Trail of Bits
Trail of Bits is a blockchain security firm known for deep protocol-level audits across DEX, Lending, Bridge. This profile aggregates its audit record, 3200 findings and notable clients, so you can evaluate fit before requesting a competitive quote through Procur3.
- Audits
- 280
- across 14+ years
- Findings logged
- 3200
- all severities
- Crit + high + med
- 1295
- material findings
Overview
About Trail of Bits
Founded in 2012, Trail of Bits is a blockchain security firm specialising in smart contract audits and protocol-level security reviews. The team works primarily in Solidity, Rust, Go and C++, covering engagements across Ethereum, Solana, Polygon and related ecosystems. Core areas of expertise include DEX, Lending, Bridge, CDP.
With 280 audits on record, Trail of Bits has worked with notable protocols including Uniswap V3, MakerDAO, Compound V3, Yearn V3. The firm's review history provides a transparent track record that teams can evaluate before engaging.
Trail of Bits is tracked on Procur3's auditor directory. Teams can compare their profile, stats and track record against other firms before requesting a quote.
- Languages
- Solidity, Rust, Go, C++, Vyper, Cairo
- Chains
- Ethereum, Solana, Polygon, Arbitrum, Optimism, Cosmos, Avalanche
- Expertise
- DEX, Lending, Bridge, CDP, Oracle, Cross Chain, Derivatives, Liquid Staking, Synthetics
- Services
- Smart Contract Audit, Formal Verification, Cryptography Review, Custom Tool Development, Incident Response
Track record
Findings by severity
| Critical, high & medium | 1295 | 40.5% |
| Low, informational & other | 1705 | 53.3% |
| Unclassified | 200 | 6.2% |
Across 280 audits, Trail of Bits has logged 3200 findings, of which 1295 were rated critical, high or medium, roughly 40% of the total.
Trail of Bits's published severity groups add up to fewer findings than its published total. The difference is shown as unclassified rather than assigned to either group.
Figures are updated periodically and may not include every engagement. Severity labels follow each report's own classification.
Selected work
Notable clients
- Uniswap V3DEX
- MakerDAOCDP
- Compound V3Lending
- Yearn V3Yield Aggregator
FAQ
Questions about Trail of Bits
Where can I find Trail of Bits' audit reports?
Trail of Bits publishes its audit reports at github.com/trailofbits/publications.
What does Trail of Bits audit?
Trail of Bits lists Smart Contract Audit, Formal Verification, Cryptography Review, Custom Tool Development and Incident Response across Solidity, Rust, Go, C++, Vyper and Cairo, and has published work on Ethereum, Solana, Polygon, Arbitrum, Optimism, Cosmos and Avalanche.
How much does a Trail of Bits audit cost?
Procur3 doesn't hold published pricing for Trail of Bits. Audit cost depends on scope, code size and the depth of review. See smart contract audit cost 2026 for typical ranges, or get an indicative figure from the audit cost calculator.
How do I get a quote from Trail of Bits?
Trail of Bits doesn't quote through Procur3. You can contact them through their website, or post your scope to get quotes from matched firms.
Compare
Similar audit firms
HexensSolidity, Rust, Go · 250+ auditsHexens audit profileRequest a quote
Consensys DiligenceSolidity, Vyper, Rust · 500+ auditsConsensys Diligence audit profileRequest a quote
CyfrinSolidity, Rust, Vyper · 269 auditsCyfrin audit profileRequest a quote
Nethermind SecuritySolidity, Rust, Cairo · 160 auditsNethermind Security audit profileRequest a quote
Ready to work with Trail of Bits?
Post your scope once.Matched firms quote it competitively; you compare and award.