PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Evaluating Solidity support in AI coding assistants

blog.trailofbits.com | blog | #ai-security | #smart-contracts | #machine-learning | #blockchain | #trail-of-bits | #solidity | #ai-coding-assistants | #code-completion
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits added Solidity support to Tabby and Continue.dev, built the CompChomper benchmark, and found local models rival commercial ones, urging developers to pair AI with tests and audits.
Published
Collected

Related coverage

blog · netspi.com
Ethereum Virtual Machine Internals – Part 2
Part two on EVM internals covers persistent contract Storage: how Solidity types map to 32-byte storage slots, SSTORE and SLOAD semantics, and the gas costs that make storage writes expensive.
blog · blog.trailofbits.com
State divergence enables unauthorized access
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · blog.trailofbits.com
Building secure Uniswap v4 hooks
Uniswap v4 hooks can satisfy PoolManager settlement invariants while still violating application-level accounting or authorization assumptions. The seven recurring failure patterns form a practical review checklist for hook developers and auditors.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry
HackenProof and Hack The Box turn blockchain security into a gamified CTF track with weekly challenges and a ten-quest series, giving top performers a path into the bug bounty ecosystem.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry
HackenProof has launched a blockchain-industry course with Hack The Box, the four-million-member ethical hacking platform, aimed at building practical blockchain security skills.
blog · hackenproof.com
How to hack everiToken?
An introduction to everiToken, a token-based public chain that replaces smart contracts with 'safe contracts' and BFT-DPOS consensus, plus node setup, API testing, and a node vulnerability.
Back