Trail of Bits @ Devcon IV Recap

Summary: Trail of Bits participated in Devcon IV through talks, a panel, and two trainings, including a workshop where Josselin Feist led 120 attendees through exercises using Manticore, its open-source symbolic execution engine, to verify smart contracts against their specifications. Jay Little's lightning talk covered his recovery and analysis of 30,000 self-destructed contracts, and Evan Sultanik wrote Etheno, an Ethereum client fuzzer that identified in two minutes a divergence bug that had surfaced on Ropsten in October.
Why it matters: The panel's message was that bug bounties are not nearly as effective as people think, and that audits should deliver an assessment of total project risk rather than a list of bugs that lets a team declare its code safe.

Read the original at Trail of Bits Blog ↗