Blockchain Firms
Property-testing of smart contracts
Anatomy of an unsafe programming language
Contract upgrade risks and recommendations
Blackhat Ethereum
Blockchain Autopsies - Analyzing Smart Contract Deaths
Rattle - an Ethereum EVM binary analysis framework
Securing value on the Ethereum blockchain
Binary analysis, meet the blockchain
Automatic bug finding for the blockchain
Título de la presentaciónAutor(es)Año
Constant-Time Coding Support in LLVMJulius Alexandre2025
A Broad Comparative Evaluation of Software Debloating ToolsMichael D. Brown, Adam Meily, Eric Kilmer, Ronald Eytchison2024
Repurposing LLVM analyses in MLIR: Also there and back again across the tower of IRsHenrich Lauko2024
VAST: MLIR for program analysis of C/C++Henrich Lauko2022
A Broad Comparative Evaluation of x86-64 Binary RewritersMichael D. Brown2022
On the Optimization of Equivalent Concurrent ComputationsHenrich Lauko, Lukáš Korenčik, Peter Goodman2022
Título de la presentaciónAutor(es)Año
Cut To The QUIC: Slashing QUIC's Performance With A Hash DoSPaul Bottinelli2025
One, Two, TEE: Trust in Numbers Meets Hardware SecurityPaul Bottinelli2025
Weak Fiat-Shamir attacks on modern proof systemsJim Miller2024
Building a Rusty path validation library for PyCA CryptographyWilliam Woodruff2024
Implementing X.509 path validation for PythonWilliam Woodruff2024
Careful with MAc-then-SIGnMarc Ilunga2023
die, PGP, dieWilliam Woodruff2022
Seriously, stop using RSABen Perez2019
Best Practices for Cryptography in PythonPaul Kehrer2019
Analyzing the MD5 collision in FlameAlex Sotirov2012
Título de la presentaciónAutor(es)Año
Repeatable Benchmarking: An Exploration of OpenSearch vs ElasticsearchEvan Downing2025
Evidence-driven Security EngineeringDan Guido2019
Linux Security Event Monitoring with osqueryAlessandro Gario2019
osql: The community oriented osquery forkStefano Bonicatti, Mark Mossberg2019
Getting started with osqueryLauren Pearl, Andy Ying2018
osquery Super FeaturesLauren Pearl2018
osquery Extension SkunkworksMike Myers2018
Build it Break it Fix itAndrew Ruef2014
Título de la presentaciónAutor(es)Año
Introduction to Semgrep y
Semgrep Practice Exercises
Maciej Domański, Matt Schwager, Spencer Michaels2024
A mostly gentle introduction to LLVMWilliam Woodruff2022
JWTs, and why they suckRory M2021
The Joy of PwningSophia D'Antoine2017
How to CTF - Getting and using Other People's Computers (OPC)Jay Little2014
Low-level SecurityAndrew Ruef2014
Security and Your BusinessAndrew Ruef2014
Bringing nothing to the partyVincenzo Iozzo2013
From One Ivory Tower to AnotherVincenzo Iozzo2012
Stefan Edwards
2019
Título de la presentaciónAutor(es)Año
How we made Trail of Bits AI-Native (so far)Dan Guido2026
Weaponizing Image Scaling Against Production AI SystemsKikimora Morozova, Suha Sabi Hussain2025
Indirect Prompt Injection: Architectural Testing Approaches for Real World AI/ML SystemsWill Vandevanter2025
