Skip to content
KitploitKITPLOIT
OutilsBlog
Soumettre
OutilsBlog
Soumettre

Outils de Hacking, PenTest et Cybersécurité pour votre Arsenal de Sécurité !

Kitploit est un répertoire d'outils de hacking, de cybersécurité et de pentesting. Découvrez les dernières mises à jour des projets pour trouver des vulnérabilités, analyser des systèmes, automatiser les tests et renforcer votre sécurité.

··Flux·Contact·Confidentialité·© 2026 Kitploit

Répertoire d'outils

Catégories

Voir toutes les catégories
Loading categories
publications — Publications from Trail of Bits | Kitploit
Outils/GitHubGitHub/trailofbits/publications
Static AnalysisFuzzingCryptographyCTFBinary AnalysisPapers & ResearchLearning & EducationCurated Resources
GitHubtrailofbits/publications

publications

Publications from Trail of Bits

Voir le dépôt
1.9k235il y a 6 joursVérifié par Kitploit

Populaires

Voir tout →

Découvrez les outils les plus utilisés par notre communauté.

Explorer tous les outils

Parcourez notre collection d'outils

Voir tous les outils →
Partager
Site web
Contenu non disponible dans la langue demandée. Affichage de la version anglaise.

Publications from Trail of Bits

  • Publications from Trail of Bits
    • Academic Papers
    • White Papers
    • Guides and Handbooks
    • Conference Presentations
      • Automated bug finding and exploitation
      • Blockchain
      • Compilers
      • Cryptography
      • Engineering
      • Education
      • Infrastructure
      • Machine Learning
      • Mobile security
      • Programming
      • Side channels
      • Supply chain
      • Threat analysis & malware
    • Podcasts
    • Webinars
    • Public Comments
    • Case Studies
    • Security Reviews
      • Major Clients
        • Frax Finance
        • MobileCoin
        • Offchain Labs
        • Reserve Protocol
        • Scroll
        • Uniswap
        • Western Digital
      • AI/ML Reviews
      • Cryptography Reviews
      • Technology Product Reviews
      • Cloud-Native Reviews
      • Invariant Testing and Development Engagements
      • Blockchain Reviews
        • Wallet Reviews
        • Algorand
        • Avalanche
        • Bitcoin & Derivatives
        • Ethereum/EVM
        • NervOS
        • Starknet
        • Solana
        • Substrate
        • Tendermint/Cosmos
        • Tezos
        • TON
        • Other/Multi-Chain
    • Disclosures and exploits
    • Workshops
    • Datasets
    • Service Overviews
  • Legend

Academic Papers

White Papers

Guides and Handbooks

Conference Presentations

Automated bug finding and exploitation

Blockchain

Compilers

Cryptography

Engineering

Education

Infrastructure

Presentation TitleAuthor(s)Year
Return to the 100 Acre WoodsStefan Edwards2019
Swimming with the kubectl fish

Machine Learning

Mobile security

Programming

Side channels

Presentation TitleAuthor(s)Year
Hardware side channels in virtualized environmentsSophia D'Antoine2015
Exploiting Out-of-Order Execution

Supply chain

Threat analysis & malware

Presentation TitleAuthor(s)Year
Peeling back the 'Shlayers' of macOS MalwareJosh Watson, Erika Noerenberg2019
The Exploit Intelligence Project Revisited

Podcasts

Webinars

Public Comments

Case Studies

In-depth looks at how clients have worked with Trail of Bits: the challenge, our approach, and the outcomes. Level of effort is in engineer-weeks.

Security Reviews

Companies that have allowed us to speak about our work can be found here. Many more remain confidential.

Major Clients

The following clients have engaged Trail of Bits for 5 or more security reviews:

Frax Finance

MobileCoin

Offchain Labs

Reserve Protocol

Scroll

Uniswap

Western Digital

AI/ML Reviews

Cryptography Reviews

Technology Product Reviews

Cloud-Native Reviews

Invariant Testing and Development Engagements

Blockchain Reviews

Wallet Reviews

Algorand

Avalanche

Bitcoin & Derivatives

Ethereum/EVM

NervOS

Starknet

Solana

Substrate

Tendermint/Cosmos

Tezos

TON

Other/Multi-Chain

Disclosures and exploits

Check the exploits repository too.


