Valentin Wüstholz
Valentin Wüstholz
I have been trying to run Echidna on code that contrains multiple assertions per function. It seems like Echnida stops fuzzing a function after the first violation. Is this the...
Currently, ghost state declarations (e.g., for tracking map keys) are generated regardless of whether there is a quantifier that quantifies over the corresponding map. It would be great to only...
**Describe the bug** It seems like there is something off with how semgrep matches external calls in Solidity's try-catch construct. **To Reproduce** I wrote the following rule to reproduce this...
**Describe the bug** It seems like there is something off with how semgrep matches Solidity's unchecked-blocks. There seem to be more matches than expected. **To Reproduce** I wrote the following...
I observed a crash in `gasSStoreEIP2200` due to a panic in `SubRefund`. Unfortunately, I don't have a convenient repro for this since it happend during a run of our Harvey...
I'm trying to compare the Forge fuzzer with Echidna on several benchmark contracts. To make the comparison as fair as possible, I've created a benchmark generator that automatically generates challenging...
I'm trying to compare Hybrid-Echidna with Echidna and the Forge fuzzer on several benchmark contracts. To make the comparison as fair as possible, I've created a benchmark generator that automatically...
**Describe the bug** I would like to run the hybrid fuzzer for a fixed amount of time (for instance, one hour). It would be great if this was possible (just...
**Describe the bug** It seems like there is something off with how semgrep matches expressions. I get matches for code (both Solidity and Java) where I would not expect a...