Skip to content

Run 1783621460 ​

Trial run

Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.

Charts ​

Bugs Over TimeTime To KFinal DistributionPlateau And Late ShareInvariant Overlap (UpSet)Coverage Over TimeCorpus Size Over TimeSeq/s Over TimeTx/s Over TimeGas/s Over TimeCPU Usage Over TimeMemory Usage Over Time

Report ​

Fuzzer Benchmark Report (from bug-count CSV) ​

  • Time budget: 2.00h

Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.

Executive summary ​

This report is derived solely from cumulative bugs-found over time across repeated runs per fuzzer. It emphasizes robust, distribution-based metrics (median/IQR, success rates, time-to-k) and shape-based behavior (plateau time, late discovery share) instead of single-run time-to-first-bug.

Bugs found at fixed time budgets (median [IQR]) ​

FuzzerRuns1h
recon-fuzzer45 [5,5]
echidna45 [5,5]
medusa45 [5,5]
foundry14 [4,4]

Overall metrics ​

FuzzerAUC (norm)Plateau timeLate discovery shareFinal medianFinal IQR
recon-fuzzer0.9600.10h0.00050.00
echidna0.9500.10h0.00050.00
medusa0.9500.10h0.00050.00
foundry0.7800.10h0.00040.00

Milestones: time-to-k and success rates ​

Fuzzertime-to-1 (p50)time-to-3 (p50)time-to-5 (p50)reach-1 ratereach-3 ratereach-5 rate
recon-fuzzer0.00h0.10h0.10h100.0%100.0%100.0%
echidna0.10h0.10h0.10h100.0%100.0%100.0%
medusa0.10h0.10h0.10h100.0%100.0%100.0%
foundry0.00h0.10hinf100.0%100.0%0.0%

Throughput metrics (if supported by log format) ​

Values are run-level rates aggregated per fuzzer; n/a indicates the parser could not recover that metric from logs.

FuzzerRunsTx/s runsTx/s p50 [p25,p75]Gas/s runsGas/s p50 [p25,p75]
recon-fuzzer442434.49 [2403.45,2485.92]4133871764.50 [115464691.50,161021368.25]
echidna441907.87 [1786.83,2092.65]43531155032.50 [2601916128.00,4102010975.50]
medusa446065.00 [5888.25,6327.75]412024059964.00 [11618550872.25,12554721852.25]

Progress metrics from logs (fuzzer-specific proxies) ​

Coverage/corpus values are parsed from each fuzzer's native progress output and are useful for trend context, not strict cross-fuzzer equivalence.

FuzzerRunsSeq/s runsSeq/s p50 [p25,p75]Coverage runsCoverage p50 [p25,p75]Corpus runsCorpus p50 [p25,p75]
recon-fuzzer40n/a424226.50 [24210.00,24231.50]435.50 [34.75,36.00]
echidna40n/a423413.00 [23383.75,23441.75]446.00 [45.50,46.00]
medusa4460.00 [58.00,63.00]41954.00 [1953.50,1954.00]465.00 [64.00,66.25]

Statistical comparison (Mann-Whitney U test) ​

Pairwise Mann-Whitney U tests on end-of-budget bug counts (two-sided). Bonferroni correction applied for 3 comparison(s). Significance level: alpha = 0.05.

Warnings:

  • One or more fuzzers have fewer than 5 runs. Statistical power may be limited.
  • Skipping recon-fuzzer vs foundry: fewer than 2 runs.
  • Skipping echidna vs foundry: fewer than 2 runs.
  • Skipping medusa vs foundry: fewer than 2 runs.
Fuzzer AFuzzer BMedian AMedian BU statisticp-valuep (corrected)Significant
recon-fuzzerechidna558.01.00001.0000no
recon-fuzzermedusa558.01.00001.0000no
echidnamedusa558.01.00001.0000no

No pairwise comparison reached significance after Bonferroni correction.

Note: The Mann-Whitney U test assesses whether one fuzzer tends to find more bugs than another across runs. It does not measure effect size or practical importance. Small sample sizes (fewer than 5 runs) reduce statistical power.

Shape-based interpretation (rules of thumb) ​

  • Fast-start / early-plateau: high early checkpoint median + early plateau time + low late discovery share.
  • Steady: moderate AUC, later plateau, consistent improvements across checkpoints, moderate variance.
  • Slow-burn / late-surge: low early checkpoints but high late discovery share and later plateau time; often higher final median.

Limitations ​

  • Core metrics in this section are count-based; use broken_invariants.md / broken_invariants.csv for invariant identities.
  • Severity, exploitability, and root-cause uniqueness cannot be measured directly without richer per-bug metadata.
  • Harness design still affects results; mitigate by keeping harness identical across fuzzers and reporting many runs.

