PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Amarna: Static analysis for Cairo programs

blog.trailofbits.com | blog | #static-analysis | #blockchain | #zero-knowledge-proofs | #amarna | #cairo | #starknet
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits open-sourced Amarna, a static analyzer and linter for Cairo, the language behind StarkNet, targeting pitfalls like unconstrained structures and nondeterministic jumps.
Published
Collected

Related coverage

blog · certik.com
What Is a Zero-Knowledge Virtual Machine (zkVM)?
A zkVM combines zero-knowledge proofs with virtual machines to prove a program ran correctly without re-execution or exposing internal data, enabling scalable, privacy-preserving computation.
blog · blog.trailofbits.com
Auditing in the age of (good enough) AI
Trail of Bits explains how agents built tooling and a Lean model for the Miden zkVM audit, finding a flaw enabling Falcon signature forgery and yielding 95 machine-checked proofs.
blog · blog.trailofbits.com
State divergence enables unauthorized access
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · blog.trailofbits.com
Rust-proof your code with our new Testing Handbook chapter
Trail of Bits added a Rust testing chapter to its Testing Handbook: Miri, property testing, Clippy, zeroization, Kani model checking and dependency vetting, plus the rust-review Claude Code plugin.
blog · blog.trailofbits.com
Our crypto experts answer 10 key questions
Trail of Bits engineers answer 10 crypto questions: SNARK commitment schemes, hash constructions, ECC attacks, post-quantum systems, Fiat-Shamir, zkEVM design, and folding schemes.
blog · blog.trailofbits.com
We’ve added more content to ZKDocs
Trail of Bits expanded ZKDocs with sections on the Inner Product Argument, Pedersen and KZG commitments, and wide modular reduction, filling guidance gaps for non-standard cryptographic protocols.
Back