From Polyglots to Prompt Injections: Parsing is Still Execution (And Your LLM Didn't Get the Memo)Evan Sultanik2025
Frontier AI in Cybersecurity: Risks and OpportunitiesDan Guido, Riccardo Schirone2025
The Present and Future of AI and SecurityEvan Downing2024
Incubated Machine Learning Exploits: Backdooring ML Pipelines Using Input-Handling BugsSuha Sabi Hussain2024
Holistic ML Threat ModelsAdelin Travers2024
Using Graph-Based Machine Learning Algorithms for Software AnalysisMichael D. Brown2023
Exploiting Machine Learning Pickle FilesCarson Harmon, Evan Sultanik, Jim Miller, Suha Sabi Hussain2021
PrivacyRaven: Comprehensive Privacy Testing for Deep LearningSuha Sabi Hussain2020
Título de la presentaciónAutor(es)Año
macOS Privilege Escalation Via Traceroute6Paweł Płatek2025
Swift ReversingRyan Stortz2016
Modern iOS Application SecuritySophia D'Antoine, Dan Guido2016
The Mobile Exploit Intelligence ProjectDan Guido2012
A Tale of Mobile ThreatsVincenzo Iozzo2012
Título de la presentaciónAutor(es)Año
Python internals - let's talk about dictsDominik Czarnota2019
Low-level debugging with PwndbgDominik Czarnota2018
Insecure Things to Avoid in PythonDominik Czarnota2018
Sophia D'Antoine
2015
Título de la presentaciónAutor(es)Año
Attestations: a new generation of signatures on PyPIWilliam Woodruff2025
The Next 5 Years of Supply Chain Security on PyPIWilliam Woodruff2024
PEP 740 and PyPI: Bootstrapping Provenance for the Python EcosystemWilliam Woodruff2024
Imagining a zero-trust future for PyPIWilliam Woodruff2024
Build Provenance: Lessons (so far) from HomebrewJoe Sweeney2024
What does it look like to code-sign for an entire packaging ecosystem?William Woodruff2023
Securing your Package Ecosystem with Trusted PublishingWilliam Woodruff2023
Trusted Publishing: Lessons from PyPIWilliam Woodruff2023
Ergonomic codesigning for the Python ecosystem with SigstoreWilliam Woodruff2023
Sigstore for Python Packaging: Next Steps for AdoptionWilliam Woodruff2022
Python Packaging Mystery MeatWilliam Woodruff2022
Automated Tools for Securing the Software Supply ChainMichael D. Brown2022
Improving PyPI's security with Two Factor AuthenticationWilliam Woodruff2019
Dan Guido
2013
Bugcrowd
Risky Biz
Risky Biz
https://youtu.be/4zpPk3Y4CYA?si=Pvd8px1DQHRPsRtM&t=3046
Resilience Rundown
Risky Biz
MLSecOps March 20
yWhales
Risky Biz 707
ASW 229
Risky Biz 690
Risky Biz 672
Cloud Security Reinvented
Skiff Office Hours
Risky Biz 652
Secureum Safecast #3
Secureum Safecast #2
Press Freedom Foundation
Employee Cycle
Risky Biz 614
Building Better Systems 6
WCBS 880
Risky Biz 594
Epicenter 346
Absolute AppSec 97
Unchained 170
Risky Biz 580
Absolute AppSec 91
Zero Knowledge 122
Changelog
Risky Business 559
FOSS Weekly 545
Podcast.__init__ 225
Absolute AppSec 68
Hashing it Out 53
Absolute AppSec 60
Absolute AppSec 55
Hashing it Out 35
Risky Biz 526
Absolute AppSec 37
Risky Biz 510
Absolute AppSec 34
