3 ms·

Could this be used to find bugs in already published contracts? It brings to mind the 2013 PRNG issue [0] that led to a bunch of wallets being drained. Somethin

Could this be used to find bugs in already published contracts? It brings to mind the 2013 PRNG issue [0] that led to a bunch of wallets being drained. Something that is perfectly valid today might have a vulnerability in the future. [0] https://android-developers.googleblog.com/2013/08/some-securerandom-thoughts.html https://android-developers.googleblog.com/2013/08/some-secur...

albntomat0 6y ago
Theoretically, I think so. Looking through their code examples though, the compiler failures look to be in obscure/unlikely to be used areas. Additionally, they state that some are dependent on particular compiler flags
AlexCoventry 6y ago
There's another fuzzer specifically for solidity smart contracts. https://github.com/crytic/echidna https://github.com/crytic/echidna