DepFuzz - Efficient Smart Contract Fuzzing with Function Dependence Guidance
ACM SIGPLAN via YouTube
Overview
Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Learn about a novel hybrid fuzzing approach for smart contract vulnerability detection through this 12-minute conference presentation from OOPSLA 2025. Discover how DepFuzz combines symbolic execution with feedback-based fuzzing to overcome the challenges of smart contract statefulness, where vulnerabilities only manifest in specific contract states. Explore the innovative use of distance-based function dependencies to guide the generation of meaningful transaction sequences, reducing the execution of redundant or meaningless sequences that plague traditional fuzzers. Examine the experimental results demonstrating DepFuzz's superior performance on 286 benchmark smart contracts and 500 real-world contracts, achieving higher instruction coverage rates and uncovering more vulnerabilities in less time compared to state-of-the-art approaches. Gain insights into the technical implementation that efficiently contributes to both vulnerability exposure and code coverage improvement in Ethereum smart contract security testing.
Syllabus
[OOPSLA'25] DepFuzz: Efficient Smart Contract Fuzzing with Function Dependence Guidance
Taught by
ACM SIGPLAN