The Smartest Contract 15
Zero Knowledge 16
Risky Biz 488
Risky Biz 474
Georgian Partners 47
AlgoVPN
VUC 643
AlgoVPN
Risky Biz 449
Risky Biz 425
Risky Biz 421
Risky Biz 416
Risky Biz 399
Apple contra el FBI
Risky Biz 348
Risky Biz 370
TítuloPonentesFecha
Los principales errores de TEE que debes corregir antes de tu auditoríaTjaden Hess, Paul Bottinelli y Jules DreanDec 2025
Cómo construir sistemas seguros con cifrado de extremo a extremoMarc Ilunga y Fredrik DahlgrenDec 2025
Tras Wiretap y Battering RAM: qué cambia para la infraestructura blockchain basada en TEETjaden Hess y Andy CampbellNov 2025
Análisis en profundidad de la seguridad de MCP: de los ataques a la defensaKeith Hoodlet, Cliff Smith, Vineeth Sai Narajala, Manish BhattJul 2025
Auditorías de seguridad: mejores prácticas con Trail of BitsChris Dahlheimer, Lindsay Rakowski y Vanessa GennarelliMar 2025
Dominando la investigación web con Burp SuiteKeith Hoodlet, Cliff Smith y James KettleJun 2024
Introducción a CodeQL: ejemplos, herramientas e integración con CIFilipe Casal y Fredrik DahlgrenMar 2024
Introducción a SemgrepMaciej Domanski y Matt SchwagerJan 2024
TemaAgenciaFecha
Bill of Materials automatizado de inteligencia artificial para operaciones de IA/MLU.S. Army PEO IEW&SDec 2023
Seguridad del software de código abierto: áreas de enfoque y priorización a largo plazoONCD, CISA, NSF, DARPA, OMBNov 2023
Comprender las implicaciones de la IA para la seguridad nacionalOTSP de la Casa BlancaJul 2023
Responsabilidad, regulación y auditorías de la IANTIAJun 2023
Un marco integral de evaluación de riesgos para la garantía de la IA en los ámbitos ético, legal y socialDARPAJun 2023
Comprensión de la seguridad de los mercados de criptomonedasCFTCMar 2023
Regulación del software de intrusión y vigilanciaDepartamento de ComercioJul 2015
ClienteEnfoqueFechaNivel de
esfuerzo
Caso práctico
TurnkeyInfraestructura de TEE y AWS Nitro EnclavesJun 20268📖
VantaRevisión de la arquitectura de aislamiento multiinquilinoNov – Dec 20256📖
ScopelyEvaluación del diseño de imparcialidad del PRNG de Monopoly GO!Dec 20242📖
Hugging FaceEvaluación de seguridad de Gradio 5.0 antes de su lanzamientoJun – Jul 20244📖
ScrollRevisiones de seguridad de los circuitos zkEVMApr – Sep 202345.8📖
ProductoFechaNivel de
esfuerzo
AnuncioInforme
FraxGovMay 20234📄✅
Fraxlend y veFPISJan 20234
Fraxlend y FraxFerryOct 20224📄
FraxMay 20224📄
FraxDec 20214📄
FraxMay 20214📄
ProductoFechaNivel de
esfuerzo
AnuncioInforme
MobileCoinJul 20222📄
Fog ProtocolJan 20214📄
MobileCoin BFTOct 20204📄
MobileCoinAug 20204📄
Offchain Arbitrum Block Hash Pusher
📄
Offchain ArbOS 40 Nitro
📄
Offchain Reward Distributor Fixes
📄
Offchain Sequencer Liveness
📄
Offchain Custom Fee Bridge & EIP-7702
📄
Offchain Geth 14.4 Pectra
📄
Offchain Custom Fee Exchange Rate
📄
Offchain Security Council Rotation
📄
Offchain DisableGateway USDT
📄
Offchain BoLD Fixes
📄
Offchain Stylus Emergency Fixes
📄