Read more

Télécharger l’outil
Paper TitleVenuePublication Date
A Broad Comparative Evaluation of Software Debloating ToolsUSENIX Security 20242024
PolyTracker: Whole-Input Dynamic Information Flow TracingISSTA 20242024
Endokernel: A Thread Safe Monitor for Lightweight Subprocess IsolationUsenix Security 20242024
Design and Implementation of a Coverage-Guided Ruby FuzzerCSET 242024
Test Harness MutilationMutation 20242024
VAST: MLIR compiler for C/C++EuroLLVM Devs' Meeting 20242024
PoTATo: Points-to analysis via domain specific MLIR dialectEuroLLVM Devs' Meeting 20242024
Careful with MAc-then-SIGn: A Computational Analysis of the EDHOC Lightweight Authenticated Key Exchange ProtocolEuro S&P 20232023
Weak Fiat-Shamir Attacks on Modern Proof SystemsIEEE S&P 20232023
Endoprocess: Programmable and Extensible Subprocess IsolationNSPW 20232023
CIVSCOPE: Analyzing Potential Memory Corruption Bugs in Compartment InterfacesSOSP KISV 20232023
Detecting variability bugs through hybrid control and data flow analysisLangSec 20232023
Blind Spots: Automatically detecting ignored program inputsLangSec 20232023
Efficient Proofs of Software Exploitability for Real-world ProcessorsPETS 20232023
Toward Comprehensive Risk Assessments and Assurance of AI SystemsarXiv2023
A Broad Comparative Evaluation of x86-64 Binary RewritersCSET 222022
On the Optimization of Equivalent Concurrent ComputationsPLDI EGRAPHS 20222022
Evaluating Static Analysis Tools via Differential MutationQRS 20212021
echidna-parade: Diverse multicore smart contract fuzzingISSTA 20212021
Differential analysis of x86-64 instruction decodersLangSec 20212021
Echidna: effective, usable, and fast fuzzing for smart contractsISSTA 20202020
ICARUS: Understanding De Facto Formats By Way of Feathers and WaxLangSec 20202020
Toward Automated Grammar Extraction via Semantic Labeling of Parser ImplementationsLangSec 20202020
What are the Actual Flaws in Important Smart Contracts?FC 20202020
Echidna: A Practical Smart Contract FuzzerFC 20202020
RSA GTFOPoC||GTFO 0x202020
Manticore: Symbolic Execution for Binaries and Smart ContractsASE 20192019
Slither: A Static Analysis Framework For Smart ContractsWETSEB 20192019
Toward Smarter Vulnerability Discovery Using Machine LearningAISec 20182018
The Past, Present, and Future of CyberdyneIEEE S&P2018
DeepState - Symbolic Unit Testing for C and C++BAR 20182018
Cyber-Deception and Attribution in Capture-the-Flag ExercisesFOSINT-SI 20152015
Paper TitleAuthor(s)Publication Date
Detecting Implicit Conversions in OpenVPN2 Using CodeQLPaweł PłatekSep 2025
Preventing Account Takeovers on Centralized Cryptocurrency Exchanges Recommended PracticesShaun Mirani, Kelly Kaoudis, and Evan SultanikFeb 2025
Input-Driven Recursion: Ongoing Security RisksAlexis Challande and Brad SwainDec 2024
OpenSearch Benchmark AssessmentEvan Downing, Riccardo Schirone, Francesco Bertolaccini, and Ronald EytchisonAug 2024
Cedar, Rego, and OpenFGA Policy Languages: Comparative Language Security AssessmentIan Smith and Kelly KaoudisAug 2024
Toward Comprehensive Risk Assessments and Assurance of AI-Based SystemsHeidy KhlaafMar 2023
Are Blockchains Decentralized? Unintended Centralities in Distributed LedgersEvan Sultanik et al.Jun 2022
Do You Really Need a Blockchain? An Operational Risk AssessmentEvan Sultanik and Mike MyersJun 2022
LinkDescription
Testing HandbookGuides for configuring and automating static and dynamic analysis tools
ZKDocsInteractive documentation on zero-knowledge proof systems
Building Secure Smart ContractsBest practices for developing secure smart contracts
CTF Field GuideField guide to winning at Capture The Flag competitions
Ruby Security Field GuidePractical Ruby security guide
Presentation TitleAuthor(s)Year
Finding Hidden Overflows in Go: Fuzzing Beyond the Compiler's LimitsKevin Valerio2026
Buttercup: Autonomously Finding and Fixing Bugs at Scale in Open-Source SoftwareRonald Eytchison2025
Buttercup: The Future of Trail of Bits' Solution to DARPA's AI Cyber ChallengeTrent Brunson2025
Buttercup and DARPA's AI Cyber Challenge, Ringzer0Henrik Brodin, Ronald Eytchison2025
Our experience competing in the AI Cyber ChallengeMichael Brown et al.2025
Buttercup and DARPA's AI Cyber Challenge, CSAWRonald Eytchison2024
Your Mitigations are My OpportunitiesYarden Shafir2023
Detecting variability bugs with hybrid control and data flowKelly Kaoudis, Henrik Brodin, Evan Sultanik2023
Blind Spots: Identifying Exploitable Program InputsHenrik Brodin, Evan Sultanik, and Marek Surovič2023
MLIR is the future of program analysisPeter Goodman2023
A Sermon on the Indulgences of Computational Sacrifice; or, The Superabundant Benedictions of Programming an Absurd NES GameEvan Sultanik2021
Differential analysis of x86-64 instruction decodersWilliam Woodruff, Niki Carroll, Sebastiaan Peters2021
How to find bugs when (ground) truth isn't realWilliam Woodruff2020
Toward Automated Grammar Extraction via Semantic Labeling of Parser ImplementationsCarson Harmon, Brad Larsen, Evan Sultanik2020
The Treachery of Files and Two New Tools that Tame ItEvan Sultanik2019
Symbolically Executing a Fuzzy TyrantStefan Edwards2019
Kernel space fault injection with KRFWilliam Woodruff2019
Binary Symbolic Execution With KLEE-NativeSai Vegasena2019
Going sicko mode on the Linux KernelWilliam Woodruff2019
Vulnerability Modeling with Binary NinjaJosh Watson2018
File Polyglottery; or, This PoC is also a picture of catsEvan Sultanik2017
Be a binary rockstarSophia D'Antoine2017
