fuzzland/ityfuzz

Health v2 · maintenance only

Flags: prerelease_only

Adoption not part of the score

1108 stars · 182 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ItyFuzz is a blazing-fast bytecode-level hybrid fuzzer for EVM and MoveVM smart contracts that combines symbolic (concolic) execution with fuzzing to find bugs and generate full exploits, both offchain and onchain via chain forking. It supports Foundry invariant tests, Echidna/Scribble invariants, flashloan-aware exploit generation, and CI/CD integration.

Use cases

• fuzz smart contracts for vulnerabilities
• generate exploits for onchain DeFi hacks
• run Foundry invariant tests faster
• find reentrancy and integer overflow bugs in Solidity
• audit deployed contracts by forking a chain at a block
• fuzz Move/Aptos/Sui smart contracts
• detect fund-stealing vulnerabilities without writing invariants

When to choose

• you need automated smart contract vulnerability discovery with exploit generation
• you want to fuzz deployed contracts on any EVM chain at a specific block
• you need faster, higher-coverage fuzzing than Echidna, Mythril, or Foundry
• you want Echidna/Scribble invariant compatibility without changing code

When to avoid

• you need static formal verification with mathematical proofs rather than fuzzing
• your target is not a smart contract (e.g., general-purpose binaries)
• you require a GUI-based audit workflow
• you cannot install Rust/Z3 build dependencies and prefer a managed SaaS scanner

Facets

cli-tool · maturity active

fuzzing security penetration-testing vulnerability-scanning testing blockchain security developer-tools testing cli rust smart-contract-fuzzing concolic-execution evm move-vm exploit-generation defi-security chain-forking foundry-integration smart-contracts linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="fuzzland/ityfuzz")