Trail of Bits

About

Trail of Bits is a security research and engineering firm with a mailing address in New York, United States. Its blockchain practice reviews complete systems, from smart contracts and protocol logic to nodes, bridges, governance and off-chain infrastructure, alongside separate practices for application security, cryptography, AI/ML security and security engineering. Blockchain services include design assessments, early stage assessments for projects still in development, invariant testing and development, and comprehensive code assessments that combine manual review with the firm's own tools. The team develops and maintains the open-source static analyzer Slither and the fuzzers Echidna and Medusa, and uses them in its engagements. It lists work across Ethereum, Move on Aptos and Sui, Solana, Arbitrum (including Stylus), Optimism, Cosmos, Substrate, Starknet and TON. Deliverables described on its site include a written findings report, a codebase maturity evaluation, custom detectors, invariant test suites and a fix review. Public audit reports, papers and talks are gathered in a searchable online library, and the firm also publishes the Building Secure Contracts handbook.

At a glance

• Develops and maintains the open-source tools Slither, Echidna and Medusa
• Offers design reviews, early stage assessments, invariant development and full code assessments
• Covers EVM, Move, Solana, Cosmos, Substrate, Starknet and TON ecosystems
• Also sells application security, cryptography and AI/ML security reviews
• Publishes its public reports in a searchable online library

Trail of Bits: frequently asked questions

What services does Trail of Bits offer?

According to its public information, Trail of Bits offers: Audit and Penetration testing.

Which blockchains does Trail of Bits work with?

Trail of Bits works with Ethereum, Arbitrum, Optimism, Solana, Sui, Aptos, Starknet, TON, and Cosmos.

Which smart contract languages does Trail of Bits use?

Trail of Bits works with Solidity, Move, and Go.

Where is Trail of Bits based?

Trail of Bits is headquartered in United States.

Is Trail of Bits verified on smart-contract.com?

Not yet. This listing was compiled from public information and Trail of Bits has not claimed it or gone through the vetting process of smart-contract.com.

How can I get a quote from Trail of Bits?

Describe your project once on smart-contract.com: you receive comparable quotes from vendors that match it, in the same format. Development and audit are always entrusted to two independent companies.