Symbolic Execution for HumansMark Mossberg2017
The spirit of the 90s is still alive in BrooklynRyan Stortz, Sophia D'Antoine2017
The dream of a static and dynamic analysis shootoutRyan Stortz2016
Binary constraint solving for automatic exploit generationSophia D'Antoine2016
The Smart Fuzzer RevolutionDan Guido2016
Making a scaleable automated hacking systemArtem Dinaburg2016
Cyberdyne - Automatic bug-finding at scalePeter Goodman2016
McSema: Static translation of x86 to LLVM IRAndrew Ruef, Artem Dinaburg2014
Presentation TitleAuthor(s)Year
Mutation Testing with Slither: A New Way to Find High-Severity IssuesGuillermo Larregay2025
Slither's Model Context Protocol: Giving LLMs Ground Truth from Static AnalysisBen Samuels2025
The $1.5B Problem: How Exchanges Can Build Safer Cold StorageBenjamin Samuels2025
How to Become a Smart Contract Auditornisedo2025
Test your tests: the do's and don'ts of testingKurt Willis2023
Slither: a static analysis tool for Vyper and SolidityTroy Sargent2023
Roundme: rounding analysis made simplerJosselin Feist2023
Smart Contracts: The BetaNat Chin2023
Fuzzing like a security engineerNat Chin2023
Write better smart contracts with Slither's Python APITroy Sargent2022
Building Secure CairoFilipe Casal, Simone Monica2022
How to fuzz like a proJosselin Feist, Nat Chin2022
Demystifying FuzzingNat Chin2022
Building a Practical Static Analyzer for Smart ContractsJosselin Feist2021
Testing and Verifying Smart Contracts: From Theory to PracticeJosselin Feist2021
Safely integrating with ERC20 tokensJosselin Feist2021
Detecting transaction replacement attacks with ManticoreSam Moelius2020
DeFi Hacks and Future Threats: The Role of Economics in Secure Protocol DesignDan Guido2020
Fantastic Bugs and How to Squash Them; or, the Crimes of SolidityEvan Sultanik2019
SlithIR: High-Precision Security Analysis with an IR for SolidityJosselin Feist2019
Slither: A Static Analysis Framework for Smart ContractsJosselin Feist2019
What blockchain got rightDan Guido2019
Traditional Infosec for Blockchain FirmsDan Guido2019
Property-testing of smart contractsJP Smith2018
Anatomy of an unsafe programming languageEvan Sultanik2018
Contract upgrade risks and recommendationsJosselin Feist2018
Blackhat EthereumRyan Stortz, Jay Little2018
Blockchain Autopsies - Analyzing Smart Contract DeathsJay Little2018
Rattle - an Ethereum EVM binary analysis frameworkRyan Stortz2018
Securing value on the Ethereum blockchainDan Guido2018
Binary analysis, meet the blockchainMark Mossberg2018
Automatic bug finding for the blockchainFelipe Manzano, Josselin Feist2017
Presentation TitleAuthor(s)Year
Constant-Time Coding Support in LLVMJulius Alexandre2025
A Broad Comparative Evaluation of Software Debloating ToolsMichael D. Brown, Adam Meily, Eric Kilmer, Ronald Eytchison2024
Repurposing LLVM analyses in MLIR: Also there and back again across the tower of IRsHenrich Lauko2024
VAST: MLIR for program analysis of C/C++Henrich Lauko2022
A Broad Comparative Evaluation of x86-64 Binary RewritersMichael D. Brown2022
On the Optimization of Equivalent Concurrent ComputationsHenrich Lauko, Lukáš Korenčik, Peter Goodman2022
Presentation TitleAuthor(s)Year
Cut To The QUIC: Slashing QUIC's Performance With A Hash DoSPaul Bottinelli2025
One, Two, TEE: Trust in Numbers Meets Hardware SecurityPaul Bottinelli2025
Weak Fiat-Shamir attacks on modern proof systemsJim Miller2024
Building a Rusty path validation library for PyCA CryptographyWilliam Woodruff2024
Implementing X.509 path validation for PythonWilliam Woodruff2024
Careful with MAc-then-SIGnMarc Ilunga2023
die, PGP, dieWilliam Woodruff2022
Seriously, stop using RSABen Perez2019
Best Practices for Cryptography in PythonPaul Kehrer2019
Analyzing the MD5 collision in FlameAlex Sotirov2012
Presentation TitleAuthor(s)Year
Repeatable Benchmarking: An Exploration of OpenSearch vs ElasticsearchEvan Downing2025
Evidence-driven Security EngineeringDan Guido2019
Linux Security Event Monitoring with osqueryAlessandro Gario2019
osql: The community oriented osquery forkStefano Bonicatti, Mark Mossberg2019
Getting started with osqueryLauren Pearl, Andy Ying2018
osquery Super FeaturesLauren Pearl2018
osquery Extension SkunkworksMike Myers2018
Build it Break it Fix itAndrew Ruef2014
Presentation TitleAuthor(s)Year
Introduction to Semgrep and
Semgrep Practice Exercises
Maciej Domański, Matt Schwager, Spencer Michaels2024
A mostly gentle introduction to LLVMWilliam Woodruff2022
JWTs, and why they suckRory M2021
The Joy of PwningSophia D'Antoine2017
How to CTF - Getting and using Other People's Computers (OPC)Jay Little2014
Low-level SecurityAndrew Ruef2014
Security and Your BusinessAndrew Ruef2014
Bringing nothing to the partyVincenzo Iozzo2013
From One Ivory Tower to AnotherVincenzo Iozzo2012
Stefan Edwards
2019
Presentation TitleAuthor(s)Year
How we made Trail of Bits AI-Native (so far)Dan Guido2026
Weaponizing Image Scaling Against Production AI SystemsKikimora Morozova, Suha Sabi Hussain2025
Indirect Prompt Injection: Architectural Testing Approaches for Real World AI/ML SystemsWill Vandevanter2025
From Polyglots to Prompt Injections: Parsing is Still Execution (And Your LLM Didn't Get the Memo)Evan Sultanik2025
Frontier AI in Cybersecurity: Risks and OpportunitiesDan Guido, Riccardo Schirone2025
The Present and Future of AI and SecurityEvan Downing2024
Incubated Machine Learning Exploits: Backdooring ML Pipelines Using Input-Handling BugsSuha Sabi Hussain2024
Holistic ML Threat ModelsAdelin Travers2024
