An Echidna for all Seasons

Summary: Trail of Bits reports that Echidna, its open-source property-based smart contract fuzzer released two years ago, was used in about 35% of its smart contract audits over that period, including audits of MakerDAO, 0x, and Balancer. Since the first release, the team has added support for multiple compilation frameworks via crytic-compile (including Truffle projects and Vyper contracts), assertion testing, function blacklisting and whitelisting, corpus save and load in JSON, high-gas transaction detection, and multi-contract testing.
Key Takeaway: A fuzzer used in roughly one in three of the firm's smart contract audits now carries saved corpora that let CI runs skip starting from scratch, and the team has added Echidna support to crytic.io, its continuous assurance platform - so the tooling behind those audits is moving into the pipeline where contract changes land.

Read the original at Trail of Bits Blog ↗