Offchain BoLD History Commits
📄
Offchain Nitro with BoLD
📄
Offchain Stylus
📄✅
Offchain RARI
📄
Offchain Office Hours Action
📄
Offchain Timeboost Auction
📄
Offchain Orbit Actions
📄
Offchain USDC Gateway
📄
Offchain BoLD & DAC Rewards
📄
Offchain Arbitrum Stylus
📄
Offchain L1-L3 Teleporter
📄
Offchain ArbOS 31
📄
Offchain ArbOS 30 Nitro
📄
Offchain BoLD
📄
Offchain ArbOS
📄
Offchain Arbitrum
📄
Offchain Token Bridge Creator
📄
Offchain Custom Fee Token
📄
Offchain Arbitrum Challenge v2
📄✅
ProductoFechaNivel de
esfuerzo
AnuncioInforme
Reserve Protocol Solidity 4.0.0jun 20253.6📄✅
Reserve Protocol Solana DTFsabr 20252📄✅
Reserve Folio Solidity-Based Contractsabr 20252📄✅
Reserve Protocolago 20228📄, ✅
Reserve Protocolmar 20191📄
ProductoFechaNivel de
esfuerzo
AnuncioInforme
Scroll Feynman Upgrade Smart Contract Changesjul 20251📄
Scroll Euclid Phase 2abr 20254Scroll📄✅🔖
Scroll Euclid Phase 1abr 20253Scroll📄✅🔖
Scroll zstd Compressionjun 202412📄✅
Scroll ZkEVM 4844 Blobabr 20246📄✅
Scroll ZkEVM Wave 3sep 20239📄✅
Scroll l2geth [diff] ago 20232📄
Scroll l2geth [initial]ago 20232📄
Scroll ZkEVM Wave 2ago 20236📄✅
Scroll zkTriejul 20234📄✅
Scroll ZkEVM Wave 1abr 202323📄✅
ProductoFechaNivel de
esfuerzo
AnuncioInforme
Uniswap v4 Corejul 20246📄✅
Uniswap Browser Extensionfeb 20246📄✅
Uniswapsep 20234📄✅
Uniswap Mobile Walletago 20224📄✅
Uniswap V3 Stakerjun 20212
Uniswap V3mar 202110Uniswap📄
ProductoFechaNivel de
esfuerzo
AnuncioInforme
ArmorLockabr 20226
Optimus ROMene 20224
Secure Transportabr 20204
Western Digital Sweet Bene 20204Western Digital📄
SanDisk X600may 20196Múltiples vulnerabilidades en SanDisk X600📄
ProductoFechaNivel de
esfuerzo
AnuncioInforme
YOLOv7oct 20234📄
SafeTensorsmar 20232📄
📄
Calyx Institute HSM Provisioning Ceremony Scripts
📄✅
BSV Blockchain TS-SDK
📄✅
Bron Labs MCP Library
📄✅
NEAR One Confidential Key Derivation
📄✅
Zama
DFINITY Orbit
📄✅
DFINITY Oisy
📄✅
Google Longfellow
📄✅
Open Quantum Safe liboqs
Open Quantum Safe
📄
Go Crypto Libraries
Go
📄✅
Zkonduit EZKL
EZKL
📄✅
Scopely Monopoly Go!
🔖
Aligned
📄✅
Discord DAVE
Discord
📄✅
Discord DAVE
Discord
📄✅
Lit Protocol Cait-Sith
📄✅
Iron Fish FishHash
Iron Fish
📄✅
AgileBits Snow
📄✅
Silence Laboratories Silent Shard
📄✅
Snow
📄✅
Ockam
Trail of Bits
📄
Dfinity Candid
📄✅
Axiom Halo2 Library Upgrades
Axiom
📄✅
Aleo snarkVM, snarkOS, BullsharkBFT
Aleo
📄✅
Axiom Halo2 Libraries
Axiom
📄✅
Dfinity ckBTC and BTC Integration
Foro
Blog
Dfinity SNS Phase 2
Foro
Blog
📄
Thesis tss-lib BitForge
Threshold
📄✅
Chainflip
Chainflip
📄✅
Stealth Addresses
📄✅
Succinct ZK Light Client
Succinct
📄✅
noble-curves Library
📄✅
ParaSpace
📄
Phantom Wallet
ParaSpace
📄
✅
SimpleX Chat
SimpleX
📄
Dfinity
Foro
Blog
📄✅
Aleo snarkVM
📄✅
Microsoft/Verasion Go-COSE
📄✅
BLS Signature Scheme
Binance CGGMP21 and FROST
Aleo snarkVM & snarkOS
Phantom Wallet
Parallel Finance
📄
Polkadex
Linux Kernel
Release Signing and Management
📄
Standard Notes
Standard Notes
📄
Project Callisto
WhatsApp
Trail of Bits
📄✅
Discord E2EE WebAssembly
