Trail of Bits
- title
- Trail of Bits
- type
- entity
- summary
- New York-based security research and consulting firm; long history of audits, fuzzing tooling, and cryptographic review for crypto/blockchain and infrastructure clients
- tags
- security, entity, blog
- created
- 2026-05-12
- updated
- 2026-05-12
Security consultancy founded 2012, headquartered in New York. Audits, fuzzing, cryptographic review, and tooling work, with a heavy footprint in the Ethereum / L2 / cryptography corner of the industry.
Three public surfaces worth tracking:
blog.trailofbits.com— author-bylined long-form posts on engagements, tools, and primitivesappsec.guide(Testing Handbook) — open, multi-author reference on security testing techniques, organized by language and topic- The open-source tool portfolio itself
Known projects include the Manticore symbolic executor, Slither (Solidity static analysis), Echidna (smart-contract fuzzer), and now gosentry (Go-toolchain fuzzing fork).
Coverage
Trail of Bits' blog gets ingested when posts cover load-bearing tooling or primitives — not every engagement writeup. Topics worth pulling: fuzzing infrastructure, supply-chain analyses, cryptographic implementation issues, language-level security tooling. The Testing Handbook gets ingested per chapter as the relevant chapter becomes load-bearing for something in the wiki.
Ingested articles
- gosentry-go-fuzzing-fork — Go toolchain fork wrapping LibAFL + Nautilus behind the standard
testing.FAPI (May 2026, blog) - appsec-guide-fuzzing-handbook — Testing Handbook fuzzing chapter overview: terminology, mutation-based evolutionary algorithm, bug-class taxonomy (handbook)