Alexis Challande
Security Engineer at Trail of Bits
Paris, Ile-de-France
Summary
🤩
Rockstar🎓
Top SchoolAlexis Challande is a Security Engineer at Trail of Bits with a decade of experience building static analysis and ecosystem security tools. He holds a PhD from École Polytechnique where he developed semantic patch–based vulnerability detection methods and has applied that research to large-scale automated vulnerability discovery. His background spans research and applied roles at Quarkslab, ANSSI, and AXA, with hands-on contributions to notable open-source projects like the Solidity analyzer Slither and the bincat binary analyzer. Alexis combines deep binary and taint-analysis expertise with practical backend and DevOps skills (e.g., OIDC/JWT work on PyPI’s warehouse), enabling end-to-end tooling improvements. He favors pragmatic refactors and portability fixes that reduce real-world fragility—such as eliminating brittle os-dependent code paths and adding regression tests. Based in Paris, he focuses on securing software supply chains through systematic, reproducible analysis techniques.
10 years of coding experience
Doctor of Philosophy - PhD, COMPUTER AND INFORMATION SCIENCES AND SUPPORT SERVICES, Doctor of Philosophy - PhD, COMPUTER AND INFORMATION SCIENCES AND SUPPORT SERVICES at École PolytechniqueMaster en informatique, Master en Sécurité Informatique, Master en informatique, Master en Sécurité Informatique at Université Pierre et Marie Curie (Paris VI)Master en Sécurité Numérique, Informatique, Master en Sécurité Numérique, Informatique at EURECOM
French, English, German
Github Skills (27)
github-ci10
static-analysis10
solidity10
vyper10
pytest10
python10
taint10
it-security10
oid10
cicd10
security10
mutation-testing10
ethereum10
package10
jwt10
Programming languages (18)
Github contributions (5)
pypi/warehouse
Jun 2024 - Apr 2025
The Python Package Index
Role in this project:
Back-end Developer & DevOps Engineer
Back-end Developer & DevOps EngineerContributions:51 reviews, 23 PRs, 78 comments in 9 months
Contributions summary:Alexis primarily worked on implementing and maintaining security features related to OIDC token management, including reuse detection and JWT identifier handling. They also contributed to the test suite, specifically targeting the OIDC service. Furthermore, the user's commits demonstrate involvement in CI/CD pipeline management, with modifications to the GitHub Actions workflow and documentation updates related to testing. The user demonstrates familiarity with PEP740 support and has the skills to disable/enable it.
pythonpackage-registrypackage-repositorypypipypi-source
crytic/slither
Mar 2024 - Oct 2024
Static Analyzer for Solidity and Vyper
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:11 reviews, 20 PRs, 56 pushes in 7 months
Contributions summary:Alexis primarily worked on improving the `slither` static analyzer. Their contributions focused on enhancing file handling within the mutator tool, which is a core component of the project. They fixed path-related issues and addressed encoding typos, alongside refactoring the code by removing usage of the `os` module for enhanced portability. They also fixed a bug that didn't handle the contract-names parameter properly and a bug iterating on directories. These changes contribute to the stability and functionality of the static analysis tool.
soliditystatic-analyzervyperethereumstatic-analysis
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.