📄
libVLC
📄
NATS Server
📄✅
Istio Ztunnel
OSTIF
Istio
📄✅
RubyGems.org
📄
Kraken Wallet In-App Browser
📄✅
Kraken Wallet iCloud Backup
📄✅
Hugging Face Gradio
Hugging Face
Trail of Bits
📄✅
Zoo KittyCAD
📄✅
Polygon Labs Iden3 Circuits
📄✅
Kraken Mobile Wallet
Kraken
📄✅
Eclipse Temurin
Respuesta
OSTIF
Eclipse Foundation
📄✅
Arch Linux Pacman
OTF
📄✅
cURL HTTP3
OSTIF
Daniel Stenberg
📄
Lisk SDK 6.1 módulos
📄✅
OpenSSL
OSTIF
OpenSSL
📄✅
PyPI Warehouse
PyPI
Trail of Bits
📄✅
wasmCloud
📄✅
Worldcoin
📄✅
Homebrew
📄
DigitalOcean OIDC
📄
Flux
OSTIF
Flux
📄✅
Lisk SDK
📄✅
DragonFly2
Dragonfly
OSTIF
📄✅
Eclipse JKube
OSTIF
Eclipse
📄✅
Chainflip
Chainflip
📄✅
Eclipse Mosquitto
OSTIF
Eclipse
📛
📄✅
Eclipse Jetty
Jetty
Eclipse
📄✅
Spool Platform
📄✅
Redpanda Platform
Injective Labs Options Market
OpenVPN3
OpenVPN2
OpenVPN
📄✅
OpenArchive Save (Android)
OpenArchive Save
📄✅
Enclave Markets
Fiat Ramps
cURL
OSTIF
Daniel Stenberg
Trail of Bits
📄✅
📛
CloudEvents
OSTIF
📄
OpenArchive Save (iOS)
OpenArchive Save
📄✅
AlphaSOC API
📄✅
Consul Enterprise
snarkVM
📄✅
Hashicorp Boundary
Skiff
Terraform Cloud
Datadog
MATTR
ArmorLock
DigitalOcean Function
Auvik Collector
Fuchsia Platform
Optimus ROM
BitcoinBeach
📄
osquery
📄
Redjack
DigitalOcean Cloud
SpruceID
📄
Doppler
Datadog Agent
Appian
Cashero-2.0
Orbit
VGS Proxy
Skiff
CircleCI Server 3.0
Pruebas de penetración en CircleCI
BitMEX
SecureDrop
2.ª auditoría de SecureDrop Workstation
📄
Citizen Browser
Cómo construimos un inspector de Facebook
Ren
Actualización de desarrollo de agosto
📄
Hey.com
Seguridad seria
📄
Azure Sphere
Mejoras de seguridad en Azure Sphere 20.07
Zoom
90 días completados, ¿qué sigue para Zoom?
Secure Transport
ZeroTier 2.0
ZeroTier
📄
Voatz
Voatz
Tusk
📄
📛
Vault
Voice
Azure Sphere
zlib
📄
ProductoFechaNivel de
Esfuerzo
AnuncioInforme
KEDAdic 20226OSTIF📄
Terraform Enterprisenov 20226
Nomad Enterprisenov 20226
HashiCorp Cloudjun 20229
Tektonmar 20224Revisión de seguridad de Tekton completada📄
Linkerdfeb 20224📛📄✅
CoreDNSene 20224📄
Terraform Enterprisenov 20216
Nomad Enterprisenov 20216
Consul Enterpriseoct 20216
Vault Enterpriseoct 20216
HashiCorp Cloudjun 20218
Argomar 20214📛📄
Terraform Cloudene 20216
Consuloct 202010
Nomadago 20206
Helmago 202042.ª auditoría de seguridad de Helm📄
Terraformmar 20206
OPAmar 20202Propuesta de graduación de Open Policy Agent (OPA)📄
etcdene 20204CNCF📄
Rookdic 20192CNCF📄
Kubernetesmay 201912Google, CNCF📛📄📰
ProductoFechaNivel de
Esfuerzo
AnuncioInformeSuite Pública
Panopticmay 20249📄
Curvancemar 20245📄Invariantes públicos
ProductoFechaNivel de
Esfuerzo
AnuncioInforme
Gemini Smart Walletago 20254📄✅🔖
Otim Smart Walletmar 20253📄✅
dappOS v2 walletjul 20233📄✅
WalletConnect v2.0mar 20234WalletConnect📄✅
Phantom Walletnov 20222
GameStop iOS Web Walletnov 20221
GameStop Walletmar 20222Billetera GameStop
RAILGUNfeb 20224
Casper Web Walletjul 20214📄
Argentago 20204
Magmajun 20201📄
Dharma Walletoct 20194📄
ZecWalletabr 20192📄
