Trail of Bits Advances to AIxCC Finals

Summary: Trail of Bits' Cyber Reasoning System, Buttercup, placed in the top 7 of 39 teams in the AIxCC semifinal at DEF CON 2024, where CRSs had to automatically find and patch vulnerabilities in codebases including nginx, Jenkins, Apache Tika, SQLite, and the Linux kernel under strict time and resource limits. Buttercup scored the first point of the competition and excelled in the nginx round, where patching was worth roughly three times the points of discovery, and Team Atlanta's CRS found a real null dereference bug in SQLite during the event.
What you should know: A machine found and patched a genuine bug in SQLite inside a contest window, and the final round at DEF CON 2025 carries a $4 million prize for the winner - the teams building automated vulnerability discovery are measuring themselves against real code you likely run.

Read the original at Trail of Bits Blog ↗