ityfuzz icon indicating copy to clipboard operation
ityfuzz copied to clipboard

Blazing Fast Bytecode-Level Hybrid Fuzzer for Smart Contracts

Results 74 ityfuzz issues
Sort by recently updated
recently updated
newest added

The release workflow has failed. Some or all binaries might have not been published correctly. Check the [release workflow page](https://github.com/fuzzland/ityfuzz/actions/runs/9231255403 ) for details. This issue was raised by the workflow...

P-high
T-bug

Some attacks require the sender to have a previous balance of ERC20 tokens, for example. Usually, attackers get those through flash loans. A simpler way would be to just deal...

The coverage.json, coverage.txt, and the JSON files in the coverage folder are either empty or only contain "{"coverage":{}}" when we run the command "timeout 20s ityfuzz evm -t './build/*'" with...

Would it be possible to add support for Tron? If you have a PR or diff I could look at that's similar to this I would be willing to submit...

- [x] Need a forking mechanism like EVM chains - [ ] Support flashloan + liquidation of tokens on Cetus - [ ] Support flashloan + liquidation of tokens on...

In the example given in `quickstart`: ```sh # -t [TARGET_ADDR]: specify the target contract # --onchain-block-number [BLOCK]: fork the chain at block number [BLOCK] # -c [CHAIN_TYPE]: specify the chain...

Could you please update the docs to provide clear steps on how to run ityfuzz on local foundry project not assuming invariants?

When I was testing the off-chain smart contract, the system only generated a few dozen test cases and then stopped. Afterwards, it kept outputting basic information. I want to know...

I'm reproducing the result of ityfuzz. I got the sheet from here: https://github.com/fuzzland/ityfuzz/issues/153. However, for the first one AES, ityfuzz fails to give a result in 30 minutes (and seems...

```solidity // SPDX-License-Identifier: UNLICENSED pragma solidity ^0.8.13; import {Test, console2} from "forge-std/Test.sol"; import {XXX} from "../src/XXX.sol"; contract Inv1 is Test { XXX usdc; function setUp() public { vm.startPrank(address(0x1)); //