PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Optimizing a smart contract fuzzer

blog.trailofbits.com | blog | #web3 | #smart-contracts | #fuzzing | #blockchain | #echidna | #haskell | #optimization
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Using GHC's Haskell profiler, an intern optimized the Echidna smart contract fuzzer, fixing memoization and state handling to make coverage-guided runs over six times faster.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Using benchmarks to speed up Echidna
A Trail of Bits associate used GHC profiling to hunt down a massive space leak in Echidna's hevm dependency, cutting memory use by gigabytes and sharing lessons on measuring performance correctly.
blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry
HackenProof and Hack The Box turn blockchain security into a gamified CTF track with weekly challenges and a ten-quest series, giving top performers a path into the bug bounty ecosystem.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry
HackenProof has launched a blockchain-industry course with Hack The Box, the four-million-member ethical hacking platform, aimed at building practical blockchain security skills.
blog · hackenproof.com
How to hack everiToken?
An introduction to everiToken, a token-based public chain that replaces smart contracts with 'safe contracts' and BFT-DPOS consensus, plus node setup, API testing, and a node vulnerability.
blog · certik.com
CertiK Independently Verifies Sui's New Performance Benchmark
CertiK independently verified Sui’s Mainnet Tunnel performance campaign, which recorded more than 15.2 billion off-chain transactions across 7,680 tunnels at a peak of 40.68 million TPS.
Back