TO
Attackers can drain wallets by abusing a signing service, even without stealing private keys. Our 4-step post-Binance hack guidance helps wallet teams test what their signing systems can authorize and what limits the damage if signing is compromised. After Binance, check what your signing systems can approve From blog.trailofbits.com
10 replies·24 reposts·101 likes·9,402 views
TO
A cryptographically verified tally doesn't mean every vote is legitimate. Paper ballots still matter: they provide an audit record independent of software. We explain how electronic voting works, and how cryptography can make paper-based elections more trustworthy. The cryptography behind electronic voting (and why paper ballots are still essential) From blog.trailofbits.com
3 replies·19 reposts·47 likes·4,283 views
TO
We’ll be at Devcon in Mumbai from Nov 3–4 at booth Starter 06 (3rd floor). If you’re building smart contracts, blockchain infrastructure or cryptographic systems, come chat with our engineers.
3 replies·4 reposts·14 likes·1,674 views
TO
Stable software often ships with known bugs because the fixes are never backported. That backlog is now an easy target for cyber-capable agents. We used Codex to cut time per backport from days to ~30 min, with 149 Linux kernel CVE fixes applied so far. Backporting security fixes at scale with Codex From blog.trailofbits.com
5 replies·7 reposts·50 likes·5,521 views
TO
October Trail of Bits Tribune: Releasing a PHP exploit demo, new plugins for patching, and package-integrity research. Plus Brotli-checker, SequenceHash, and six new public security reviews. Read the Tribune: mailchi.mp/trailofbits/oc…
3 replies·4 reposts·22 likes·2,810 views