Using Graph-Based Machine Learning Algorithms for Software AnalysisMichael D. Brown2023
Exploiting Machine Learning Pickle FilesCarson Harmon, Evan Sultanik, Jim Miller, Suha Sabi Hussain2021
PrivacyRaven: Comprehensive Privacy Testing for Deep LearningSuha Sabi Hussain2020
Presentation TitleAuthor(s)Year
macOS Privilege Escalation Via Traceroute6Paweł Płatek2025
Swift ReversingRyan Stortz2016
Modern iOS Application SecuritySophia D'Antoine, Dan Guido2016
The Mobile Exploit Intelligence ProjectDan Guido2012
A Tale of Mobile ThreatsVincenzo Iozzo2012
Presentation TitleAuthor(s)Year
Python internals - let's talk about dictsDominik Czarnota2019
Low-level debugging with PwndbgDominik Czarnota2018
Insecure Things to Avoid in PythonDominik Czarnota2018
Sophia D'Antoine
2015
Presentation TitleAuthor(s)Year
Attestations: a new generation of signatures on PyPIWilliam Woodruff2025
The Next 5 Years of Supply Chain Security on PyPIWilliam Woodruff2024
PEP 740 and PyPI: Bootstrapping Provenance for the Python EcosystemWilliam Woodruff2024
Imagining a zero-trust future for PyPIWilliam Woodruff2024
Build Provenance: Lessons (so far) from HomebrewJoe Sweeney2024
What does it look like to code-sign for an entire packaging ecosystem?William Woodruff2023
Securing your Package Ecosystem with Trusted PublishingWilliam Woodruff2023
Trusted Publishing: Lessons from PyPIWilliam Woodruff2023
Ergonomic codesigning for the Python ecosystem with SigstoreWilliam Woodruff2023
Sigstore for Python Packaging: Next Steps for AdoptionWilliam Woodruff2022
Python Packaging Mystery MeatWilliam Woodruff2022
Automated Tools for Securing the Software Supply ChainMichael D. Brown2022
Improving PyPI's security with Two Factor AuthenticationWilliam Woodruff2019
Dan Guido
2013
PodcastGuestDateTopic(s)
Risky BizDan GuidoFeb 2026AI at Trail of Bits
What's in the SOSS? 53Michael BrownFeb 2026AIxCC & Buttercup
Insecure Agents 18Kikimora MorozovaDec 2025AI prompt injections
Risky BizKeith HoodletSep 2025AI prompt injections
Zero SignalKeith HoodletSep 2025AI Security
Unsupervised LearningMichael BrownAug 2025AIxCC
Security Weekly 342Will VandevanterAug 2025NVIDIA vulnerability disclosure
CTF Radiooo 01EMichael Brown & Evan DowningAug 2025AIxCC
Click Here ShowDan GuidoJun 2025Zoom remote control attacks
Security Weekly 336Artur CyganJun 2025Fuzzing Barcodes
Protect AIKeith HoodletJun 2025MCP Security
Open Source SecurityWilliam WoodruffMay 2025Zizmor & GitHub Actions security
MLSecOpsKeith HoodletApr 2025AI/ML security
Risky Biz 786Tjaden HessApr 2025Cryptography & blockchain
Security Weekly 323Keith HoodletMar 2025GenAI in Appsec
XyonixKeith HoodletMar 2025AI/ML security
The Impulsive ThinkerDan GuidoFeb 2025Neurodivergence
BugcrowdKeith HoodletOct 2024AI/ML Bias
Risky BizDan GuidoOct 2024Post-quantum cryptography
Risky Biz 759Dan GuidoAug 2024DARPA's AI Cyber Challenge
Resilience RundownJosiah DykstraMay 2024Bias in security
Risky BizDan GuidoApr 2024Open source tooling
MLSecOps March 20William WoodruffMar 2024Supply chain security
yWhalesDan GuidoDec 2023Blockchain security
Risky Biz 707Dan GuidoMay 2023ML security
ASW 229Nick SelbyFeb 2023Threat modeling, cloud-native audits
Risky Biz 690Dan GuidoJan 2023Vuln disclosure
Risky Biz 672Dan GuidoJul 2022Blockchain security
Cloud Security ReinventedNick SelbyJun 2022Cloud security
Skiff Office HoursDan GuidoMar 2022Privacy technology
Risky Biz 652Dan GuidoJan 2022Zero-knowledge proofs
Secureum Safecast #3Josselin FeistNov 2021Blockchain security
Secureum Safecast #2Dan GuidoOct 2021Blockchain security
Press Freedom FoundationDan GuidoJul 2021Mobile security and iVerify
Employee CycleHannah HanksMar 2021First PeopleOps hire
Risky Biz 614Dan GuidoFeb 2021iVerify
Building Better Systems 6Dan GuidoJan 2021What blockchain got right
WCBS 880Dan GuidoSep 2020Gap years and intern hiring
Risky Biz 594Dan GuidoAug 2020Apple security
Epicenter 346Dan GuidoJun 2020Smart contract security
Absolute AppSec 97Stefan EdwardsMay 2020Threat modeling
Unchained 170Dan GuidoMay 2020DeFi security
Risky Biz 580Dan GuidoApr 2020Mobile voting
Absolute AppSec 91Stefan EdwardsApr 2020Mobile voting
Zero Knowledge 122Ben PerezMar 2020Cryptography reviews, ZKPs
ChangelogDan GuidoJan 2020AlgoVPN
Risky Business 559Stefan EdwardsOct 2019Kubernetes
FOSS Weekly 545William WoodruffSep 2019PyPI security improvements
Podcast.__init__ 225William WoodruffAug 2019PyPI security, UX, and sustainability
Absolute AppSec 68Stefan Edwards, Bobby TonicAug 2019Kubernetes
Hashing it Out 53Dan GuidoJul 2019Smart contract testing
Absolute AppSec 60Stefan EdwardsMay 2019Android, programming languages
Absolute AppSec 55Stefan EdwardsApr 2019Security testing
Hashing it Out 35Dan Guido, Josselin FeistJan 2019Ethereum's failed EIP-1283
Risky Biz 526JP SmithJan 2019Post-quantum crypto in CTFs
Absolute AppSec 37Stefan EdwardsNov 2018Programming languages, symbex
Risky Biz 510Lauren PearlAug 2018Open source security engineering
Absolute AppSec 34Stefan EdwardsOct 2018Security testing, blockchain
The Smartest Contract 15JP SmithAug 2018Trail of Bits security tools & auditing
Zero Knowledge 16JP SmithMar 2018Smart contract security
Risky Biz 488JP SmithFeb 2018Smart contract testing w/ Manticore
Risky Biz 474Dan GuidoOct 2017How to engineer secure software
Georgian Partners 47Dan GuidoMay 2017AlgoVPN and Tor
VUC 643Dan GuidoApr 2017AlgoVPN
Risky Biz 449Dan GuidoMar 2017Control Flow Integrity
Risky Biz 425Dan GuidoSep 2016Recap the week's news
Risky Biz 421Dan GuidoAug 2016Car hacking and the week's news
