We help secure the world’s most targeted organizations and products. We combine security research with an attacker mentality to reduce risk and fortify code.

New York, NY
Joined March 2010
September Trail of Bits Tribune: Fact-checking 1Password's AI patching benchmark, and a signature-forgery bug in Miden's zkVM. Also: a string-slicing bug in Lean, 27 advisory submissions to OpenClaw, and seven new security reviews. mailchi.mp/trailofbits/septe…
3
21
4,184
PHP drives 69% of websites with a known server-side language. curl has over 20 billion installations. SQLite powers over 1 trillion databases in active use. Let’s Encrypt secures 762 million websites. WordPress runs nearly 40% of all websites. urllib3 was downloaded 10.9 billion times in 2025 alone. PyPI hosts more than 922,000 Python projects. Ruby on Rails underpins Shopify, GitHub, and GitLab. Drupal serves websites at 80 of the world’s top 100 universities. Python ranks as the world’s most popular programming language.
1
2
11
812
Open-source software runs the world. We’re working with the maintainers behind 68+ projects to find vulnerabilities, develop fixes, and build agentic tooling that lets open source defend itself at speed. trailofbits.com/patch-the-pl…
1
1
214
Trail of Bits retweeted
Attackers have agents hunting for bugs. We need agents writing patches just as fast. @trailofbits is doing the work to make this happen reliably: xitter.cf/trailofbits/status/211…
Finding bugs is the easy part. Shipping fixes that hold up is harder. We analyzed thousands of Codex sessions from our work on Patch the Planet with @OpenAI and built patching-bugs, a plugin that writes a fix, proves it, and checks it for regressions. To prove a fix, the plugin checks that the original code fails, the patch passes, and reverting the patch brings the bug back. patching-bugs hands each fix to regression-hunt, our second new plugin. We ran it on the patches behind 21 known regressions, and it reported 25% fewer false positives than a baseline Codex agent. Both plugins work best when your repo has a THREAT_MODEL.md and a PATCHING_GUIDELINES.md. blog.trailofbits.com/2026/10…
1
6
49
2,267
Giving AI access to your money? Start by limiting the blast radius. @anishrnaik, Principal Security Engineer at @trailofbits, on giving AI agents access to wallets, code and infrastructure. 00:00 Meet Anish from Trail of Bits 02:46 Patch the Planet 05:06 Package managers and hidden dependencies 09:34 Dependency alerts and package selection 12:27 Limiting an AI agent’s blast radius 15:47 Can AI fix bugs without creating new ones? 21:54 Hardware wallets and the wider security stack 26:43 AI attackers and defenders 28:53 OpenAI reports and what comes next
2
1
8
1,947
“You want to find the bugs, but it’s only good if you can also fix them.”—@anishrnaik on Risky Biz. Many open-source projects have only a handful of maintainers, and fixes are falling behind. We’re building a reusable toolkit to help. Full pod: youtube.com/watch?v=6SIgPjQ9…
2
3
25
1,614
Yesterday, rumors started circulating about two unpatched critical-severity bugs in PHP. Within 17 hours, Cloudflare was blocking attacks and Patchstack reported active exploitation. When AI can develop a working exploit in hours, bugs need to be patched just as fast. Each day without a fix carries the risk that an attacker will find and exploit the bug. But it takes time to create a working patch, and PHP's patch was more complex than most. The patch changed 402 files and added more than 11,000 lines, reworking core engine behavior that dozens of extensions depended on. The bug was reported on Aug 11, and fixes were shipped 71 days later. But less than a day after details leaked, systems running PHP were already under attack. Patching needs to keep up with the pace of bug discovery. For the past four months, we’ve worked directly with open-source projects as part of Patch the Planet to understand how AI can expedite patching. Our ongoing research and work show that project-specific documentation, skills, and plugins can be embedded at the repo level to give agents and contributors access to the context maintainers carry in their heads: what counts as a bug, how a fix should look, and what can't break. Our two new open-source plugins, patching-bugs and regression-hunt, are a first step toward a generalized set of tools and guidance for getting a working patch out faster: blog.trailofbits.com/2026/10… PHP’s account of the incident: thephp.foundation/blog/2026/…
3
14
3
82
4,844
Trail of Bits retweeted
We're staring down the vulnpocalypse we predicted earlier this year. What matters now is how fast you can react to it. @trailofbits is developing key capabilities to dramatically increase how fast fixes can go out. xitter.cf/trailofbits/status/211…
Finding bugs is the easy part. Shipping fixes that hold up is harder. We analyzed thousands of Codex sessions from our work on Patch the Planet with @OpenAI and built patching-bugs, a plugin that writes a fix, proves it, and checks it for regressions. To prove a fix, the plugin checks that the original code fails, the patch passes, and reverting the patch brings the bug back. patching-bugs hands each fix to regression-hunt, our second new plugin. We ran it on the patches behind 21 known regressions, and it reported 25% fewer false positives than a baseline Codex agent. Both plugins work best when your repo has a THREAT_MODEL.md and a PATCHING_GUIDELINES.md. blog.trailofbits.com/2026/10…
6
14
1
91
5,114
Finding bugs is the easy part. Shipping fixes that hold up is harder. We analyzed thousands of Codex sessions from our work on Patch the Planet with @OpenAI and built patching-bugs, a plugin that writes a fix, proves it, and checks it for regressions. To prove a fix, the plugin checks that the original code fails, the patch passes, and reverting the patch brings the bug back. patching-bugs hands each fix to regression-hunt, our second new plugin. We ran it on the patches behind 21 known regressions, and it reported 25% fewer false positives than a baseline Codex agent. Both plugins work best when your repo has a THREAT_MODEL.md and a PATCHING_GUIDELINES.md. blog.trailofbits.com/2026/10…
17
22
12
133
15,945
We’re heading to Mumbai for @EFDevcon 8 to talk security with Ethereum builders. Meet our team at booth Starter 06, November 3–4, to talk about what you're building, where it can fail, and how to test it.
