Run 1783547385
- Date (UTC):
2026-07-08 21:49:45Z - Benchmark:
8d71215da7beebcf6b1e03071712b107 - Timeout:
2h - Target:
scfuzzbench/aave-v4-scfuzzbench@main - Benchmark type:
property - Instances:
4×c6a.4xlargeper fuzzer - Harness:
scfuzzbench/scfuzzbench@2e9f48cbc4
Trial run
Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.
Charts
Report
Fuzzer Benchmark Report (from bug-count CSV)
- Time budget: 2.00h
Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.
⚠️ Run health
The following fuzzer legs show signs of not having run for the full time budget. Their results below are not comparable to healthy legs.
- ⚠️ echidna: no bugs and no runtime activity samples were parsed from any instance — the fuzzer most likely never executed (startup/compile failure). Inspect the instance bootstrap logs before drawing conclusions from this leg.
- ⚠️ medusa: no bugs and no runtime activity samples were parsed from any instance — the fuzzer most likely never executed (startup/compile failure). Inspect the instance bootstrap logs before drawing conclusions from this leg.
- ⚠️ recon-fuzzer: no bugs and no runtime activity samples were parsed from any instance — the fuzzer most likely never executed (startup/compile failure). Inspect the instance bootstrap logs before drawing conclusions from this leg.
Executive summary
This report is derived solely from cumulative bugs-found over time across repeated runs per fuzzer. It emphasizes robust, distribution-based metrics (median/IQR, success rates, time-to-k) and shape-based behavior (plateau time, late discovery share) instead of single-run time-to-first-bug.
Bugs found at fixed time budgets (median [IQR])
| Fuzzer | Runs | 1h |
|---|---|---|
| foundry | 4 | 5 [5,5] |
| echidna | 4 | 0 [0,0] |
| medusa | 4 | 0 [0,0] |
| recon-fuzzer | 4 | 0 [0,0] |
Overall metrics
| Fuzzer | AUC (norm) | Plateau time | Late discovery share | Final median | Final IQR |
|---|---|---|---|---|---|
| foundry | 0.955 | 0.20h | 0.000 | 5 | 0.00 |
| echidna | 0.000 | 0.00h | 0.000 | 0 | 0.00 |
| medusa | 0.000 | 0.00h | 0.000 | 0 | 0.00 |
| recon-fuzzer | 0.000 | 0.00h | 0.000 | 0 | 0.00 |
Milestones: time-to-k and success rates
| Fuzzer | time-to-1 (p50) | time-to-3 (p50) | time-to-5 (p50) | reach-1 rate | reach-3 rate | reach-5 rate |
|---|---|---|---|---|---|---|
| foundry | 0.00h | 0.15h | 0.15h | 100.0% | 100.0% | 100.0% |
| echidna | inf | inf | inf | 0.0% | 0.0% | 0.0% |
| medusa | inf | inf | inf | 0.0% | 0.0% | 0.0% |
| recon-fuzzer | inf | inf | inf | 0.0% | 0.0% | 0.0% |
Statistical comparison (Mann-Whitney U test)
Pairwise Mann-Whitney U tests on end-of-budget bug counts (two-sided). Bonferroni correction applied for 6 comparison(s). Significance level: alpha = 0.05.
Warnings:
- One or more fuzzers have fewer than 5 runs. Statistical power may be limited.
| Fuzzer A | Fuzzer B | Median A | Median B | U statistic | p-value | p (corrected) | Significant |
|---|---|---|---|---|---|---|---|
| foundry | echidna | 5 | 0 | 16.0 | 0.0131 | 0.0787 | no |
| foundry | medusa | 5 | 0 | 16.0 | 0.0131 | 0.0787 | no |
| foundry | recon-fuzzer | 5 | 0 | 16.0 | 0.0131 | 0.0787 | no |
| echidna | medusa | 0 | 0 | 8.0 | 1.0000 | 1.0000 | no |
| echidna | recon-fuzzer | 0 | 0 | 8.0 | 1.0000 | 1.0000 | no |
| medusa | recon-fuzzer | 0 | 0 | 8.0 | 1.0000 | 1.0000 | no |
No pairwise comparison reached significance after Bonferroni correction.
