# fuzzland/ityfuzz

Blazing Fast Bytecode-Level Hybrid Fuzzer for Smart Contracts

Repository: https://github.com/fuzzland/ityfuzz
Canonical: https://ross.abutalabs.com/products/ityfuzz
Homepage: https://docs.ityfuzz.rs
Language: Rust
License: MIT
License Family: permissive
Topics: concolic-execution, fuzzing, smart-contracts, aptos, evm, move, sui, ethereum, solidity, blockchain
Last push: 2025-12-10T00:09:48+00:00

## Health v2 (maintenance only)
Score: 55/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 56, release rhythm 28, longevity 100
- inputs: {"age_days": 1409, "days_push": 267, "days_rel": 469, "gap_med": 88, "n_releases_24m": 4}
- flags: prerelease_only
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1108, forks 182 (observed 2026-08-28T04:03:37.017609+00:00)

## What it is
ItyFuzz is a blazing-fast bytecode-level hybrid fuzzer for EVM and MoveVM smart contracts that combines symbolic (concolic) execution with fuzzing to find bugs and generate full exploits, both offchain and onchain via chain forking. It supports Foundry invariant tests, Echidna/Scribble invariants, flashloan-aware exploit generation, and CI/CD integration.

## Use cases
- fuzz smart contracts for vulnerabilities
- generate exploits for onchain DeFi hacks
- run Foundry invariant tests faster
- find reentrancy and integer overflow bugs in Solidity
- audit deployed contracts by forking a chain at a block
- fuzz Move/Aptos/Sui smart contracts
- detect fund-stealing vulnerabilities without writing invariants

## When to choose
- you need automated smart contract vulnerability discovery with exploit generation
- you want to fuzz deployed contracts on any EVM chain at a specific block
- you need faster, higher-coverage fuzzing than Echidna, Mythril, or Foundry
- you want Echidna/Scribble invariant compatibility without changing code

## When to avoid
- you need static formal verification with mathematical proofs rather than fuzzing
- your target is not a smart contract (e.g., general-purpose binaries)
- you require a GUI-based audit workflow
- you cannot install Rust/Z3 build dependencies and prefer a managed SaaS scanner

## Facets
- artifact type: cli-tool
- maturity: active
- function: fuzzing, security, penetration-testing, vulnerability-scanning, testing
- domain: blockchain, security, developer-tools, testing
- platform: cli, rust
- tags: smart-contract-fuzzing, concolic-execution, evm, move-vm, exploit-generation, defi-security, chain-forking, foundry-integration, smart-contracts, linux, macos

## Member repositories
- fuzzland/ityfuzz (main) score 55

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:37.017609+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:43:46.070882+00:00, confidence not recorded.
  - readme: https://github.com/fuzzland/ityfuzz (fetched 2026-08-28T04:03:37.017609+00:00, sha b392a76dd599)
  - homepage: https://docs.ityfuzz.rs (fetched 2026-08-29T12:47:26.441391+00:00, sha c53c03dd40a4)
  - site_page: https://docs.ityfuzz.rs/installation-and-building (fetched 2026-08-29T12:47:26.444032+00:00, sha 9a72b2f2a165)
  - site_page: https://docs.ityfuzz.rs/quickstart (fetched 2026-08-29T12:47:26.446088+00:00, sha cdb6cf103343)
  - site_page: https://docs.ityfuzz.rs/docs-evm-contract/constructor-for-offchain-fuzzing (fetched 2026-08-29T12:47:26.448145+00:00, sha 8c523e862fdb)
  - site_page: https://docs.ityfuzz.rs/docs-evm-contract/writing-invariants (fetched 2026-08-29T12:47:26.449968+00:00, sha 0fe2b62c619c)
  - site_page: https://docs.ityfuzz.rs/docs-evm-contract/detecting-common-vulns (fetched 2026-08-29T12:47:26.451670+00:00, sha 786824f9469c)
- Data as of 2026-08-30T08:39:29.467469+00:00.