Skip to content

Run 1772424532 ​

Trial run

Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.

Charts ​

Bugs Over TimeTime To KFinal DistributionPlateau And Late ShareInvariant Overlap (UpSet)Coverage Over TimeCorpus Size Over TimeSeq/s Over TimeTx/s Over TimeGas/s Over TimeCPU Usage Over TimeMemory Usage Over Time

Report ​

Fuzzer Benchmark Report (from bug-count CSV) ​

  • Time budget: 24.00h

Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.

⚠️ Run health ​

The following fuzzer legs show signs of not having run for the full time budget. Their results below are not comparable to healthy legs.

  • ⚠️ foundry: last parsed activity at 2.40h of a 24.00h budget across 4 instance(s) — the leg likely terminated early. Inspect the instance logs.

Executive summary ​

This report is derived solely from cumulative bugs-found over time across repeated runs per fuzzer. It emphasizes robust, distribution-based metrics (median/IQR, success rates, time-to-k) and shape-based behavior (plateau time, late discovery share) instead of single-run time-to-first-bug.

Bugs found at fixed time budgets (median [IQR]) ​

FuzzerRuns1h4h8h24h
medusa410 [10,10]10 [10,12]12 [12,14]14 [13,16]
foundry46 [6,6]6 [6,6]6 [6,6]6 [6,6]
echidna44 [4,4]5 [5,5]5 [5,5]6 [6,6]

Overall metrics ​

FuzzerAUC (norm)Plateau timeLate discovery shareFinal medianFinal IQR
medusa0.68622.40h0.138142.50
foundry0.3330.10h0.00060.00
echidna0.27124.00h0.16760.50

Milestones: time-to-k and success rates ​

Fuzzertime-to-1 (p50)time-to-3 (p50)time-to-5 (p50)reach-1 ratereach-3 ratereach-5 rate
medusa0.10h0.10h0.10h100.0%100.0%100.0%
foundry0.00h0.00h0.00h100.0%100.0%100.0%
echidna0.10h0.10h2.50h100.0%100.0%100.0%

Throughput metrics (if supported by log format) ​

Values are run-level rates aggregated per fuzzer; n/a indicates the parser could not recover that metric from logs.

FuzzerRunsTx/s runsTx/s p50 [p25,p75]Gas/s runsGas/s p50 [p25,p75]
medusa441518.00 [1507.50,1565.50]4657537175.50 [631181310.25,681015083.00]
echidna442404.95 [2363.80,2441.56]419870811931.00 [11611309188.00,24668942771.25]

Progress metrics from logs (fuzzer-specific proxies) ​

Coverage/corpus values are parsed from each fuzzer's native progress output and are useful for trend context, not strict cross-fuzzer equivalence.

FuzzerRunsSeq/s runsSeq/s p50 [p25,p75]Coverage runsCoverage p50 [p25,p75]Corpus runsCorpus p50 [p25,p75]
medusa4415.00 [14.75,15.25]412549.50 [12485.00,12572.25]4614.50 [607.50,618.75]
foundry40n/a44981.00 [4899.50,5104.75]47592.00 [6881.00,8458.25]
echidna40n/a4139467.50 [139129.25,140184.00]4570.00 [568.75,575.25]

Statistical comparison (Mann-Whitney U test) ​

Pairwise Mann-Whitney U tests on end-of-budget bug counts (two-sided). Bonferroni correction applied for 3 comparison(s). Significance level: alpha = 0.05.

Warnings:

  • One or more fuzzers have fewer than 5 runs. Statistical power may be limited.
Fuzzer AFuzzer BMedian AMedian BU statisticp-valuep (corrected)Significant
medusafoundry14.5616.00.02110.0632no
medusaechidna14.5616.00.02940.0882no
foundryechidna668.01.00001.0000no

No pairwise comparison reached significance after Bonferroni correction.

Note: The Mann-Whitney U test assesses whether one fuzzer tends to find more bugs than another across runs. It does not measure effect size or practical importance. Small sample sizes (fewer than 5 runs) reduce statistical power.

Shape-based interpretation (rules of thumb) ​

  • Fast-start / early-plateau: high early checkpoint median + early plateau time + low late discovery share.
  • Steady: moderate AUC, later plateau, consistent improvements across checkpoints, moderate variance.
  • Slow-burn / late-surge: low early checkpoints but high late discovery share and later plateau time; often higher final median.

Limitations ​

  • Core metrics in this section are count-based; use broken_invariants.md / broken_invariants.csv for invariant identities.
  • Severity, exploitability, and root-cause uniqueness cannot be measured directly without richer per-bug metadata.
  • Harness design still affects results; mitigate by keeping harness identical across fuzzers and reporting many runs.