We're excited to welcome @trailofbits as a supporter of Devcon 8!🎉 With over a decade of experience in security research, Trail of Bits helps teams identify vulnerabilities, strengthen their code & build more secure systems. Meet their team in Mumbai at their booth on Nov 3–4.
1
2
23
1,780
Trail of Bits retweeted
Google tried to keep a quantum weapon secret using zero-knowledge proofs. It lasted 63 days. In March, Google Quantum AI published a new version of Shor's algorithm aimed at secp256k1, the elliptic curve that protects every Bitcoin and Ethereum wallet. It needs roughly 1,200 logical qubits, a dramatic improvement over everything before it. Then Google did something no one had done before. It didn't publish the circuit. It published a zero-knowledge proof that the circuit exists, which certifies the attack is real without revealing the attack. Then the experiment started to break. Six weeks later, @trailofbits found memory bugs in Google's Rust prover. They forged a valid proof for a circuit that claimed zero Toffoli gates, an attack that cannot exist. It passed verification with the same key as the original. Google patched it. On day 63, André Schrottenloher of Inria published his own circuits, rebuilt independently from Google's public papers. They matched Google's qubit counts and needed fewer gates. The hidden weapon was now open source, and slightly better. Google researcher Craig Gidney confirmed the match and wrote: "We should just publish openly." Zero-knowledge proofs were built to hide your balance, your identity, your vote. Here, a cryptographic tool was used to hide a weapon against cryptography, and both the hiding and the secret failed within one quarter. The lesson isn't that ZK is broken. A proof is only as honest as the code that checks it. And in mathematics, a secret doesn't stay a secret just because it's hidden: once the world knows an answer exists, someone finds it. The only thing still protecting Bitcoin from this attack isn't secrecy. It's hardware, and hardware gets better every year.
17
5
221
23,264
Trail of Bits retweeted
We've been taking security very seriously at OpenClaw for a while now. We just completed a Trail of Bits audit, publish our security advisories unlike every other agent product, and have alot more coming in this department! openclaw.ai/blog/openclaw-tr…
3
7
3
85
20,136
Trail of Bits retweeted
You’d expect a lockfile to make a dependency immutable. But often it doesn’t: a hacked repository can swap in malicious code for the **same package and version**, and most package managers install it anyway. xitter.cf/trailofbits/status/211…
5
12
2
69
5,987
Trail of Bits retweeted
prompt: "Read the last year of Trail of Bits posts and consider implications for witchy." It's free security.
1
1
5
1,115
"Every one of these maintainers has these two wolves in them." @thebensams on @hackaday's FLOSS Weekly, on why some maintainers go all-in on AI agents and others, a lot of them in Rust, won't unless they're forced to. youtube.com/watch?v=TaTxSyGM…
3
3
1
17
2,438
Trail of Bits retweeted
Hash several inputs by concatenation and the boundaries vanish: different sequences give the same SHA-256 digest. Trail of Bits' SequenceHash appends each input's length as a fixed 128-bit integer, so every sequence encodes one way. Rust, Go and Python. blog.trailofbits.com/2026/10…
1
1
5
776
Trail of Bits retweeted
Credit to Trail of Bits for showing where agents pay off before a security review even starts. For one audit they spent six months having agents build the tooling first: an LSP server, a decompiler, a static analysis engine and a Lean model of the VM. The analyses flagged 400+ places where type validation could be tightened. The Lean work produced 95 machine-checked correctness proofs. Their line: "Today, a failed side project only costs tokens." blog.trailofbits.com/2026/09…
2
5
595
Trail of Bits retweeted
We're excited to announce that @trailofbits, an independent security research firm, has completed a security review of Kamui's RWA infrastructure.
1
2
5
556
Trail of Bits retweeted
We’re bringing together some incredible teams across the Arbitrum ecosystem to support founders building at Founder House Singapore. > @Dune > @Paxos > @ZeroDev > @GMX_IO > @trailofbits > @pendle_fi > @Quicknode > @RobinhoodCrypto > SBI Digital Markets Innovating across tokenization, AI and programmable finance? Join us and Robinhood Chain in Singapore from October 23rd-25th. Register here: luma.com/openhouse-singapore…
34
37
6
291
31,298
Trail of Bits retweeted
Replying to @ShieldFi
@ShieldFi is a fortress. Over the past years we've done: - A Lean impl of the proof system (thx @Zcash for paving the way!) - ACL2 impl of our circuits and consensus (thx Kestrel!) - TLA+ impls for smart contract invariants (thx @trailofbits !) - An easycrypt impl for the VM
1
9
812