Risky Biz 416Dan GuidoJul 2016DARPA Cyber Grand Challenge
Risky Biz 399Dan GuidoFeb 2016Apple vs the FBI
Risky Biz 348Dan GuidoJun 2015DARPA Cyber Grand Challenge
Risky Biz 370Dan GuidoFeb 2015DARPA Cyber Grand Challenge
TitleSpeakersDate
Top TEE bugs you should fix before your auditTjaden Hess, Paul Bottinelli, & Jules DreanDec 2025
Building secure end-to-end encrypted systemsMarc Ilunga & Fredrik DahlgrenDec 2025
After Wiretap and Battering RAM: What Changes for TEE-Based Blockchain InfrastructureTjaden Hess & Andy CampbellNov 2025
MCP Security Deep Dive: From Attacks to DefenseKeith Hoodlet, Cliff Smith, Vineeth Sai Narajala, Manish BhattJul 2025
Security Audits: Best Practices with Trail of BitsChris Dahlheimer, Lindsay Rakowski, & Vanessa GennarelliMar 2025
Mastering Web Research with Burp SuiteKeith Hoodlet, Cliff Smith, & James KettleJun 2024
Introduction to CodeQL: Examples, Tools and CI IntegrationFilipe Casal & Fredrik DahlgrenMar 2024
Introduction to SemgrepMaciej Domanski & Matt SchwagerJan 2024
TopicAgencyDate
Automated Artifical Intelligence Bill Of Materials for AI/ML OpsU.S. Army PEO IEW&SDec 2023
Open-Source Software Security: Areas of Long-Term Focus and PrioritizationONCD, CISA, NSF, DARPA, OMBNov 2023
Understanding the National Security Implications of AIWhitehouse OTSPJul 2023
AI Accountability, Regulation, and AuditsNTIAJun 2023
A Comprehensive Risk Assessment Framework for AI Assurance in Ethical, Legal, and Societal DomainsDARPAJun 2023
Understanding Crypto Markets SecurityCFTCMar 2023
Regulation of Intrusion and Surveillance SoftwareCommerce DeptJul 2015
ClientFocusDateLevel of
Effort
Case Study
TurnkeyTEE and AWS Nitro Enclaves infrastructureJun 20268📖
VantaMulti-tenant isolation architecture reviewNov – Dec 20256📖
ScopelyMonopoly GO! PRNG fairness design assessmentDec 20242📖
Hugging FaceGradio 5.0 pre-release security assessmentJun – Jul 20244📖
ScrollzkEVM circuit security reviewsApr – Sep 202345.8📖
ProductDateLevel of
Effort
AnnouncementReport
FraxGovMay 20234📄✅
Fraxlend and veFPISJan 20234
Fraxlend and FraxFerryOct 20224📄
FraxMay 20224📄
FraxDec 20214📄
FraxMay 20214📄
ProductDateLevel of
Effort
AnnouncementReport
MobileCoinJul 20222📄
Fog ProtocolJan 20214📄
MobileCoin BFTOct 20204📄
MobileCoinAug 20204📄
ProductDateLevel of
Effort
AnnouncementReport
Offchain Labs Arbitrum ArbOS 60/61Jul 202624📄
Offchain Labs Reward Distributor FixesJun 20260.8📄
Offchain Labs Stylus SDKApr 20269📄
Offchain Labs Arbitrum Quorum ChangesFeb 20261.2📄
Offchain Labs Arbitrum Nitro External DAJan 20264📄✅
Offchain Labs Arbitrum ArbOS 50 and 51 (Fusaka)Dec 2025📄
Offchain Labs Arbitrum Chains Genesis File GeneratorDec 20251.6📄✅
Offchain Labs Upgrade ExecutorJul 20250.2📄
Offchain SetCoreGovernorQuorumActionJun 20251.2📄
Offchain Arbitrum Mint/Burn PrecompileJun 20251.8📄✅
Offchain Arbitrum Block Hash PusherJun 20251.8📄
Offchain ArbOS 40 NitroMay 20256📄
Offchain Reward Distributor FixesApr 20250.8📄
Offchain Sequencer LivenessMar 20253📄
Offchain Custom Fee Bridge & EIP-7702Mar 20251📄
Offchain Geth 14.4 PectraMar 20250.8📄
Offchain Custom Fee Exchange RateMar 20251📄
Offchain Security Council RotationMar 20251.6📄
Offchain DisableGateway USDTMar 20250.4📄
Offchain BoLD FixesDec 20240.8📄
Offchain Stylus Emergency FixesOct 20242📄
Offchain BoLD History CommitsOct 20242📄
Offchain Nitro with BoLDOct 20242.6📄
Offchain StylusSep 20242📄✅
Offchain RARIAug 20240.6📄
Offchain Office Hours ActionAug 20240.6📄
Offchain Timeboost AuctionAug 20243📄
Offchain Orbit ActionsAug 20241📄
Offchain USDC GatewayJul 20242📄
Offchain BoLD & DAC RewardsJun 20243📄
Offchain Arbitrum StylusMay 202447📄
Offchain L1-L3 TeleporterApr 20242📄
Offchain ArbOS 31Apr 20242📄
Offchain ArbOS 30 NitroApr 20246📄
Offchain BoLDApr 20245📄
Offchain ArbOSFeb 20244📄
Offchain ArbitrumJan 20242📄
Offchain Token Bridge CreatorDec 20236📄
Offchain Custom Fee TokenSep 20233📄
Offchain Arbitrum Challenge v2Aug 202320📄✅
ProductDateLevel of
Effort
AnnouncementReport
Reserve Protocol Solidity 4.0.0Jun 20253.6📄✅
Reserve Protocol Solana DTFsApr 20252📄✅
Reserve Folio Solidity-Based ContractsApr 20252📄✅
Reserve ProtocolAug 20228📄, ✅
Reserve ProtocolMar 20191📄
ProductDateLevel of
Effort
AnnouncementReport
Scroll Feynman Upgrade Smart Contract ChangesJul 20251📄
Scroll Euclid Phase 2Apr 20254Scroll📄✅🔖
Scroll Euclid Phase 1Apr 20253Scroll📄✅🔖
Scroll zstd CompressionJun 202412📄✅
Scroll ZkEVM 4844 BlobApr 20246📄✅
Scroll ZkEVM Wave 3Sep 20239📄✅
Scroll l2geth [diff] Aug 20232📄
Scroll l2geth [initial]Aug 20232📄
Scroll ZkEVM Wave 2Aug 20236📄✅
Scroll zkTrieJul 20234📄✅
Scroll ZkEVM Wave 1Apr 202323📄✅
ProductDateLevel of
Effort
AnnouncementReport
Uniswap v4 CoreJul 20246📄✅
Uniswap Browser ExtensionFeb 20246📄✅
UniswapSep 20234📄✅
Uniswap Mobile WalletAug 20224📄✅
Uniswap V3 StakerJun 20212
Uniswap V3Mar 202110Uniswap📄
ProductDateLevel of
Effort
AnnouncementReport
ArmorLockApr 20226
Optimus ROMJan 20224
Secure TransportApr 20204
Western Digital Sweet BJan 20204Western Digital📄
SanDisk X600May 20196Multiple vulnerabilities in SanDisk X600📄
ProductDateLevel of
Effort
AnnouncementReport
YOLOv7Oct 20234📄
SafeTensorsMar 20232📄
ProductDateLevel of
Effort
AnnouncementReport
MAGIC Grants Monero FCMP ++ CryptoJul 20262📄✅
Ripple Labs XRP Ledger Confidential TransferApr 20266📄✅
HyperLink AWS Nitro TEEMar 20262.2📄✅
Open Home Foundation SecureTar v3Mar 20261📄✅
Obsidian SyncDec 20252📄✅
NEAR One PedPop+May 20254📄
NEAR One MPC Chain SignaturesMar 20256📄
NEAR One Robust ECDSAFeb 20266.4📄✅
Anza BLS SignaturesMar 20261📄
DV Labs Charon Pedersen DKGFeb 20262📄✅
