ityfuzz
ityfuzz copied to clipboard
Blazing Fast Bytecode-Level Hybrid Fuzzer for Smart Contracts
https://cilogs-ityfuzz.s3.amazonaws.com/a9e0c79e-94ce-4cb1-aacb-eeda2a6e9a52/res_Annex_exp.txt It seems the reentrancy is broken in logging. May be a regression of minimizer implementation?
Currently when implementing `revm::interpreter::Host`, the `FuzzHost` doesn't consider state rollback when call/create reverts. This should be fine in most case but in the case where sub-call reverts and caller doesn't...
https://github.com/SunWeb3Sec/DeFiHackLabs/blob/main/src/test/Nmbplatform_exp.sol As we now directly calculate profit instead of using Uniswap `swap` to liquidate assets, ItyFuzz can no longer find this type of bug since selling of token is no...
Currently, mutators randomly select values from storage slot to replace input values. We shall prioritize using slots recently read/written.
Not able to fuzz: https://etherscan.io/address/0x847ee1227A9900B73aEeb3a47fAc92c52FD54ed9#code
Following contracts give corpus items with non-reverted status, though in fact default callers don't have permission to call functions due to **onlyGovernor** modifier. I thought that there is some voting...
curve LP for example
How did the authors obtain the 42 exploited projects and 45,000 projects? It is really important for my research to acquire them, particularly the 42 projects.
```shell ./cli -o --onchain-block-number 0 --chain-type ETH --onchain-local-proxy-addr http://127.0.0.1:5003 --panic-on-bug --flashloan --concolic --ierc20-oracle --pair-oracle --target 0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D,0x3c4fe0db16c9b521480c43856ba3196a9fa50e08 ``` ``` thread 'main' panicked at 'range end index 36 out of range for...