Trail of Bits Used AI Agents to Build an LSP, Decompiler, and Lean Proofs for a Miden zkVM Audit

Trail of Bits 用 Agent 为 Miden zkVM 审计自建 LSP、反编译器和 Lean 形式化证明

Before auditing the Miden zkVM, Trail of Bits spent six months having AI agents build an LSP server, a decompiler, a static analysis engine, and a Lean formal model from scratch. These tools found real bugs, including an unvalidated input that let a malicious prover forge Falcon signatures and steal funds. The Lean work produced 95 machine-checked correctness proofs. The post mentions Claude built the LSP prototype but doesn't name the specific models used for other tools.

Why it matters: Trail of Bits spent six months having AI agents build an audit toolchain from scratch and found real bugs—a hardcore case study in AI-assisted security auditing. Hits all three HKR axes, but the security-vertical focus raises the accessibility bar for general readers; deduct 3...