Trail of Blocks

Featuring the @TrailofBits Blockchain team.

We're Hiring!

[Patrick Collins @PatrickAlphaC]

Everyone, today, should install and run the Trail of Bits Claude code config.

It gives sensible Claude safety precautions for every project you're working on, like:
- don't run `rm -rf`
- don't edit sensitive files like the fox wallet
- don't collect telemetry
- etc

[ETHDenver 🏔🦬🦄 @EthereumDenver]

From 10 to 200 Bugs per Week: How Trail of Bits Is Going AI-Native by @dguido CEO and co-founder @trailofbits

Full video below 👇🧵

[nisedo @nisedo_]

Can't be happier to return as a speaker to my favorite conference @EthCC in my hometown @villecannes ☀️

[TONCO @Tonco_io]

TONCO v1.6 is live, audited by @trailofbits 🔐

The first CLAMM DEX on $TON just leveled up:
⚡️ Lower gas for swaps
🧩 More flexible LP positions

Built as core DeFi infrastructure on TON: secure, transparent & evolving.

🌱 See all updates: https://t.co/cCJPv4d3JX.

[nisedo @nisedo_]

when you've found 36 issues but now you have to write the report

[Trail of Bits @trailofbits]

We've cut a new release of slither-mcp today that adds 11 new tools that help your AI-guided techniques become even more powerful: https://t.co/AYHMmCObWI

It's easier than ever to add slither-mcp to Claude Code:

claude mcp add --transport stdio --scope user slither -- uvx --from git+https://t.co/jkmywAHUoA slither-mcp

[Ethereal news @EtherealnewsHQ]

Ethereal news weekly #7

🧪 Vitalik: Ethereum must pass walkaway test
📱 @jessepollak @base app focuses on trading
🛡️ @trailofbits Claude Code skills

https://t.co/MQMqw1iYcf

[Trail of Bits @trailofbits]

We just published Slither 0.11.5 which contains a new detector that can identify the reentrancy bug used in this hack.

This release also contains changes to allow more effective use of AI coding tools, making it easier and faster for us (or your team!) to write new detectors in response to hacks.

https://t.co/jZQ5OpqSw9

[Benjamin Samuels @thebensams]

This is what the CEO of Spearbit has to say when asked why they still sell human-run audits.

If you're an LSR at Spearbit, what should your takeaway be?

Trail of Bits is hiring btw

[Dan Guido @dguido]

.@trailofbits released our first batch of Claude Skills. Official announcement coming later.
https://t.co/vI4amorZrc

[Trail of Blocks @trailofblocks]

Thanks @getreconxyz for the $25k donation to Echidna! Big plans ahead:
* Osaka support
* symbolic execution improvements together with the @argotorg hevm team
* MCP server for agent integration
* other UX/quality of life improvements
https://t.co/W43bl6hkcM

[Alex Filippov @alexfilippov314]

Thank you! If I could give my past self one piece of advice, it would be to set up e2e testing from day one. It is often faster and simpler to check things directly than to trace execution by reading the code. For Cosmos-based protocols there is a good resource by Trail of Bits: https://t.co/xnNezl0ayi. I ran into many similar issues myself.

[Gowtham Naidu Ponnana🇮🇳 @gowtham_ponnana]

Today, I'm officially announcing that I'll be joining @trailofbits in January 2026.

It's one of the companies I've always wanted to work for since starting my cybersecurity journey.

Huge thanks to @CarterToB for keeping me in the loop and for your support—you made the process much easier.

I'll be working under @thebensams, and I'm excited to help secure top protocols. Special thanks for believing in me, Ben 🫂

By the way, Ben also approves that I'm 6'6", so no more doubts, anyone 😏

Thanks to @Montyly for all the tips and sharing your experience about ToB. When I applied, I wanted to work with you, but life had other plans.

That's it, everyone! I'm now a new family member of Trail of Bits ❤️❤️

[So basically, I've engraved my age onto AirPods to remember when I made it into ToB] — Thanks for the home-setup, team 😅😘

While there's some time before I join, I'm gonna touch some grass 😉

[Recon @getreconxyz]

We wouldn't be here without the incredible work done by Trail Of Bits on Echidna.

This year we saved 20 MLN dollars using Echidna.

We're proud to support it's development with a no string attached donation of $25k.

We plan to continue donation a portion of our revenue to Open Source Tools that we use professionally.

[nisedo @nisedo_]

humblebrag for the team

we found a delegatecall vuln in stateful precompiles that could’ve forged cross-chain messages on @avax

full write-up: https://t.co/OaT85nYdLK"

[Trail of Blocks @trailofblocks]

Want to see Slither-MCP in action? @thebensams demos how to give LLMs ground truth for bug detection @summit_defi (Nov 21, 10:50)

[Trail of Blocks @trailofblocks]

Your LLM just made 47 tool calls to find one function. Slither-MCP does it in one. Static analysis meets MCP.
https://t.co/X5Zjspn34J

[Defi Security Summit @summit_defi]

Many bugs hide in logic your tests never touch.

At DSS, Guillermo Larregay from @trailofbits will show how Slither’s new mutation testing feature mutates Solidity code and reruns tests to reveal untested paths, with real examples of high-impact issues this method uncovered.

[Trail of Blocks @trailofblocks]

DM us to connect during the week!

[Trail of Blocks @trailofblocks]

Headed to DevConnect, DSS, or any of the other DeFi events in Buenos Aires (Nov 17-21)? @EFDevcon @summit_defi

[Trail of Blocks @trailofblocks]

Are you testing your tests? Guillermo Larregay covers Mutation Testing in a lightning talk. Time TBD.