Skip to content

Run 1771979026 ​

Trial run

Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.

Charts ​

Bugs Over TimeTime To KFinal DistributionPlateau And Late ShareInvariant Overlap (UpSet)Coverage Over TimeCorpus Size Over TimeSeq/s Over TimeTx/s Over TimeGas/s Over TimeCPU Usage Over TimeMemory Usage Over Time

Report ​

Fuzzer Benchmark Report (from bug-count CSV) ​

  • Time budget: 4.00h

Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.

⚠️ Run health ​

The following fuzzer legs show signs of not having run for the full time budget. Their results below are not comparable to healthy legs.

  • ⚠️ echidna: no bugs and no runtime activity samples were parsed from any instance — the fuzzer most likely never executed (startup/compile failure). Inspect the instance bootstrap logs before drawing conclusions from this leg.

Executive summary ​

This report is derived solely from cumulative bugs-found over time across repeated runs per fuzzer. It emphasizes robust, distribution-based metrics (median/IQR, success rates, time-to-k) and shape-based behavior (plateau time, late discovery share) instead of single-run time-to-first-bug.

Bugs found at fixed time budgets (median [IQR]) ​

FuzzerRuns1h4h
medusa26 [6,6]6 [6,6]
foundry22 [2,2]2 [2,2]
echidna20 [0,0]0 [0,0]

Overall metrics ​

FuzzerAUC (norm)Plateau timeLate discovery shareFinal medianFinal IQR
medusa0.9830.10h0.00060.00
foundry0.3310.10h0.00020.00
echidna0.0000.00h0.00000.00

Milestones: time-to-k and success rates ​

Fuzzertime-to-1 (p50)time-to-3 (p50)time-to-5 (p50)reach-1 ratereach-3 ratereach-5 rate
medusa0.00h0.10h0.10h100.0%100.0%100.0%
foundry0.00hinfinf100.0%0.0%0.0%
echidnainfinfinf0.0%0.0%0.0%

Throughput metrics (if supported by log format) ​

Values are run-level rates aggregated per fuzzer; n/a indicates the parser could not recover that metric from logs.

FuzzerRunsTx/s runsTx/s p50 [p25,p75]Gas/s runsGas/s p50 [p25,p75]
medusa2210595.00 [10276.50,10913.50]220541055292.50 [19382508990.75,21699601594.25]

Progress metrics from logs (fuzzer-specific proxies) ​

Coverage/corpus values are parsed from each fuzzer's native progress output and are useful for trend context, not strict cross-fuzzer equivalence.

FuzzerRunsSeq/s runsSeq/s p50 [p25,p75]Coverage runsCoverage p50 [p25,p75]Corpus runsCorpus p50 [p25,p75]
medusa22105.00 [102.00,108.00]22053.00 [2052.00,2054.00]274.00 [73.50,74.50]
foundry20n/a2459.50 [455.25,463.75]2324.50 [320.75,328.25]

Statistical comparison (Mann-Whitney U test) ​

Pairwise Mann-Whitney U tests on end-of-budget bug counts (two-sided). Bonferroni correction applied for 3 comparison(s). Significance level: alpha = 0.05.

Warnings:

  • One or more fuzzers have fewer than 5 runs. Statistical power may be limited.
Fuzzer AFuzzer BMedian AMedian BU statisticp-valuep (corrected)Significant
medusafoundry624.00.19390.5818no
medusaechidna604.00.19390.5818no
foundryechidna204.00.19390.5818no

No pairwise comparison reached significance after Bonferroni correction.

Note: The Mann-Whitney U test assesses whether one fuzzer tends to find more bugs than another across runs. It does not measure effect size or practical importance. Small sample sizes (fewer than 5 runs) reduce statistical power.

Shape-based interpretation (rules of thumb) ​

  • Fast-start / early-plateau: high early checkpoint median + early plateau time + low late discovery share.
  • Steady: moderate AUC, later plateau, consistent improvements across checkpoints, moderate variance.
  • Slow-burn / late-surge: low early checkpoints but high late discovery share and later plateau time; often higher final median.

Limitations ​

  • Core metrics in this section are count-based; use broken_invariants.md / broken_invariants.csv for invariant identities.
  • Severity, exploitability, and root-cause uniqueness cannot be measured directly without richer per-bug metadata.
  • Harness design still affects results; mitigate by keeping harness identical across fuzzers and reporting many runs.

Broken invariants ​

  • Budget filter: 4.00h
  • Events considered: 16 / 16
  • Unique invariants: 6

Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.

Per-fuzzer totals ​

FuzzerInvariants
echidna0
foundry2
medusa6

High-level overlap ​

  • Shared by all active fuzzers: 2
  • Fuzzers with no broken-invariant events: echidna
  • Exclusive to echidna: 0
  • Exclusive to foundry: 0
  • Exclusive to medusa: 4

Grouped invariants ​

Exclusive to echidna (0)

None.

Exclusive to foundry (0)

None.

Exclusive to medusa (4)
  • assert_canary
  • invariant_BI03
  • invariant_BI04
  • invariant_GV01
Shared by all active fuzzers (2)
  • CANARY
  • invariant_canary

Runner resource usage ​

  • Budget filter: 4.00h
  • Instances with metrics: 6
  • Total samples: 11436

Per-fuzzer medians (across instances) ​

FuzzerInstancesCPU active avg (%)CPU active peak (%)Memory used avg (GiB)Memory used peak (GiB)Memory used avg (%)Memory used peak (%)
echidna210.8326.131.291.534.224.99
foundry299.7999.971.582.155.177.00
medusa296.9698.481.282.104.176.85

Instance stats ​

InstanceFuzzerSamplesDuration (h)CPU active avg (%)CPU active peak (%)Memory avg (GiB)Memory peak (GiB)Memory avg (%)Memory peak (%)
i-00ffee8ef007b86ca-echidna-v2.3.1echidna60.0110.6824.991.281.564.195.08
i-0e21cc40c5f02c94b-echidna-v2.3.1echidna60.0110.9827.271.301.504.264.90
i-00ceb08dc83f03bc7-foundry-git-3a47949foundry28534.0099.7899.971.582.115.156.87
i-03eedfcae2de16371-foundry-git-3a47949foundry28544.0099.7999.971.592.185.187.13
i-05ff2d492c2056785-medusa-v1.4.1medusa28584.0097.1098.431.261.994.126.51
i-0c09688631484f2a2-medusa-v1.4.1medusa28594.0096.8198.531.292.204.227.19

Manifest ​

  • scfuzzbench_commit: 3e370308ae8b09ff40badacf12ef8cef1f1b4241
  • target_repo_url: https://github.com/Recon-Fuzz/liquity-V2-gov-scfuzzbench
  • target_commit: recon
  • benchmark_type: property
  • instance_type: c6a.4xlarge
  • instances_per_fuzzer: 2
  • timeout_hours: 4
  • aws_region: us-east-1
  • ubuntu_ami_id: ami-0071174ad8cbb9e17
  • foundry_version: v1.6.0-rc1
  • foundry_git_repo: https://github.com/aviggiano/foundry
  • foundry_git_ref: master
  • echidna_version: 2.3.1
  • medusa_version: 1.4.1
  • fuzzer_keys: echidna, foundry, medusa

Artifacts ​

Fully static. Generated in CI from S3 run artifacts.