EXPLORE COMPONENTS

Atheris Python Fuzzing

skilltrail-of-bitsfuzzing+3

Use Atheris to fuzz Python code and native extension boundaries with coverage-guided tests, useful inputs, and reproduci...

Fuzz Harness Writing

skilltrail-of-bitsfuzzing+4

Write targeted fuzz harnesses that isolate parsers, state machines, and security-sensitive APIs without hiding bugs behi...

Coverage Analysis

skilltrail-of-bitsfuzzing+3

Measure fuzzing or test coverage, identify untested parser and protocol paths, and translate coverage gaps into better h...

Fuzzing Dictionary Design

skilltrail-of-bitsfuzzing+3

Design high-value fuzzing dictionaries for structured inputs, parsers, protocols, file formats, and smart contract ABI s...

Cairo Vulnerability Scanner

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messagi...

Algorand Vulnerability Scanner

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, mis...

Substrate Vulnerability Scanner

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weig...

Code Maturity Assessor

Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety,...

Guidelines Advisor

skilltrail-of-bitssmart-contracts+4

Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/s...

Audit Prep Assistant

skilltrail-of-bitssmart-contracts+4

Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tool...

Cosmos Vulnerability Scanner

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund lo...

Solana Vulnerability Scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ow...

Secure Workflow Guide

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeab...

Token Integration Analyzer

Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implem...

Ton Vulnerability Scanner

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Je...

Entry Point Analyzer

skilltrail-of-bitsentry+2

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally call...

Semgrep Rule Creator

skilltrail-of-bitssemgrep+2

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing S...

Property Based Testing

skilltrail-of-bitsproperty+2

Provides guidance for property-based testing across multiple languages and smart contracts. Use when writing tests, revi...

Insecure Defaults

skilltrail-of-bitsinsecure+1

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurel...