PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

2017 in review

blog.trailofbits.com | research | #web3 | #year-in-review | #research | #blockchain | #trail-of-bits | #blockchain-security | #manticore | #mcsema | #automated-bug-discovery
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits' 2017 review highlights automated bug discovery research, the Manticore and McSema 2.0 releases, growing blockchain security work, and Cyber Reasoning System contracts with the DoD.
Published
Collected

Related coverage

vulnerability · blog.trailofbits.com
2015 In Review
Trail of Bits' 2015 year in review: DARPA Cyber Grand Challenge participation, 64-bit mcsema support, the Empire Hacking meetup, open-sourcing Tuber, and advocacy against reactionary export rules.
blog · blog.trailofbits.com
The Foundation of 2015: 2014 in Review
Trail of Bits' 2014 in review: McSema's binary-to-LLVM framework, shaping public policy, women-in-security programs, machine learning for Heartbleed, a 2FA guide, and DARPA's Cyber Grand Challenge.
blog · blog.trailofbits.com
State divergence enables unauthorized access
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
blog · hackenproof.com
Sui Move Smart Contract Security: How Shared Objects Leak and Ownership Breaks
Sui’s VM protects owned objects, not shared ones. See how shared-object, Kiosk, and PTB bugs break protocols, plus a full Sui Move audit checklist.
blog · hackenproof.com
Smart Contract Security in 2026: Risks, Best Practices, and Audits
Top smart contract security risks in 2026, best practices that prevent exploits, and when to audit your contracts. A practical guide for founders and CTOs.
Back