Trail of Bits’ Buttercup heads to DARPA’s AIxCC

Summary: Trail of Bits submitted Buttercup, a Cyber Reasoning System combining fuzzing and static analysis with AI and machine learning to find and fix vulnerabilities, to DARPA's AI Cyber Challenge semifinals at DEF CON 2024. DARPA awarded the firm and six other small businesses $1 million each in March to develop a CRS, and the 19-engineer team finalized its submission on July 15 under a four-hour time limit and a $100 cap on LLM queries per challenge.
Bottom line: The competition's constraints - four hours and $100 in LLM queries per challenge - define the operating envelope for automated vulnerability discovery, and Trail of Bits is aiming for the top seven of forty-two teams to reach the 2025 final.

Read the original at Trail of Bits Blog ↗