Anza Token-2022 Confidential Transfer, CryptographyJan 20267📄
Calyx Institute HSM Provisioning Ceremony ScriptsJan 20261📄✅
BSV Blockchain TS-SDKJan 20266📄✅
Bron Labs MCP LibraryJan 20268📄✅
NEAR One Confidential Key DerivationDec 20254📄✅
ZamaOct 202532.2
DFINITY OrbitSep 20254📄✅
DFINITY OisySep 20254📄✅
Google LongfellowAug 20254.6📄✅
Open Quantum Safe liboqsApr 20255Open Quantum Safe📄
Go Crypto LibrariesMar 202512Go📄✅
Zkonduit EZKLMar 202511EZKL📄✅
Scopely Monopoly Go!Dec 20242🔖
AlignedDec 20243📄✅
Discord DAVESep 20245Discord📄✅
Discord DAVEAug 20244Discord📄✅
Lit Protocol Cait-SithJun 202410📄✅
Iron Fish FishHashApr 20241Iron Fish📄✅
AgileBits SnowMar 20244📄✅
Silence Laboratories Silent ShardFeb 20245📄✅
SnowJan 20244📄✅
OckamNov 202311Trail of Bits📄
Dfinity CandidNov 20233📄✅
Axiom Halo2 Library UpgradesOct 20236Axiom📄✅
Aleo snarkVM, snarkOS, BullsharkBFTOct 202318Aleo📄✅
Axiom Halo2 LibrariesJun 202314Axiom📄✅
Dfinity ckBTC and BTC IntegrationJun 20232.5Forum, Blog
Dfinity SNS Phase 2Jun 20232.5Forum, Blog📄
Thesis tss-lib BitForgeJun 20230.2Threshold📄✅
ChainflipApr 202312Chainflip📄✅
Stealth AddressesFeb 20232📄✅
Succinct ZK Light ClientFeb 20238Succinct📄✅
noble-curves LibraryJan 20232📄✅
ParaSpaceDec 20221📄
Phantom WalletNov 20222
ParaSpaceNov 20227📄✅
SimpleX ChatOct 20221SimpleX📄
DfinitySep 20224Forum, Blog📄✅
Aleo snarkVMSep 202212📄✅
Microsoft/Verasion Go-COSEJul 20224📄✅
BLS Signature SchemeJul 20221
Binance CGGMP21 and FROSTMay 20228
Aleo snarkVM & snarkOSApr 202212
Phantom WalletApr 20224
Parallel FinanceMar 20226📄
PolkadexFeb 202210
Linux KernelApr 20212Release Signing and Management📄
Standard NotesMar 20201Standard Notes📄
Project CallistoAug 20185
ProductDateLevel of
Effort
AnnouncementReport
PyTorch ExecuTorchJun 20269OSTIF📄✅
Turnkey Key Management SystemJun 20268📄✅
Persona Identities Claims VerificationMay 20263🔖
PyPI WarehouseApr 20266📄
Propeller Heads Turbine Front End and SDKMar 20262📄✅
Propeller Heads TurbineMar 20268📄✅
Zoo Text-to-CAD PlatformMar 20264📄✅
iVerifyJun 20262📄✅
X XChatOct 20254📄✅
Edera Runtime ContainerOct 20254📄
Meta WhatsApp Private ProcessingAug 202512WhatsApp, Trail of Bits📄✅
Discord E2EE WebAssemblyJun 20253📄
libVLCMay 20255📄
NATS ServerFeb 20256📄✅
Istio ZtunnelDec 20242OSTIF, Istio📄✅
RubyGems.orgDec 20245📄
Kraken Wallet In-App BrowserNov 20244📄✅
Kraken Wallet iCloud BackupSep 20242📄✅
Hugging Face GradioJul 20244Hugging Face, Trail of Bits📄✅
Zoo KittyCADJun 20244.6📄✅
Polygon Labs Iden3 CircuitsMay 20242📄✅
Kraken Mobile WalletJan 20247Kraken📄✅
Eclipse TemurinDec 20234Response, OSTIF, Eclipse Foundation📄✅
Arch Linux PacmanDec 20232OTF📄✅
cURL HTTP3Dec 20234OSTIF, Daniel Stenberg📄
Lisk SDK 6.1 modulesSep 20234📄✅
OpenSSLSep 20239OSTIF, OpenSSL📄✅
PyPI WarehouseSep 202310PyPI, Trail of Bits📄✅
wasmCloudSep 20236📄✅
WorldcoinAug 20236📄✅
HomebrewAug 20236📄
DigitalOcean OIDCAug 20234📄
FluxAug 20234OSTIF, Flux📄✅
Lisk SDKJul 202330📄✅
DragonFly2Jul 20234Dragonfly, OSTIF📄✅
Eclipse JKubeMay 20235OSTIF, Eclipse📄✅
ChainflipApr 202312Chainflip📄✅
Eclipse MosquittoMar 20234OSTIF, Eclipse📛📄✅
Eclipse JettyMar 20236Jetty, Eclipse📄✅
Spool PlatformMar 20238📄✅
Redpanda PlatformJan 20234
Injective Labs Options MarketJan 20234
OpenVPN3Jan 20236
OpenVPN2Dec 20224OpenVPN📄✅
OpenArchive Save (Android)Dec 20221OpenArchive Save📄✅
Enclave MarketsNov 20229
Fiat RampsNov 20224
cURLOct 20229.5OSTIF, Daniel Stenberg. Trail of Bits📄✅📛
CloudEventsOct 20224OSTIF📄
OpenArchive Save (iOS)Oct 20221.2OpenArchive Save📄✅
AlphaSOC APISep 20221📄✅
Consul EnterpriseSep 20226
snarkVMSep 202212📄✅
Hashicorp BoundaryJul 20226
SkiffJul 20226
Terraform CloudJun 20226
DatadogMay 20226
MATTRMay 20224
ArmorLockApr 20226
DigitalOcean FunctionApr 20224
Auvik CollectorApr 20228
Fuchsia PlatformMar 20228
Optimus ROMJan 20224
BitcoinBeachMar 20224📄
osqueryJan 20226📄
RedjackDec 20212
DigitalOcean CloudNov 202112
SpruceIDOct 202112📄
DopplerSep 20214
Datadog AgentAug 20218
AppianJun 20214
Cashero-2.0Jun 20214
OrbitApr 20211
VGS ProxyApr 20214
SkiffFeb 20214
CircleCI Server 3.0Jan 20216Penetration testing at CircleCI
BitMEXJan 20214
SecureDropDec 202082nd audit of SecureDrop Workstation📄
Citizen BrowserDec 20200.43How We Built a Facebook Inspector
RenAug 20204Aug Development Update📄
Hey.comJun 20201Serious Security📄
Azure SphereJun 202012Azure Sphere 20.07 Security Enhancements
ZoomMay 2020990 Days Done, What's Next for Zoom
Secure TransportApr 20204
ZeroTier 2.0Mar 20202ZeroTier📄
VoatzFeb 202012Voatz, Tusk📄📛
VaultFeb 202012
VoiceJan 20204
Azure SphereJun 201912
zlibSep 20161📄
ProductDateLevel of
Effort
AnnouncementReport
KEDADec 20226OSTIF📄
Terraform EnterpriseNov 20226
Nomad EnterpriseNov 20226
HashiCorp CloudJun 20229
TektonMar 20224Tekton Security Review Completed📄
LinkerdFeb 20224📛📄✅
CoreDNSJan 20224📄
Terraform EnterpriseNov 20216
Nomad EnterpriseNov 20216
Consul EnterpriseOct 20216
Vault EnterpriseOct 20216
HashiCorp CloudJun 20218
ArgoMar 20214📛📄
Terraform CloudJan 20216
ConsulOct 202010
NomadAug 20206
HelmAug 20204Helm 2nd Security Audit📄
TerraformMar 20206
OPAMar 20202Open Policy Agent (OPA) Graduation Proposal📄
etcdJan 20204CNCF📄
RookDec 20192CNCF📄
KubernetesMay 201912Google, CNCF📛📄📰
ProductDateLevel of
Effort
AnnouncementReportPublic Suite
PanopticMay 20249📄
CurvanceMar 20245📄Public invariants
ProductDateLevel of
Effort
AnnouncementReport
Gemini Smart WalletAug 20254📄✅🔖
Otim Smart WalletMar 20253📄✅
dappOS v2 walletJul 20233📄✅
WalletConnect v2.0Mar 20234WalletConnect📄✅
Phantom WalletNov 20222
GameStop iOS Web WalletNov 20221
