HACKING PROJECT · crypto · Advanced
Smart-Contract Auditor & Fuzzer
Dynamically discover exploitable smart-contract vulnerabilities by fuzzing and symbolically executing contracts against declared security invariants.
Static analysis alone misses logic and state-dependent vulnerabilities that only appear during execution across many input sequences, and manual audits are slow and non-repeatable. DeFi protocols routinely lose funds to edge cases — price-manipulation, invariant violations, and complex reentrancy — that surface only under adversarial execution. There is a critical gap between reading a contract and dynamically proving its invariants hold under fuzzed, symbolic, and adversarial conditions.
**What you'll build**
Build a dynamic auditing pipeline that combines property-based and coverage-guided fuzzing (Echidna/Foundry invariant testing) with symbolic execution (Mythril/Manticore) to explore contract state space and violate developer-declared invariants. The tool deploys contracts to a local EVM, generates adversarial transaction sequences, checks invariants (no funds drained, supply conserved), and produces reproducible exploit traces with severity and remediation. Wrap results into an audit report combining static + dynamic findings.
**Objective** — Dynamically discover exploitable smart-contract vulnerabilities by fuzzing and symbolically executing contracts against declared security invariants.
**Expected outcome** — An automated auditor-fuzzer that runs invariant/property tests plus symbolic execution and outputs reproducible exploit traces and a consolidated audit report.
**Difficulty** — Expert — combines fuzzing harness design, symbolic execution, EVM internals, and invariant specification for realistic DeFi exploits.
**Primary category** — Offensive Security / Dynamic Analysis; Secondary = Smart-Contract Auditing, Fuzzing, AppSec
**Security domains** — Primary = Red Team; Secondary = Security Research, DevSecOps, AppSec, Purple Team
**Technical focus** — Coverage-guided fuzzing, property-based/invariant testing, symbolic execution, EVM bytecode analysis, exploit trace generation, reentrancy/price-manipulation modeling, DAST for smart contracts
**Core technologies** — Languages: Solidity, Python, Rust; Frameworks/Libraries: Foundry (forge/invariant), Echidna, Manticore, Mythril, Halmos; Security Tools: Slither (combined static), Anvil/Ganache local EVM, Tenderly; Cloud/Infra: Docker, CI runners; AI/Data: LLM-assisted invariant generation (optional); Databases: SQLite for corpus/findings
**Where it's valued** — DeFi protocols, blockchain audit firms, crypto exchanges, Web3 security startups, bug-bounty ecosystems
**Careers it builds toward** — Smart-Contract Auditor, Blockchain Security Researcher, Offensive Security Engineer, Bug-Bounty Hunter, Protocol Security Engineer
**Framework alignment**
• MITRE ATT&CK: Enterprise analogs — Exploit Public-Facing Application (T1190), Exploitation for Client Execution (T1203); core mapping is SWC Registry + DeFi attack taxonomy (reentrancy SWC-107, oracle manipulation).
• NIST CSF 2.0: Identify (vulnerability discovery), Protect (pre-deployment hardening), Detect
• OWASP: OWASP Smart Contract Top 10 (2025), OWASP SCSVS, DASTG concepts
• CIS Controls v8: 16 Application Software Security, 18 Penetration Testing
**Innovation** — Innovative Product — integrating fuzzing, symbolic execution, and auto-generated invariants into a unified reproducible-exploit auditor has strong research and commercial value. Scores: Innovation 8/10, Startup 8/10, Enterprise-Readiness 7/10, Patent = Possible.