ConsenSys releases ‘fuzzing’ tool to test smart contract vulnerabilities

Share This Post

Diligence Fuzzing lets developers introduce random and invalid data points to find security flaws.

Blockchain technology firm ConsenSys publicly released its “Diligence Fuzzing” tool for smart contract testing, according to an Aug. 1 announcement. The new tool produces “random and invalid data points” to find vulnerabilities in contracts before they are launched.

Over $2.8 billion was lost in decentralized finance hacks in 2022. According to ConsenSys, these losses are leading developers to embrace more sophisticated testing tools to help find vulnerabilities before attackers do.

The new tool used to be available in a closed beta version, where developers needed to get approval for access. This approval process is no longer necessary as of Aug. 1. Diligence Fuzzing is also now integrated with smart contract toolkit Foundry and features a free version for developers who want to test it out before spending any money.

Diligence Fuzzing tutorials. Source: Consensys

Related: Crypto payment gateway CoinsPaid suspects Lazarus Group in $37M hack

In a conversation with Cointelegraph, ConsenSys security services lead Liz Daldalian explained how the tool works in more detail. Developers can annotate their contracts using a machine language called “Scribble,” also developed by ConsenSys. Once they do this, the annotations will be understood by the fuzzing tool. The tool produces “unexpected” inputs so as to test whether the contract can be forced to produce unintended actions.

ConsenSys security researcher Gonçalo Sá said the tool is not a “black box fuzzer.” It does not produce completely random data. Instead, it is a “grey-box fuzzer” that employs an understanding of the program’s current state to reduce the types of data produced, increasing the tool’s efficiency.

Sá has seen developers becoming more interested in fuzzing recently. As Foundry has become more popular, developers have started to use its default black-box fuzzer and have grown accustomed to using it. On the other hand, some users want a more sophisticated fuzzer than the default one, which he argued Diligence Fuzzer could provide. He said:

“People are now trying to harness the power of the different types of security tools that they have in their hands. And Foundry [has] a black box fuzzer that is really easy to use. […] So people now are starting to understand the power of fuzzing. […] And they are looking for more powerful tools.”

Smart contract hacks have continued to pose a problem for users. Excluding rug pulls and phishing scams, over $471.43 million was lost from Web3 security vulnerabilities in the first half of 2023. Daldalian cautioned that Diligence Fuzzing is not a “silver bullet” that would eliminate all smart contract hacks. However, she argued that it is “one tool in an arsenal that developers can use in order to write more secure smart contracts,” which can at least set the Web3 community on a path to minimize losses from these attacks.

Read Entire Article
spot_img
- Advertisement -spot_img

Related Posts

Uncertainty Looms For Crypto As SEC And CFTC Leadership Transitions Unfold Under Trump

As Donald Trump prepares to take office for another term, speculation is intensifying regarding the future of crypto regulation, particularly concerning the leadership of the US Securities and

How This Trader Turned $800 Into $850,000 in the Last Bull Run: Here’s What They’re Buying Next in 2024!

In the realm of cryptocurrency, remarkable stories emerge of traders who achieve extraordinary profits An investor transformed an $800 stake into an impressive $850,000 during the previous market

Altseason’s Crown Jewel: Dogen Price Set to Skyrocket 10,000%!

Cryptocurrency circles are abuzz with talk of a rising star in the altcoin world Rumors suggest that Dogen could experience an unprecedented surge in value As the altseason unfolds, all eyes are on

Shiba Inu Chart Shows Strong Bullish Momentum, Trader Predicts 129% Rally for SHIB and 6350% Jump for One Competing Token

Rexas Finance has successfully raised $64 million, attracting attention with its ambitious roadmap and innovative approach to real-world asset tokenization With more interest in the sector, Rexas

Analysts Predict POL-Based Meme Coin to Surge from $0.0005 to $15, as PEPE Targets $0.001 and DOT Looks at $10!

Market analysts are buzzing about a potential meteoric rise in a POL-based meme coin, predicting it could leap from mere fractions to significant figures At the same time, popular tokens like PEPE

This Is Dogen’s Time: 2024’s Top Memecoin With 25,000% ROI Potential!

Could a new memecoin be set to shake up the crypto world in 2024 Dogen is attracting attention with whispers of eye-popping returns Investors are buzzing about the chance of a 25,000% gain This piece