Broken invariants ​

  • Budget filter: 2.00h
  • Events considered: 64 / 64
  • Unique invariants: 5

Warning — trial run. This benchmark was executed with fewer than 10 instances per fuzzer and/or a time budget shorter than 24h. Results from trial runs are meant for debugging purposes and are not valid for extracting conclusions across different fuzzers.

Per-fuzzer totals ​

FuzzerInvariants
echidna5
foundry4
medusa5
recon-fuzzer5

High-level overlap ​

  • Shared by all active fuzzers: 4
  • Exclusive to echidna: 0
  • Exclusive to foundry: 0
  • Exclusive to medusa: 0
  • Exclusive to recon-fuzzer: 0

Grouped invariants ​

Exclusive to echidna (0)

None.

Exclusive to foundry (0)

None.

Exclusive to medusa (0)

None.

Exclusive to recon-fuzzer (0)

None.

Shared by all active fuzzers (4)
  • invariant_BI03
  • invariant_BI04
  • invariant_GV01
  • invariant_canary

Top shared subsets (top 1 by size):

echidna, medusa, recon-fuzzer (1)
  • assert_canary

Runner resource usage ​

  • Budget filter: 2.00h
  • Instances with metrics: 13
  • Total samples: 17708

Per-fuzzer medians (across instances) ​

FuzzerInstancesCPU active avg (%)CPU active peak (%)Memory used avg (GiB)Memory used peak (GiB)Memory used avg (%)Memory used peak (%)
echidna497.3998.7918.9219.6061.7563.97
foundry16.6770.1918.7430.5961.1699.81
medusa497.6399.031.321.924.306.26
recon-fuzzer496.94100.001.661.865.416.07

Instance stats ​

InstanceFuzzerSamplesDuration (h)CPU active avg (%)CPU active peak (%)Memory avg (GiB)Memory peak (GiB)Memory avg (%)Memory peak (%)
i-01ac853681e8726eb-echidna-v2.3.1echidna14232.0097.4398.7818.8919.4361.6363.40
i-064b6ed91be77b046-echidna-v2.3.1echidna14242.0097.3198.8218.9119.5261.7163.69
i-0c1b3b166eb75ae41-echidna-v2.3.1echidna14242.0097.3698.7819.0019.8062.0164.62
i-0e7d30140a7928d2c-echidna-v2.3.1echidna14232.0097.4298.8118.9419.6961.7964.25
i-0fa5fb41fb7916d51-foundry-git-907ba08foundry5850.886.6770.1918.7430.5961.1699.81
i-00ecc1cd8e954e889-medusa-v1.4.1medusa14302.0097.6899.051.311.854.276.05
i-01dbbcb997ec6f0a8-medusa-v1.4.1medusa14302.0097.8999.321.471.924.806.27
i-05cc86dc44b999afc-medusa-v1.4.1medusa14302.0097.5498.861.331.924.336.26
i-083ba74c6e8774966-medusa-v1.4.1medusa14302.0097.5899.001.301.964.256.39
i-00670f509d8957b03-recon-v0.4.6recon-fuzzer14272.0097.33100.001.661.935.416.29
i-0613309e4a8df8f00-recon-v0.4.6recon-fuzzer14272.0097.03100.001.651.865.406.07
i-0ce8af9a05da00fdf-recon-v0.4.6recon-fuzzer14272.0096.78100.001.661.865.416.07
i-0deb8c7fbfe4c6d30-recon-v0.4.6recon-fuzzer14282.0096.86100.001.671.855.446.04

Manifest ​

  • scfuzzbench_commit: 98208c438a5cde62d5a150bf709bb6c3c499dd79
  • target_repo_url: https://github.com/scfuzzbench/liquity-V2-gov-scfuzzbench
  • target_commit: 5610870e7e91fe6e29f8cfb0c0ae316fe9784e10
  • benchmark_type: property
  • instance_type: c6a.4xlarge
  • instances_per_fuzzer: 4
  • timeout_hours: 2
  • aws_region: us-east-1
  • ubuntu_ami_id: ami-0a02a779008fa3b99
  • foundry_version: v1.7.1
  • foundry_git_repo: https://github.com/foundry-rs/foundry
  • foundry_git_ref: 907ba0817e8feb2404da9d506a12b69834cfb393
  • echidna_version: 2.3.1
  • medusa_version: 1.4.1
  • recon_version: 0.4.6
  • fuzzer_keys: echidna, foundry, medusa, recon-fuzzer

Artifacts ​

Fully static. Generated in CI from S3 run artifacts.