Web3mar 20182Guía de W3F y TOB para billeteras de hardware💬
ProductoFechaNivel de
Esfuerzo
AnuncioInforme
Folks Finance Protocolnov 20226📄✅
wXTZnov 20204📄
wALGOnov 20204📄
Meld Goldjul 20202
Pixeldic 20194
Algorandmar 201914Éxito e ímpetu de Algorand
ProductoFechaNivel de
Esfuerzo
AnuncioInforme
Ava Labs AvalancheGoago 202510📄
Alkimiya Silica V2jun 20226
Ava Labsabr 20228
Flare Networkmar 20218
📄
Franklin Templeton BenjiSwap Contract
📄✅
Radius Technology EVMAuth
📄✅
Shape Buyback Contract
📄✅
Starkware StarkEx Diff
📄
Shape Token Contract
📄✅
CAP Labs Covered Agent Protocol
📄✅
Fabric Labs Zipper Protocol
📄✅
Lagrange LAToken
📄
Serai DEX
📄✅
Automata
📄✅
Bunni v2
📄✅
Everstake Staking
📄✅
Parabol Smart Contracts Updates
📄
BeethovenX Sonic Staking
📄✅
Balancer v3
📄✅
ULTI
📄✅
EthStaker Deposit CLI
📄✅
Plume
📄✅
Treehouse tETH Protocol
📄✅
Elixir Protocol
📄✅
Onchain Pass
📄✅
Taraxa Ficus Bridge
📄✅
Devcon Auction Raffle
📄✅
Aladdin f(x) Oracle
📄✅
AiLayer 6079 Contracts
📄✅
Hydrogen Rover Protocol
📄
Lisk Smart Contracts
📄✅
Parabol Smart Contracts
📄✅
Wonderland Prophet
📄✅
SEDA Chain Token Migration
📄✅
Lisk Smart Contracts
📄✅
Bondex Smart Contracts
📄
Aladdin f(x) Protocol
📄✅
Puffer Finance Contracts
📄✅
Intuition
📄
Helios Global
📄✅
ScopeLift Stealth Addresses
📄✅
MetaLayer Blast
📄✅
Unibot Router
📄✅
Acronym Foundation
📄✅
Pyth Entropy
📄
Immutable Bridge
📄✅
Salty.IO Protocol
📄✅
Spiko Smart Contracts
📄✅
Hyperlane v3
📄✅
Elixir Contracts
📄✅
NZDD token
📄✅
Immutable
📄✅
Sandclock
📄✅
Arcade
📄✅
Nested Tetris/HyVM
📄✅
Franklin Templeton
📄✅
Prysm
📄✅
Ajna Protocol
📄✅
Raft
📄✅
MYSO v2
MYSO
📄✅
Smardex AMM
📄✅
Waymont
Atlendis
Atlendis
📄✅
Primitive Hyper
📄✅
Succinct Light Client
Succinct
📄✅
Nested Finance
📄✅
Polygon Edge
Optimism
Paxos PayPal PYUSD
📄✅
GSquared
📄
✅
Meson Protocol
📄
✅
Managed Pools
📄
Ondo
📄
✅
Maple Protocol v2
📄✅
Increment Protocol
📄
✅
Subspace Farmer
📄
✅
Optimism
📄
Nayms
Aggregator
The Franchiser
Meson Protocol
📄
ChainPort
📄
✅
Relay
Beanstalk
Beanstalk
📄
✅
Purpose for Profit
Solon
Roll
Ante Protocol
📄
✅
Sherlock
FlareFinance
TBTv2
Morpho
Morpho
📄
Relayer Contracts
AuctionRaffle
Seaport Protocol
OpenSea
📄
Shell Protocol v2
📄
Optimism
NFTX
NFTX
📄
ReserveLending+
unFederalReserve
Firefly
Maple Finance
📄✅
Gyroscope
LooksRare
📄
Symbiosis
RAILWAY
Persistence ETH2.0
Advanced Blockchain
📄
Perpetual Protocol V2
📄
Futureswap V4.1
Firefly
API3
📄
Beethoven X
📄
Minterest Finance
pSTAKE
Primitive
Primitive
📄
Strips Finance
Cardstack
Sherlock Protocol V2
📄
Maple
Maple
📄
Advanced Blockchain
📄
Opyn
📄
Aave V3
📄✅
Tokemak
Fuji Finance
📄
V2 Vault
Yield V2
📄
Gro protocol
Futureswap V4
RocketPool
📄
AlphaX
Bug Bounty Platform
88mph V3
📄
Timeswap
CompliFi
📄
Optics
FlareFinance
Abyss Lockup
Futureswap V3
CompliFi
Syndicate
Opyn Gamma
📄
Yearn v2 Vaults
📄
Balancer v2
📄
DFX Finance
Tokemak
Warp Contracts
Composable
📄
FlareFinance
MC Dai
dForce Lending
Liquity Proxy Contract
📄
Liquity Protocol
📄
RAY-DAO
Futureswap
Balancer V2
C.R.E.A.M.
