ityfuzz icon indicating copy to clipboard operation
ityfuzz copied to clipboard

Blazing Fast Bytecode-Level Hybrid Fuzzer for Smart Contracts

Results 74 ityfuzz issues
Sort by recently updated
recently updated
newest added

https://cilogs-ityfuzz.s3.amazonaws.com/a9e0c79e-94ce-4cb1-aacb-eeda2a6e9a52/res_Annex_exp.txt It seems the reentrancy is broken in logging. May be a regression of minimizer implementation?

bug

Currently when implementing `revm::interpreter::Host`, the `FuzzHost` doesn't consider state rollback when call/create reverts. This should be fine in most case but in the case where sub-call reverts and caller doesn't...

bug

https://github.com/SunWeb3Sec/DeFiHackLabs/blob/main/src/test/Nmbplatform_exp.sol As we now directly calculate profit instead of using Uniswap `swap` to liquidate assets, ItyFuzz can no longer find this type of bug since selling of token is no...

bug

Currently, mutators randomly select values from storage slot to replace input values. We shall prioritize using slots recently read/written.

enhancement

Not able to fuzz: https://etherscan.io/address/0x847ee1227A9900B73aEeb3a47fAc92c52FD54ed9#code

enhancement

Following contracts give corpus items with non-reverted status, though in fact default callers don't have permission to call functions due to **onlyGovernor** modifier. I thought that there is some voting...

How did the authors obtain the 42 exploited projects and 45,000 projects? It is really important for my research to acquire them, particularly the 42 projects.

```shell ./cli -o --onchain-block-number 0 --chain-type ETH --onchain-local-proxy-addr http://127.0.0.1:5003 --panic-on-bug --flashloan --concolic --ierc20-oracle --pair-oracle --target 0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D,0x3c4fe0db16c9b521480c43856ba3196a9fa50e08 ``` ``` thread 'main' panicked at 'range end index 36 out of range for...

bug