Josselin Feist

Summary: This is an index page of Trail of Bits blog posts by Josselin Feist, spanning 2017 to 2025 and covering smart contract security topics including fuzzing, invariant development, static analysis, and contract upgradeability. Individual entries describe work such as the Medusa v1 fuzzing framework, the Crytic continuous assurance platform, the Slither Solidity static analysis framework, and the discovery of a vulnerability affecting live Aave versions 1 and 2 that was reported within an hour.
What you should know: The Aave entry notes a vulnerability in live contracts of both deployed versions, found during a brief review the firm was not hired to perform - a reminder that deployed smart contract code handling monetary value can carry flaws that a casual look surfaces.

Read the original at Trail of Bits Blog ↗