PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mutation testing comes to DAML

blog.trailofbits.com | blog | #open-source | #smart-contracts | #daml | #software-testing | #tooling | #blockchain | #mutation-testing
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits' Mewt mutation-testing engine adds DAML support: mutants for the Canton Network language, including two aimed at authorization primitives, grade tests by how many survive.
Published
Collected

Related coverage

blog · blog.trailofbits.com
SequenceHash: multihashing for the rest of us
We're releasing SequenceHash and its sister function SequenceMAC, a pair of related hash constructions that bring secure multihashing to developers using hash functions other than Keccak.
blog · blog.trailofbits.com
Using mutants to improve Slither
Researchers used mutation testing to seed bugs in smart contracts and check whether Slither detects them, deriving new rules for Boolean constant misuse, type-based tautologies, and precision loss.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry
HackenProof and Hack The Box turn blockchain security into a gamified CTF track with weekly challenges and a ten-quest series, giving top performers a path into the bug bounty ecosystem.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry
HackenProof has launched a blockchain-industry course with Hack The Box, the four-million-member ethical hacking platform, aimed at building practical blockchain security skills.
blog · hackenproof.com
How to hack everiToken?
An introduction to everiToken, a token-based public chain that replaces smart contracts with 'safe contracts' and BFT-DPOS consensus, plus node setup, API testing, and a node vulnerability.
blog · certik.com
Where CIP-56 Security Actually Lives: A Guide for Institutions on Canton
CIP-56's security lives in Daml implementation details—views, choices, factories, client-side construction, and participant permissions—and the guide covers CIP-0112 (Token Standard V2) changes.
Back