Note: The Mann-Whitney U test assesses whether one fuzzer tends to find more bugs than another across runs. It does not measure effect size or practical importance. Small sample sizes (fewer than 5 runs) reduce statistical power.
Shape-based interpretation (rules of thumb)
- Fast-start / early-plateau: high early checkpoint median + early plateau time + low late discovery share.
- Steady: moderate AUC, later plateau, consistent improvements across checkpoints, moderate variance.
- Slow-burn / late-surge: low early checkpoints but high late discovery share and later plateau time; often higher final median.
Limitations
- Core metrics in this section are count-based; use
broken_invariants.md/broken_invariants.csvfor invariant identities. - Severity, exploitability, and root-cause uniqueness cannot be measured directly without richer per-bug metadata.
- Harness design still affects results; mitigate by keeping harness identical across fuzzers and reporting many runs.
Broken invariants
- Budget filter: 2.00h
- Events considered: 20 / 20
- Unique invariants: 5
Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.
Per-fuzzer totals
| Fuzzer | Invariants |
|---|---|
| echidna | 0 |
| foundry | 5 |
| medusa | 0 |
| recon-fuzzer | 0 |
High-level overlap
- Shared by all active fuzzers: 5
- Fuzzers with no broken-invariant events:
echidna, medusa, recon-fuzzer - Exclusive to
echidna: 0 - Exclusive to
foundry: 5 - Exclusive to
medusa: 0 - Exclusive to
recon-fuzzer: 0
Grouped invariants
Exclusive to echidna (0)
None.
Exclusive to foundry (5)
assert_canaryiHub_mintFeeSharesinvariant_canaryinvariant_shouldNotBecomeLiquidatableinvariant_totalBorrowedLessThanSupplied_v0
Exclusive to medusa (0)
None.
Exclusive to recon-fuzzer (0)
None.
Runner resource usage
- Budget filter: 2.00h
- Instances with metrics: 16
- Total samples: 6170
Per-fuzzer medians (across instances)
| Fuzzer | Instances | CPU active avg (%) | CPU active peak (%) | Memory used avg (GiB) | Memory used peak (GiB) | Memory used avg (%) | Memory used peak (%) |
|---|---|---|---|---|---|---|---|
| echidna | 4 | 6.79 | 19.09 | 2.88 | 3.80 | 9.39 | 12.40 |
| foundry | 4 | 6.28 | 21.59 | 1.12 | 3.75 | 3.64 | 12.22 |
| medusa | 4 | 6.57 | 14.09 | 2.85 | 3.75 | 9.29 | 12.23 |
| recon-fuzzer | 4 | 6.57 | 18.18 | 3.06 | 4.28 | 9.99 | 13.95 |
Instance stats
| Instance | Fuzzer | Samples | Duration (h) | CPU active avg (%) | CPU active peak (%) | Memory avg (GiB) | Memory peak (GiB) | Memory avg (%) | Memory peak (%) |
|---|---|---|---|---|---|---|---|---|---|
| i-01a2b49ea135d9781-echidna-v2.3.1 | echidna | 27 | 0.04 | 7.00 | 25.00 | 2.86 | 3.73 | 9.34 | 12.16 |
| i-046dd25ebb8b58729-echidna-v2.3.1 | echidna | 27 | 0.04 | 6.75 | 18.18 | 2.88 | 3.77 | 9.40 | 12.31 |
| i-06a9512441b898ecf-echidna-v2.3.1 | echidna | 27 | 0.04 | 6.83 | 20.00 | 2.89 | 3.85 | 9.45 | 12.55 |
| i-0b8e4ab76d1633a43-echidna-v2.3.1 | echidna | 27 | 0.04 | 6.65 | 15.38 | 2.88 | 3.83 | 9.39 | 12.49 |
| i-0206e7dc37a3a26cd-foundry-git-907ba08 | foundry | 1436 | 2.00 | 6.28 | 18.18 | 1.12 | 3.74 | 3.65 | 12.21 |
| i-077415509f44e7130-foundry-git-907ba08 | foundry | 1436 | 2.00 | 6.29 | 25.00 | 1.11 | 3.73 | 3.64 | 12.16 |
