101 items match, 0 of them low signal.
We found and reported a bug in Provenance Blockchain, a public proof-of-stake chain built on Cosmos SDK, that lets any user grant themselves admin control over marker accounts without holding a single token.Trail of Bits
This blog post identifies seven recurring failure patterns in application and hook code, including missing caller checks and accounting bugs that still satisfy the PoolManager’s settlement invariant.Trail of Bits
In April we released Mewt, our open-source mutation-testing engine that finds the gaps in your test suite. Today we’re expanding it with support for DAML, the language Canton Network applications are written in.Trail of Bits
Today, we’re announcing MuTON and mewt, two new mutation testing tools optimized for agentic use.Trail of Bits
We released a Claude plugin that uses LLMs to annotate code with dimensional types and mechanically detect mismatches, achieving 93% recall versus 50% for baseline prompts when tested against real audit findings.Trail of Bits
Dimensional analysis from physics can be applied to DeFi smart contracts to catch arithmetic and logic bugs by ensuring formulas maintain consistent dimensions across tokens, prices, and liquidity calculations.Trail of Bits
After auditing dozens of ERC‑4337 smart accounts, we’ve identified six vulnerability patterns that frequently appear.Trail of Bits
Everything here already leads the page above.