Tarun Bansal

Summary: Trail of Bits published a post by Tarun Bansal, Jaime Iglesias, and Anish Naik dated November 06, 2026, titled "After Binance, check what your signing systems can approve," laying out four steps to strengthen wallet security: restrict signing access, control delegation, limit losses, and detect changes in wallet authority. The same author page lists an earlier March 22, 2024 post by Josselin Feist, Tarun Bansal, and Gustavo Grieco on why the firm uses fuzzing over formal verification in most audits, tied to its invariant development as a service offering.
Bottom line: The guidance is framed around what signing systems can approve, so the exposure sits in wallet authority and delegation - the places where a single approval can move funds - rather than in the code being audited.

Read the original at Trail of Bits Blog ↗