Fuzzing Comes to Solana
summary
Aki's open source fuzzer Trident compiles Anchor programs, runs configurable runs (example uses 2,000 iterations) and generates a binary .sbrt plus account snapshot files; the fuzz harness lives in an instructions file that supplies inputs and invariant checks. The live demo shows a crash at iteration 659, the debug command points to line 36 and reproduces the failing input (123). Wake is the EVM sibling and has already found real bugs in Lido.
AI-written summary · about
chapters (6)
- 0:00Introduction to Ackee
- 1:43Audits and education
- 3:22Understanding fuzzing
- 5:53Setting up Trident
- 7:23Live fuzzing demonstration
- 11:31Getting started with security
related talks
01h 15mMake your programs more reliable with Fuzzing
25mHow fuzzing helps to find bugs
52mStructure aware fuzzing
39mFuzzing Session: Finding Bugs and Vulnerabilities Automatically
53mFuzzing 101
31m“Fuzz or lose..."
01h 39mFuzzing in the open: Integrate your project in OSS-Fuzz for continuous fuzzing
53mFuzz Testing for Fun and Profit