PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Trail of Bits @ Devcon IV Recap

blog.trailofbits.com | blog | #web3 | #blockchain | #conferences | #symbolic-execution | #manticore | #trailofbits | #devcon
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Recap of Trail of Bits' Devcon IV contributions: talks on finding smart contract bugs with Manticore and symbolic execution, blockchain autopsies, and security training.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Symbolic Path Merging in Manticore
A winternship project explores state merging in Manticore: merging similar symbolic states at one program location cut explored paths by 33% in a test, easing symbolic execution's path explosion.
blog · blog.trailofbits.com
Fault Analysis on RSA Signing
A Trail of Bits intern modeled RSA-CRT fault attacks at the machine level, using Manticore to flip bits and show how a faulty partial signature lets attackers factor n and recover private keys.
blog · blog.trailofbits.com
Videos from Ethereum-focused Empire Hacking
Videos from the December 2017 Empire Hacking meetup—150+ attendees—cover smart contract security history, Ethereum CTF techniques, and symbolic execution of EVM bytecode with Manticore.
blog · blog.trailofbits.com
Manticore: Symbolic execution for humans
Manticore helps us quickly take advantage of symbolic execution, taint analysis, and instrumentation to analyze binaries.
vulnerability · blog.trailofbits.com
Magic with Manticore
Solving Magic, a DEF CON CTF qualifier with 200 key-protected binaries, using Manticore symbolic execution plus Binary Ninja hooks to automate key extraction instead of manual reversing.
blog · blog.trailofbits.com
Package managers have an integrity problem
# Package managers have an integrity problem Keegan Ryan October 14, 2026 supply-chain, cryptography, ecosystem-security Page content * Simulating malicious package repositories * HTTPS is...
Back