Vulseye: Detect Smart Contract Vulnerabilities via Stateful Directed Graybox Fuzzing

Understand

Smart contracts, the cornerstone of decentralized applications, have become increasingly prominent in revolutionizing the digital landscape.

• However, vulnerabilities in smart contracts pose great risks to user assets and undermine overall trust in decentralized systems.
• But current smart contract fuzzers fall short of expectations in testing efficiency for two primary reasons.
• Firstly, smart contracts are stateful programs, and existing approaches, primarily coverage-guided, lack effective feedback from the contract state.