📄
LUSD
📄
Origin Dollar
Origin Protocol
📄
Zerion SDK
Teller Protocol
Hermez
Hermez
📄
Graph Protocol
OVM
Prysm
DODO
📄
Yield Protocol
📄
Smart Pool
DeFiner
ETH2.0 Deposit CLI
📄
CurveDAO
📄
Amp
📄
Federated Bridge
dForce dToken
📄
Matic
Lighthouse
tBTC
📄
QTUM
📄
Hegic
📄
Golem Network
Reddit
A New Frontier
Chai
📄
Compound
📄
WorkLock
NuCypher
📄
Balancer
📄
Curve.fi
📄
Livepeer
Topo Finance
0x Protocol
📄
Flexa
Flexa
📄
AZTEC Protocol
📄
Oasis Labs
Aave Protocol
📄
MC Dai
MakerDAO
📄
Staked
Compound
📄
Computable
Computable
📄
Numerai
Numerai
📄
MerkleX
TokenCard
📄
Compound
Compound
📄
Ocean Protocol
Ocean Protocol
UMA Project
Centrifuge
Nomisma
Set Protocol
Set Protocol
📄
NuCypher
NuCypher
📄
AMP StableWire
EIP-1283
ChainSecurity
📄
Ampleforth
Ampleforth
📄
Origin Protocol
Origin Protocol
📄
Paxos Standard
📄
Basecoin
📄
Pantheon
PegaSys
📄
Compound
Compound
NuCypher
NuCypher
📄
CENTRE
CENTRE
Bloom
Bloom
Gemini Dollar
Gemini
📄
Dharma
Dharma
Golem
Golem
📄
LivePeer
Livepeer
📄
DappHub
📄
MakerDAO Sai
MakerDAO
📄
Omega One
ProductoFechaNivel de
esfuerzo
AnuncioInforme
xUDTjun 20212
Nervos -RSAmar 20214
Cheque Cell & ORUfeb 20218
Force Bridge - Solidityfeb 20214
Force Bridge - Rustfeb 20213
Nervos SUDToct 20206📄
ProductoFechaNivel de
esfuerzo
AnuncioInforme
Opusdic 20238📄✅
Auraago 20238📄✅
Nostradic 20228
StarkGatedic 20222
StarkExoct 20221
StarkNet tokenjul 20221
StarkPerpetualene 20228
StarkExnov 20218
ProductoFechaNivel de
esfuerzo
AnuncioInforme
Telcoin Solana Peg Stability Vaultmay 20261.2📄✅
Jobcoin Clock-in Programmar 20260.6📄✅
Anza Token-2022 Confidential Transfer, Blockchainene 20263📄
Franklin Templeton Benji Contractsfeb 20252📄✅
ZetaChain Solana Gatewayene 20251📄✅
Solang Code Generationnov 20234📄
Solang Code Generation, Part 1nov 20232📄
Squads V4oct 20232Squads📄✅
Solang Parser and Semantic Analysissep 20232📄
Solang Solana Libraryjul 20231📄
Token-2022 Programfeb 20231📄✅
Drift Protocoldic 20226Drift📄✅
Solanaabr 202212
ProductoFechaNivel de
esfuerzo
AnuncioInforme
zkVerifyfeb 20253📄
ParaSpacedic 20221📄
ParaSpacenov 20227📄✅
Parallel Financemar 20226📄
Polkadexfeb 202210
Polkadexdic 20214
PINTsep 20214
Polkaswapago 20216📄
AlephBFTjun 20214📄
Acala Networkjun 20214
Compound Chainmay 20216
Acala Networkene 20216📄
Parity Fetherago 20194
Parityjul 201812Parity completa la revisión de seguridad de Trail of Bits📄
ProductoFechaNivel de
esfuerzo
AnuncioInforme
