Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Fuzzing on-chain contracts with Echidna

blog.trailofbits.com | blog | #web3 | #smart-contracts | #fuzzing | #blockchain | #trail-of-bits | #ethereum | #echidna | #exploit-reproduction

Summary

Echidna 2.1.0 adds direct on-chain data retrieval, letting security engineers fuzz deployed Ethereum smart contracts in their live state and reproduce real-world exploits like the Stax Finance hack.
Published
Collected

original ↗

Related coverage

  1. State divergence enables unauthorized access (blog.trailofbits.com)
  2. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry (hackenproof.com)
  3. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry (hackenproof.com)
  4. ERC-4337 paymasters: better UX, hidden risks (osec.io)
  5. Building secure Uniswap v4 hooks (blog.trailofbits.com)
  6. State Machine Testing with Echidna (blog.trailofbits.com)

back