| i-09c74df6c33243dbd-foundry-git-907ba08 | foundry | 1436 | 2.00 | 6.29 | 25.00 | 1.11 | 3.75 | 3.63 | 12.24 |
| i-0d76f9f6ede6b790a-foundry-git-907ba08 | foundry | 1436 | 2.00 | 6.28 | 18.18 | 1.13 | 3.83 | 3.69 | 12.51 |
| i-0218d982d823713e0-medusa-v1.4.1 | medusa | 27 | 0.04 | 7.00 | 25.00 | 2.86 | 3.75 | 9.32 | 12.23 |
| i-081b2261f5b7bf0da-medusa-v1.4.1 | medusa | 27 | 0.04 | 6.45 | 10.00 | 2.92 | 3.75 | 9.54 | 12.24 |
| i-0d30109a36f4d04f7-medusa-v1.4.1 | medusa | 28 | 0.04 | 6.69 | 18.18 | 2.78 | 3.73 | 9.07 | 12.16 |
| i-0fcf309235caee4ca-medusa-v1.4.1 | medusa | 28 | 0.04 | 6.40 | 10.00 | 2.83 | 3.77 | 9.25 | 12.29 |
| i-01fafb6be55ccba76-recon-v0.4.6 | recon-fuzzer | 52 | 0.07 | 6.39 | 10.00 | 3.03 | 4.24 | 9.88 | 13.85 |
| i-03dc1ee04759aa98f-recon-v0.4.6 | recon-fuzzer | 52 | 0.07 | 6.56 | 18.18 | 3.12 | 4.33 | 10.20 | 14.13 |
| i-0ad22d37b32a316b8-recon-v0.4.6 | recon-fuzzer | 52 | 0.07 | 6.57 | 18.18 | 3.03 | 4.23 | 9.90 | 13.80 |
| i-0ca391c18396ae59f-recon-v0.4.6 | recon-fuzzer | 52 | 0.07 | 6.70 | 25.00 | 3.09 | 4.31 | 10.08 | 14.06 |
Manifest
- scfuzzbench_commit:
2e9f48cbc48e20df3d7885010177e4a4b1c013a0 - target_repo_url: https://github.com/scfuzzbench/aave-v4-scfuzzbench
- target_commit:
main - benchmark_type:
property - instance_type:
c6a.4xlarge - instances_per_fuzzer:
4 - timeout_hours:
2 - aws_region:
us-east-1 - ubuntu_ami_id:
ami-0a02a779008fa3b99 - foundry_version:
v1.7.1 - foundry_git_repo:
https://github.com/foundry-rs/foundry - foundry_git_ref:
907ba0817e8feb2404da9d506a12b69834cfb393 - echidna_version:
2.3.1 - medusa_version:
1.4.1 - recon_version:
0.4.6 - fuzzer_keys:
echidna, foundry, medusa, recon-fuzzer
Artifacts
Manifest (index): https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/runs/1783547385/8d71215da7beebcf6b1e03071712b107/manifest.json
Report prefix: https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/
Broken invariants (Markdown): https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/broken_invariants.md
Broken invariants (CSV): https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/broken_invariants.csv
Throughput summary (CSV): https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/throughput_summary.csv
Progress metrics summary (CSV): https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/progress_metrics_summary.csv
Runner resource usage (Markdown): https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/runner_resource_usage.md
Runner resource summary (CSV): https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/runner_resource_summary.csv
Runner resource timeseries (CSV): https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/runner_resource_timeseries.csv
Analysis bundle: https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/bundles/analysis.zip
Corpus bundle: https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/analysis/8d71215da7beebcf6b1e03071712b107/1783547385/bundles/corpus.zip
Raw logs prefix: https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/logs/1783547385/8d71215da7beebcf6b1e03071712b107/
Raw corpus prefix: https://scfuzzbench-logs-185f44d6.s3.us-east-1.amazonaws.com/corpus/1783547385/8d71215da7beebcf6b1e03071712b107/