GameStop WalletMar 20222GameStop wallet
RAILGUNFeb 20224
Casper Web WalletJul 20214📄
ArgentAug 20204
MagmaJun 20201📄
Dharma WalletOct 20194📄
ZecWalletApr 20192📄
Web3Mar 20182W3F and TOB hardware wallet guidance💬
ProductDateLevel of
Effort
AnnouncementReport
Folks Finance ProtocolNov 20226📄✅
wXTZNov 20204📄
wALGONov 20204📄
Meld GoldJul 20202
PixelDec 20194
AlgorandMar 201914Success and momentum of Algorand
ProductDateLevel of
Effort
AnnouncementReport
Ava Labs AvalancheGoAug 202510📄
Alkimiya Silica V2Jun 20226
Ava LabsApr 20228
Flare NetworkMar 20218
ProductDateLevel of
Effort
AnnouncementReport
ZetaChain Bitcoin InscriptionsJan 20252📄✅
NomicNov 202410Nomic📄✅
STAS SDKOct 20214
STAS-JS SDKSep 20214
Bitcoin SVJan 20216
ZcoinJul 20202Zcoin📄
ZcashApr 20203Electric Coin Co.📄
ZcashNov 20196NU3, Blossom, and Sapling security reviews📄
ZcashNov 20196📄
Paymail ProtocolNov 20197
Simple LedgerOct 20193
Bitcoin SVNov 201812
RSKjNov 20176RSK security audit results📄
ProductDateLevel of
Effort
AnnouncementReport
Arcus Labs Rootchain v5 Smart ContractsJun 20262📄✅
Kiln Lagoon Vault Diff ReviewMay 20261📄✅
Franklin Templeton BenjiSwap Differential ReviewApr 20261.2📄✅
Gensyn Buyback-and-Burn VaultApr 20261📄✅
Gensyn Bridged TokenApr 20260.2📄
Gensyn ERC-20 TokenSep 20250.2📄
Gensyn Delphi Dynamic Paramutuel MarketsApr 20263.4📄✅
Shape TokenLockMar 20260.4📄✅
Aave v4Feb 20266📄✅
VeChain VeChainThor Hayabusa UpgradeOct 20256📄✅
Franklin Templeton BenjiSwap ContractOct 20251📄✅
Radius Technology EVMAuthOct 20251.2📄✅
Shape Buyback ContractSep 20250.4📄✅
Starkware StarkEx DiffAug 20250.2📄
Shape Token ContractMay 20251📄✅
CAP Labs Covered Agent ProtocolMay 20259📄✅
Fabric Labs Zipper ProtocolMay 20251📄✅
Lagrange LATokenApr 20253📄
Serai DEXApr 20253📄✅
AutomataFeb 20258📄✅
Bunni v2Jan 20258📄✅
Everstake StakingJan 20253📄✅
Parabol Smart Contracts UpdatesJan 20250.4📄
BeethovenX Sonic StakingJan 20251📄✅
Balancer v3Dec 20246📄✅
ULTIDec 20241📄✅
EthStaker Deposit CLIDec 20244📄✅
PlumeNov 20241📄✅
Treehouse tETH ProtocolSep 20244📄✅
Elixir ProtocolAug 20244📄✅
Onchain PassAug 20241📄✅
Taraxa Ficus BridgeJul 20241.6📄✅
Devcon Auction RaffleJun 20241📄✅
Aladdin f(x) OracleJun 20242📄✅
AiLayer 6079 ContractsMay 20243📄✅
Hydrogen Rover ProtocolMay 20240.45📄
Lisk Smart ContractsMay 20244📄✅
Parabol Smart ContractsMay 20242📄✅
Wonderland ProphetMay 20244📄✅
SEDA Chain Token MigrationMar 20241📄✅
Lisk Smart ContractsMar 20244.6📄✅
Bondex Smart ContractsMar 20240.6📄
Aladdin f(x) ProtocolMar 20244📄✅
Puffer Finance ContractsMar 20241.2📄✅
IntuitionMar 20242📄
Helios GlobalFeb 20241📄✅
ScopeLift Stealth AddressesFeb 20241📄✅
MetaLayer BlastJan 20244📄✅
Unibot RouterDec 20231.6📄✅
Acronym FoundationDec 20234📄✅
Pyth EntropyDec 20234📄
Immutable BridgeNov 20232📄✅
Salty.IO ProtocolOct 20236📄✅
Spiko Smart ContractsOct 20231📄✅
Hyperlane v3Sep 20232📄✅
Elixir ContractsSep 20232📄✅
NZDD tokenAug 20230.6📄✅
ImmutableAug 20234📄✅
SandclockJul 20238📄✅
ArcadeJul 20238📄✅
Nested Tetris/HyVMJun 20231📄✅
Franklin TempletonMay 20234📄✅
PrysmApr 20238📄✅
Ajna ProtocolApr 202312📄✅
RaftApr 20232📄✅
MYSO v2Apr 20232MYSO📄✅
Smardex AMMApr 20232📄✅
WaymontMar 20231
AtlendisMar 20236Atlendis📄✅
Primitive HyperMar 20238📄✅
Succinct Light ClientFeb 20238Succinct📄✅
Nested FinanceFeb 20234📄✅
Polygon EdgeJan 20236
OptimismDec 20228
Paxos PayPal PYUSDDec 20221📄✅
GSquaredOct 20226📄✅
Meson ProtocolOct 20226📄✅
Managed PoolsOct 20224📄
OndoOct 20224📄✅
Maple Protocol v2Sep 20228📄✅
Increment ProtocolSep 20224📄✅
Subspace FarmerSep 20222📄✅
OptimismSep 202216📄
NaymsSep 20226
AggregatorAug 20222
The FranchiserAug 20223
Meson ProtocolJul 20220.6📄
ChainPortJul 20228📄✅
RelayJul 20221
BeanstalkJul 20228Beanstalk📄✅
Purpose for ProfitJul 20223
SolonJul 20226
RollJul 20222
Ante ProtocolMay 20222📄✅
SherlockJun 20224
FlareFinanceJun 20224
TBTv2Jun 20226
MorphoJun 20224Morpho📄
Relayer ContractsJun 20222
AuctionRaffleMay 20222
Seaport ProtocolMay 20224OpenSea📄
Shell Protocol v2May 20224📄
OptimismApr 20226
NFTXApr 20224NFTX📄
ReserveLending+Apr 20224unFederalReserve
FireflyApr 20224
Maple FinanceMar 20221📄✅
GyroscopeMar 20226
LooksRareMar 20224📄
SymbiosisMar 20222
RAILWAYFeb 20224
Persistence ETH2.0Feb 20224
Advanced BlockchainFeb 20226📄
Perpetual Protocol V2Feb 20224📄
Futureswap V4.1Feb 20224
FireflyFeb 20228
API3Feb 20228📄
Beethoven XFeb 20221📄
Minterest FinanceJan 20226
pSTAKEJan 20226
PrimitiveJan 20228Primitive📄
Strips FinanceJan 20228
CardstackDec 20214
Sherlock Protocol V2Dec 20214📄
MapleNov 20214Maple📄
Advanced BlockchainNov 20216📄
OpynNov 20216📄
Aave V3Nov 202112📄✅
TokemakOct 20213
Fuji FinanceOct 20216📄
V2 VaultOct 20214
Yield V2Sep 20216📄
Gro protocolSep 20212
Futureswap V4Sep 20216
RocketPoolAug 20215📄
AlphaXAug 20216
Bug Bounty PlatformAug 20218
88mph V3Aug 20216📄
TimeswapJul 20212
CompliFiJul 20216📄
OpticsJul 20212
FlareFinanceJun 20214
Abyss LockupJun 20212
Futureswap V3Jun 20216
CompliFiJun 20216
SyndicateMay 20214
Opyn GammaMay 20216📄
Yearn v2 VaultsApr 20216📄
Balancer v2Apr 20214📄
DFX FinanceApr 20216
TokemakApr 20211
Warp ContractsApr 20216Composable📄
FlareFinanceApr 20213
MC DaiMar 20216
dForce LendingMar 20216
Liquity Proxy ContractFeb 20210.57📄
Liquity ProtocolFeb 20218📄
RAY-DAOFeb 20214
FutureswapJan 20212
Balancer V2Jan 20216
C.R.E.A.M.Jan 20211📄
LUSDDec 20208📄
Origin DollarNov 20204Origin Protocol📄
Zerion SDKNov 20204
Teller ProtocolNov 20204
HermezNov 20204Hermez📄
Graph ProtocolOct 20203
OVMOct 20206
PrysmSep 20206
DODOSep 20203📄
Yield ProtocolAug 20206📄
Smart PoolAug 20201
DeFinerAug 20201
ETH2.0 Deposit CLIAug 20204📄
CurveDAOJul 20206📄
AmpJul 20203📄
