Learning Goals
Gain an…
- Ability to run and configure a real fuzzer to find bugs in smart contracts
- Understanding of the benefits and utility of a randomized testing tool.
- Understanding of the limitations of Echidna and an understanding of the limitations of randomized testing.
Suggested Academic Readings:
- Echidna: Effective, Usable, and Fast Fuzzing for Smart Contracts
- Randoop: Feedback-Directed Random Testing for Java
- Feedback-directed Random Test Generation
Resources:
- Echidna Config
- You might need
seqLen
and testLimit
- Ragnarok Online Invasion Vulnerability
- Compiling with multiple solidity versions
Setup:
- Download the development environment and benchmark set: