Perimeter

We’re excited to welcome Josselin to Perimeter as Lead Fuzzing Specialist! Ex-Engineering Director of the blockchain team at Trail of Bits. Author of Slither. 🧵 highlighting some of his achievements

@gbrigandi @Polkadot Polkadot public disclosure and postmortem forum.polkadot.network/t/postmortem-x…

🛡️ $69 Million TVL Saved Our very own @gbrigandi reported a critical vulnerability, saving $69,000,000 in TVL for @Polkadot. We’re proud to strengthen the ecosystem through responsible disclosure and proactive security research. Blog post coming soon! PS: Found with fuzzing

More to come. One particularly compelling piece of Gianluca’s work will be public soon.

No generic workflow. Codebase-specific tooling. His approach: • Custom tooling for each codebase • Combine static analysis, fuzzing, compiler methods + more • Fine-tuned to target the system Result: • Deep, novel bugs • Confirmed bounties

Built the tools. Found the bugs. We’re excited to welcome Gianluca Brigandi (@gbrigandi) to Perimeter as Tooling Specialist. • Author of Traverse, Tameshi, and ThalIR • Multiple confirmed bounties

Repo & changelog: github.com/perimetersec/f…

fuzzlib v1.1.0 released – now with broader compatibility and new utilities for Solidity fuzzing What's new: - clampArr: Efficient array clamping - scaleDec: Decimal scaling helper - errAllow: Full support for pre-Cancun chains - Updated cheatcodes to allow latest functionalities

I received a lot of questions after the @perimeter_sec announcement I am still providing my services as an individual to select clients, but I am also happy to work with teams that share the same values Perimeter is a curated fuzzing group with a work-based model, similar to @spearbit, @zenith256 or @AdevarLabs I joined because I believe invariant-driven development is a key step toward improving the industry's security maturity, and because they share the same focus on quality and mindset If you are passionate about fuzzing, you should join their Discord (you can ping @rappie_eth for an invite)

Looking forward to working with the Perimeter folks and continuing to push the state of fuzzing!

Get a quote now to uncover what audits miss and keep your protocol secure for today's launch and fortified for tomorrow's upgrades. Hear back from us within 24 hours by either: → DM → Filling out this form tally.so/r/wkAgar

What this means for Perimeter Josselin fits perfectly with our vision of building robust foundations for protocols from inception and prevent issues from even being committed. With deep expertise in tooling and security, we are eager to accelerate our mission with him on board!

We’re excited to welcome Josselin to Perimeter as Lead Fuzzing Specialist! Ex-Engineering Director of the blockchain team at Trail of Bits. Author of Slither. 🧵 highlighting some of his achievements

Excited to share that over the past 6+ months, we've helped secure critical infrastructure for @berachain using invariant fuzzing. Big credit to @berachain for their industry-leading commitment to security. Looking forward to continuing our partnership in securing Berachain 🫡

Check out Fuzzlib here! github.com/perimetersec/f…

Future Plans We are constantly thinking of new additions for Fuzzlib, and have some currently planned. Please let us know what you find useful and we can implement it inside Fuzzlib. We are also deeply committed to ensuring Fuzzlib has high correctness, stay tuned for updates!

We are excited to announce the 1.0 release of Fuzzlib, an unopinionated library designed for both stateful and stateless fuzz testing Fuzzlib continues to be the backbone enabling us to secure $5,000,000,000+ in TVL Why, features, additions: 🧵