Today, we bring a new article that follows up on our work and our last post on verifying the Linux kernel. This time, we migrated a piece of the kernel's C to safe Rust, choosing a video descriptor parser that had already carried two CVEs of the same class sixteen years apart. We also dive into how comparing the two implementations against each other led us to a genuine defect in the original C, now being fixed upstream. runtimeverification.com/blog…

Who's in Las Vegas this week? Everett Hildenbrandt (CEO) and Paul Len (COO) are on the ground at the Black Hat conference until Friday. If you're around and want to chat about formal verification, fuzzing, and their place in AI guardrails & agentic security, our DMs are open.

Monero community, we need your help. After deep discussions with the Cuprate contributors, we've identified an avenue to stress-test Cuprate's consensus rules (the code that decides which transactions are valid) and catch bugs before they can cause network splits, especially around the FCMP++ upgrade. Our CCS proposal to build the initial consensus fuzzing infrastructure would give Cuprate its first automated tests that go beyond parsing and actually hammer the validation logic itself. By generating valid transactions and feeding them to both Cuprate and monerod, any disagreement between the two surfaces a consensus bug. This initiative would help identify drifts between clients early on (when it's easier to spot and fix those issues), helping to make sure that Cuprate's implementation is correct as it's being developed. The same harness can then be extended to cover FCMP++ once it lands upstream! If Monero's development is close to your heart, please support our proposal below 👇

Donate to Simbolik: qf.giveth.io/project/simboli… Simbolik is the favorite Solidity debugger in the Ethereum ecosystem, and it’s built by our security engineers. But Simbolik is not just a debugger anymore, but a comprehensive security toolkit and a must-have for any builder. And the best part? We are just getting started, and you can help us by donating to the quadratic funding initiative, part of the @Giveth and @thedaofund Nowadays, with Simbolik, any developer can: -> Source-level debugger -> Foundry Test Explorer -> Test Coverage -> Static Analysis With your help, we have planned a series of new features, including the integration of Kontrol into Simbolik, our Foundry-native formal verification engine, to AI-assisted, coverage-guided test synthesis, static analysis detectors for stack-too-deep errors, and interactive symbolic execution. Donate to help expand Simbolik's capabilities, and if you have a feature you would like to see, talk to @RaoulSaffron

1/ We are thrilled to announce the completion of @TrustlessWork's smart contracts code review 🐞🔨 Keep reading to learn more about what went down👇

🇦🇷 @actsant at @summit_defi sharing about "Rust-Proofing Your Chains: A Deep Dive into Secure Rust Development Workflows"

🇦🇷 Catch our team tomorrow and Friday at @summit_defi's stage, sharing about some of the hottest security topics atm👇 ➡️@palinatolmach will talk Nov 20th - 14:05 at the Auditorium Stage about "Off-Chain But Not Off Radar: Securing Crypto Infrastructure Beyond Smart Contracts" ➡️ will talk Nov 20th - 16:05 at the Auditorium Stage about "Rust-Proofing Your Chains: A Deep Dive into Secure Rust Development Workflows" ➡️Everett Hildenbrandt will talk Nov 21st - 10:30 at the Nogal Stage about "Shipping AI-Generated Code That Won't Hurt You (Much)"