About Contribute GitHub
Menu

Dan Guido

Dan Guido is a security researcher and CEO of Trail of Bits, the New York cybersecurity firm he co-founded in 2012, known for data-driven exploit/mobile-threat research, co-founding the Empire Hacking meetup, and steering the firm into blockchain and DeFi security auditing.

Dan Guido is CEO of Trail of Bits, a New York-based cybersecurity research and consulting firm he co-founded in 2012 alongside Alexander Sotirov (who serves as Co-CEO) and Dino Dai Zovi. Trail of Bits describes its founding mission as publishing security research and tooling "to raise the bar for everyone" rather than hoarding offensive knowledge within a single firm.

Exploit intelligence research

Earlier in his career Guido produced statistically-grounded research into how attackers actually operate, rather than purely theoretical vulnerability work. He presented "The Mobile Exploit Intelligence Project" in 2012 and a follow-up, "The Exploit Intelligence Project Revisited," in 2013 — data-driven analyses of exploitation and mobile-threat trends in the spirit of the broader academic push (exemplified by projects like the Android Malware Genome Project) to move malware and exploit research from anecdote toward large-sample statistical analysis. In 2016 he co-presented "Modern iOS Application Security" with fellow Trail of Bits researcher Sophia D'Antoine, extending this mobile-security focus to Apple's platform.

Empire Hacking

Guido is credited as an organizer of Empire Hacking, a bi-monthly New York City meetup "organized by Trail of Bits" and focused on "pragmatic security research and new discoveries in software attack and defense." The group's own history page dates its founding to May 2015; by the mid-2020s it had grown to over 1,500 members before going on hiatus in 2025 while Trail of Bits planned longer-form NYC events with partners.

Pivot to blockchain and DeFi security

From around 2019 onward, Guido and Trail of Bits publicly repositioned toward cryptocurrency and decentralized-finance security, with Guido delivering talks including "Evidence-driven Security Engineering," "Traditional Infosec for Blockchain Firms," and "What blockchain got right" in 2019, followed by "DeFi Hacks and Future Threats" in 2020. Trail of Bits went on to build a substantial blockchain security-auditing practice (the company's team page lists a dedicated Engineering Director for Blockchain and an Engineering Director for Cryptography), and its blog continues to publish smart-contract and protocol security findings, including a 2026 post on recurring failure patterns in Uniswap v4 hooks and a disclosed access-control bug in the Provenance Blockchain.

Recent work

In March 2026, Guido authored a Trail of Bits post, "How we made Trail of Bits AI-Native (so far)," describing the firm's internal shift toward AI-augmented security auditing, writing that the effort began with "5% buy-in and 95% resistance" before "AI-augmented auditors are finding 200 bugs a week on the right engagements."

Note: Guido's early education and pre-Trail of Bits employment history could not be independently confirmed from the sources consulted for this article and are omitted rather than assumed.

Timeline

  • 2012Co-founds Trail of Bits in New York City with Alexander Sotirov and Dino Dai Zovi.
  • 2012Presents "The Mobile Exploit Intelligence Project," statistical research on mobile exploitation trends.
  • 2013Presents "The Exploit Intelligence Project Revisited."
  • 2015-05Empire Hacking meetup, organized by Trail of Bits, is founded in New York City.
  • 2016Co-presents "Modern iOS Application Security" with Sophia D'Antoine.
  • 2019Delivers blockchain-security talks: "Evidence-driven Security Engineering," "Traditional Infosec for Blockchain Firms," and "What blockchain got right."
  • 2020Presents "DeFi Hacks and Future Threats."
  • 2026-03-31Publishes "How we made Trail of Bits AI-Native (so far)" on the company blog.
Dan Guido
Type
Person
Era
2012-Present
Known for
Co-founded Trail of Bits in New York City in 2012 with Alexander Sotirov and Dino Dai Zovi; Serves as CEO of Trail of Bits; Alexander Sotirov serves as Co-CEO; Authored 'The Mobile Exploit Intelligence Project' (2012) and its follow-up 'The Exploit Intelligence Project Revisited' (2013), statistical/data-driven research on exploit and mobile-threat trends; Co-presented 'Modern iOS Application Security' with Sophia D'Antoine (2016); Empire Hacking, the NYC/Brooklyn security meetup organized by Trail of Bits, was founded in May 2015 and lists 'Dan G.' among its organizers; Led Trail of Bits' expansion into blockchain and DeFi security auditing, reflected in talks such as 'Evidence-driven Security Engineering,' 'Traditional Infosec for Blockchain Firms,' and 'What blockchain got right' (all 2019) and 'DeFi Hacks and Future Threats' (2020); Wrote the 2026 Trail of Bits post on adopting AI-augmented auditing practices across the firm
Key date
2012
Tags
security-research, trail-of-bits, empire-hacking, exploit-intelligence, mobile-security, blockchain-security, defi-security, ceo
Created by Joas A Santos · Something wrong or want it removed? Open an issue.