Orga and Merknov 202410Auditoría de seguridad de Trail of Bits para Orga y Merk📄✅
Berachain polaris-gethago 20238
Berachain berachainjun 20236
Umeefeb 20228📄
Columbus-5ene 20222
IBC Protocoldic 20214
THORChainago 202112
Tendermintmar 201912
ndaunov 20188Policy Council
ProductoFechaNivel de
esfuerzo
AnuncioInforme
Kolibriabr 20224
Tezori (T2)dic 20204📄
Dexterjun 20204📄
Tezorijul 20182Gracias a @trailofbits por su revisión de seguridad
ProductoFechaNivel de
esfuerzo
AnuncioInforme
TONCO CLAMM DEX v1.6ene 202611TONCO v1.6 está en vivo📄✅
EVAA Financeago 20258.6📄✅
Swap Coffee TON DEXjul 20256📄✅
FIVA Yield Protocolmay 20256📄✅
FIVA Evaa Integrationmay 20256📄✅
Whales Holdersmay 20254📄✅
Whales Nominatorsmay 20254📄✅
STON.fi DEX V2ene 20258📄✅
Tact Compilerene 20258📄✅
TON Foundation Multisignature Walletmar 20244📄✅
ProductoFechaNivel de
esfuerzo
AnuncioInforme
Mina Decentralized Treasuryjun 20264.6📄✅
EthStaker Deposit CLImar 20261📄✅
Chainlink LlamaRisk LlamaGuard NAV CREfeb 20261📄✅
Chainlink Custom Senders and Receiversfeb 20254📄✅
Shape Gasbackene 20252📄✅
PixelSwap DEXdic 20246📄✅
Arkis Primedic 20245📄✅
Franklin Templeton Aptosoct 20243📄✅
Wormhole Governors and Watchersmar 20238📄✅
DFINITY Canister Sandboxsep 20222📄✅
DFINITY ECDSA/BTCsep 20224📄✅
FROST BLS Protocolsjul 202212
SORA Trustless Bridgejul 20228
CAT Standardjun 20228
DFINITY Threshold ECDSAmay 20228
Arbitrum Nitromar 202216
DeGatefeb 20224📄
ShardXdic 20212
DeGatedic 20214
Threshold-DSAnov 20216
DFINITY Consensusnov 20212DFINITY📄
PolySign HSMoct 20216
Hop Protocol V2sep 20214
Golden Gate Librarysep 20211
PolySignsep 20216
Qredo Blockchainsep 20216
Arbitrumsep 202116
go-schnorrkelago 20214
ShardXago 20214
AElfjul 20214
CrossChain-Bridgejul 20218
DFINITYmay 202124📄
Open Oracleabr 20212
Arbitrum V2feb 20218
eFILene 20212
Highway Consensusnov 20204CasperLabs📄
Stacks V2sep 20206
VRFsago 20202
Celo Oraclejul 20202📄
Arbitrumjul 20206
MYKEYjul 20204
Symboljul 20204Symbol📄
Ledger Filecoinjul 20202📄
Chainlinkjun 20208
Chainlink Fluxmay 20204
Elrondmar 20206
EOSIO SDKene 20204
NEAR Protocolnov 20198
EOSIO 2.0oct 20198
Status-gooct 20199
Celosep 20198
Blockchain.comago 20194
RandomXjun 20192Monero y Arweave validarán RandomX📄
Interest Tokenmay 20190.28
Loommay 201910Auditoría de seguridad de Loom SDK Q1 2019
Building Blocksago 20187El PMA de la ONU usa Ethereum para ayudar a 100 000 refugiados