Trail of Bits

TEE’s are growing in popularity, and with success comes security concerns. During this webinar, with the help of Jules Drean from Tinfoil, two of our senior security engineers, Paul Bottinelli and Tjaden Hess, will walk through what we do in the first few hours of a real TEE stack audit. Jules will act as our tour guide, covering Tinfoil’s repositories, including hardware configurations, CVM images, and more. Paul and Tjaden will highlight the top areas to examine and present frameworks to understand the different levels of confidential computing security.

During this 45-minute webinar, you’ll hear and see:

*   The frameworks for understanding different levels of confidential computing security
*   A real-life example of some TEE bugs we’ve seen in our audits
*   Discussion of findings like report attestation verification, policy checking for AMD and TDX, traffic padding, and side channel considerations


Top TEE bugs you should fix before your audit

Join cryptography analysts Marc Ilunga and Fredrik Dahlgren from Trail of Bits to understand the unique challenges of building systems with end-to-end encryption (E2EE). During this 45-minute webinar, we will:

*   Highlight unique problems that need to be solved
*   Discuss E2EE in non-messaging platforms
*   Touch on how we've used formal modeling with clients implementing E2EE


Building secure end-to-end encrypted systems

Recent research has revealed that physical attacks on Intel SGX and AMD SEV-SNP are possible when a party is able to attach an interposer to DDR4 RAM. These findings have raised important questions about the practical limits of trusted execution environments (TEEs) as the foundation for secure, privacy-preserving computation.

While hardware vendors have confirmed that these vulnerabilities will not be patched, the implications extend beyond any single exploit. They highlight the need to rethink *where* trust is placed — and how layered designs can continue to provide strong privacy guarantees, even in imperfect environments.

Join **Tjaden Hess**, Principal Security Engineer at **Trail of Bits **and **Andy Campbell**, Head of Product at **Applied Blockchain / Silent Data**, as they unpack what these discoveries mean for teams building on TEEs today.

Together, they'll explore how projects can adapt through secure architectures, layered privacy models, and resilient attestation approaches — keeping confidentiality and trust at the core of next-generation blockchain infrastructure.


Top TEE bugs you should fix before your audit

Building secure end-to-end encrypted systems

After Wiretap and Battering RAM: What Changes for TEE-Based Blockchain Infrastructure