Federated BridgeJul 20201
dForce dTokenJul 20202📄
MaticJun 20204
LighthouseJun 20204
tBTCMay 20206📄
QTUMApr 20200.43📄
HegicApr 20200.43📄
Golem NetworkMar 20202
RedditMar 20201A New Frontier
ChaiFeb 20200.28📄
CompoundFeb 20202📄
WorkLockJan 20202NuCypher📄
BalancerJan 20204📄
Curve.fiJan 20201📄
LivepeerOct 20193
Topo FinanceOct 20194
0x ProtocolOct 201910📄
FlexaSep 20192Flexa📄
AZTEC ProtocolSep 201910📄
Oasis LabsSep 201913
Aave ProtocolSep 20194📄
MC DaiAug 201913MakerDAO📄
StakedAug 20194
CompoundAug 20192📄
ComputableJul 20198Computable📄
NumeraiMay 20193Numerai📄
MerkleXMay 20194
TokenCardMay 20195📄
Unity CoinApr 20191
CompoundApr 20198Compound📄
Ocean ProtocolMar 20194Ocean Protocol
UMA ProjectMar 20193
CentrifugeMar 20195
NomismaMar 20191
Set ProtocolMar 20195Set Protocol📄
NuCypherFeb 20194NuCypher📄
AMP StableWireJan 20191
EIP-1283Jan 20191ChainSecurity📄
AmpleforthNov 20184Ampleforth📄
Origin ProtocolNov 20184Origin Protocol📄
Paxos StandardOct 20184📄
BasecoinOct 201812📄
PantheonOct 20188PegaSys📄
CompoundSep 201812Compound
NuCypherAug 201812NuCypher📄
CENTREJul 20184CENTRE
BloomJul 20181Bloom
Gemini DollarJun 20188Gemini📄
DharmaMay 20181Dharma
GolemApr 20184Golem📄
LivePeerMar 20184Livepeer📄
DappHubDec 20178📄
MakerDAO SaiOct 20178MakerDAO📄
Omega OneAug 20176
ProductDateLevel of
Effort
AnnouncementReport
xUDTJun 20212
Nervos -RSAMar 20214
Cheque Cell & ORUFeb 20218
Force Bridge - SolidityFeb 20214
Force Bridge - RustFeb 20213
Nervos SUDTOct 20206📄
ProductDateLevel of
Effort
AnnouncementReport
OpusDec 20238📄✅
AuraAug 20238📄✅
NostraDec 20228
StarkGateDec 20222
StarkExOct 20221
StarkNet tokenJul 20221
StarkPerpetualJan 20228
StarkExNov 20218
ProductDateLevel of
Effort
AnnouncementReport
Telcoin Solana Peg Stability VaultMay 20261.2📄✅
Jobcoin Clock-in ProgramMar 20260.6📄✅
Anza Token-2022 Confidential Transfer, BlockchainJan 20263📄
Franklin Templeton Benji ContractsFeb 20252📄✅
ZetaChain Solana GatewayJan 20251📄✅
Solang Code GenerationNov 20234📄
Solang Code Generation, Part 1Nov 20232📄
Squads V4Oct 20232Squads📄✅
Solang Parser and Semantic AnalysisSep 20232📄
Solang Solana LibraryJul 20231📄
Token-2022 ProgramFeb 20231📄✅
Drift ProtocolDec 20226Drift📄✅
SolanaApr 202212
ProductDateLevel of
Effort
AnnouncementReport
zkVerifyFeb 20253📄
ParaSpaceDec 20221📄
ParaSpaceNov 20227📄✅
Parallel FinanceMar 20226📄
PolkadexFeb 202210
PolkadexDec 20214
PINTSep 20214
PolkaswapAug 20216📄
AlephBFTJun 20214📄
Acala NetworkJun 20214
Compound ChainMay 20216
Acala NetworkJan 20216📄
Parity FetherAug 20194
ParityJul 201812Parity completes Trail of Bits security review📄
ProductDateLevel of
Effort
AnnouncementReport
Orga and MerkNov 202410Orga & Merk Trail of Bits Security Audit📄✅
Berachain polaris-gethAug 20238
Berachain berachainJun 20236
UmeeFeb 20228📄
Columbus-5Jan 20222
IBC ProtocolDec 20214
THORChainAug 202112
TendermintMar 201912
ndauNov 20188Policy Council
ProductDateLevel of
Effort
AnnouncementReport
KolibriApr 20224
Tezori (T2)Dec 20204📄
DexterJun 20204📄
TezoriJul 20182Thanks to @trailofbits for their security review
ProductDateLevel of
Effort
AnnouncementReport
TONCO CLAMM DEX v1.6Jan 202611TONCO v1.6 is live📄✅
EVAA FinanceAug 20258.6📄✅
Swap Coffee TON DEXJul 20256📄✅
FIVA Yield ProtocolMay 20256📄✅
FIVA Evaa IntegrationMay 20256📄✅
Whales HoldersMay 20254📄✅
Whales NominatorsMay 20254📄✅
STON.fi DEX V2Jan 20258📄✅
Tact CompilerJan 20258📄✅
TON Foundation Multisignature WalletMar 20244📄✅
ProductDateLevel of
Effort
AnnouncementReport
Mina Decentralized TreasuryJun 20264.6📄✅
EthStaker Deposit CLIMar 20261📄✅
Chainlink LlamaRisk LlamaGuard NAV CREFeb 20261📄✅
Chainlink Custom Senders and ReceiversFeb 20254📄✅
Shape GasbackJan 20252📄✅
PixelSwap DEXDec 20246📄✅
Arkis PrimeDec 20245📄✅
Franklin Templeton AptosOct 20243📄✅
Wormhole Governors and WatchersMar 20238📄✅
DFINITY Canister SandboxSep 20222📄✅
DFINITY ECDSA/BTCSep 20224📄✅
FROST BLS ProtocolsJul 202212
SORA Trustless BridgeJul 20228
CAT StandardJun 20228
DFINITY Threshold ECDSAMay 20228
Arbitrum NitroMar 202216
DeGateFeb 20224📄
ShardXDec 20212
DeGateDec 20214
Threshold-DSANov 20216
DFINITY ConsensusNov 20212DFINITY📄
PolySign HSMOct 20216
Hop Protocol V2Sep 20214
Golden Gate LibrarySep 20211
PolySignSep 20216
Qredo BlockchainSep 20216
ArbitrumSep 202116
go-schnorrkelAug 20214
ShardXAug 20214
AElfJul 20214
CrossChain-BridgeJul 20218
DFINITYMay 202124📄
Open OracleApr 20212
Arbitrum V2Feb 20218
eFILJan 20212
Highway ConsensusNov 20204CasperLabs📄
Stacks V2Sep 20206
VRFsAug 20202
Celo OracleJul 20202📄
ArbitrumJul 20206
MYKEYJul 20204
SymbolJul 20204Symbol📄
Ledger FilecoinJul 20202📄
ChainlinkJun 20208
Chainlink FluxMay 20204
ElrondMar 20206
EOSIO SDKJan 20204
NEAR ProtocolNov 20198
EOSIO 2.0Oct 20198
Status-goOct 20199
CeloSep 20198
Blockchain.comAug 20194
RandomXJun 20192Monero and Arweave to Validate RandomX📄
Interest TokenMay 20190.28
LoomMay 201910Loom SDK Q1 2019 Security Audit
Building BlocksAug 20187UN WFP uses Ethereum to aid 100k refugees
NameProductDiscovererYearIDBlog
Denial of Service in protobuf-pythonprotobuf-pythonAlexis Challande2025CVE-2025-4565
Vulnerabilities in LUKS2 disk encryption for confidential VMsLinux LUKS2Tjaden Hess2025CVE-2025-59054, CVE-2025-58356💬
Prompt injection to RCE in AI agentsAI Agents (multiple platforms)Will Vandevanter2025❌💬
Code integrity bypass in Electron applicationsElectron Applications (Signal, 1Password, Slack)Darius Houle2025CVE-2025-55305💬
Weaponizing image scaling against production AI systemsGoogle Gemini, Vertex AI, GensparkKikimora Morozova, Suha Sabi Hussain2025❌💬