Broken invariants ​

  • Budget filter: 24.00h
  • Events considered: 106 / 106
  • Unique invariants: 20

Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.

Per-fuzzer totals ​

FuzzerInvariants
echidna8
foundry6
medusa19

High-level overlap ​

  • Shared by all active fuzzers: 2
  • Exclusive to echidna: 1
  • Exclusive to foundry: 0
  • Exclusive to medusa: 8

Grouped invariants ​

Exclusive to echidna (1)
  • doomsday_maxWithdrawResetsAfterFullWithdrawal
Exclusive to foundry (0)

None.

Exclusive to medusa (8)
  • doomsday_maxRedeemResetsAfterFullRedemption
  • global_comparePreviewMintAndConvertToAssets
  • global_erc7540_7_redeem
  • global_erc7540_7_withdraw
  • global_previewEquivalenceFromAssets
  • invariant_accumulatorCostBasisIncrease
  • invariant_fulfillOnlyBurnsRequestedAmount
  • invariant_sumOfClaimable
Shared by all active fuzzers (2)
  • assert_canary
  • invariant_canary

Top shared subsets (top 2 by size):

echidna, medusa (5)
  • doomsday_depositWithdrawSymmetrical
  • doomsday_fulfillDoesntOverRedeemMultipleActors
  • doomsday_mintRedeemSymmetrical
  • global_previewEquivalenceFromShares
  • invariant_accumulatorSharesDecreaseOnFulfill_exact
foundry, medusa (4)
  • invariant_erc7540_1
  • invariant_erc7540_2
  • invariant_erc7540_3
  • invariant_maxRedeemMaxWithdrawSymmetry

Runner resource usage ​

  • Budget filter: 24.00h
  • Instances with metrics: 12
  • Total samples: 205681

Per-fuzzer medians (across instances) ​

FuzzerInstancesCPU active avg (%)CPU active peak (%)Memory used avg (GiB)Memory used peak (GiB)Memory used avg (%)Memory used peak (%)
echidna484.4789.066.339.5420.6631.12
foundry499.85100.002.913.079.4810.01
medusa499.5399.953.174.5510.3314.86

Instance stats ​

InstanceFuzzerSamplesDuration (h)CPU active avg (%)CPU active peak (%)Memory avg (GiB)Memory peak (GiB)Memory avg (%)Memory peak (%)
i-0215aa8a6667588e1-echidna-v2.3.1echidna1717024.0084.3788.016.249.5620.3731.21
i-040b2c2fc7f1ac944-echidna-v2.3.1echidna1716524.0084.8091.486.309.4820.5730.93
i-0835eac34bc92ab49-echidna-v2.3.1echidna1716724.0084.5889.466.369.5120.7531.03
i-0dcea9a83a1d423a3-echidna-v2.3.1echidna1716924.0083.9788.666.399.8120.8432.03
i-011df9ea46878c7df-foundry-git-3a47949foundry1712624.0099.85100.002.893.029.439.86
i-017c4466963a74d9d-foundry-git-3a47949foundry1712624.0099.85100.002.923.119.5310.15
i-07ef68c3757fa510d-foundry-git-3a47949foundry1712624.0099.85100.003.263.3810.6311.04
i-08457969b0199e99a-foundry-git-3a47949foundry1712624.0099.85100.002.762.859.009.31
i-01cebb3a6740d6fd6-medusa-v1.4.1medusa1712724.0099.5199.953.224.8210.5015.72
i-067e419e16d5628f4-medusa-v1.4.1medusa1712624.0099.5399.943.114.4710.1614.59
i-09bac5aa20f2c936d-medusa-v1.4.1medusa1712724.0099.5799.973.304.6310.7515.12
i-0e3f1085a9531d94a-medusa-v1.4.1medusa1712624.0099.5399.952.824.029.2013.12

Manifest ​

  • scfuzzbench_commit: 7556186df837feca06a46df18ec7e41fd0ee3273
  • target_repo_url: https://github.com/Recon-Fuzz/superform-v2-periphery-scfuzzbench
  • target_commit: dev-recon
  • benchmark_type: property
  • instance_type: c6a.4xlarge
  • instances_per_fuzzer: 4
  • timeout_hours: 24
  • aws_region: us-east-1
  • ubuntu_ami_id: ami-0071174ad8cbb9e17
  • foundry_version: v1.6.0-rc1
  • foundry_git_repo: https://github.com/aviggiano/foundry
  • foundry_git_ref: master
  • echidna_version: 2.3.1
  • medusa_version: 1.4.1
  • fuzzer_keys: echidna, foundry, medusa

Artifacts ​

Fully static. Generated in CI from S3 run artifacts.