2026-05-08 –, Grégr Stage
This talk reviews how smart contract fuzzers in Ethereum evolved from crude prototypes to fully fledged tools used in audits. We are highlighting different approaches, either from the industry and academia that were significant for improving fuzzing support, starting from the initial prototypes to the state-of-the-art AI-integrated future.
I want to present a short talk on what worked and what doesn't in the fuzzing of EVM smart contracts, presenting different approaches, from obscure academia prototypes that were abandoned (e.g. ContractFuzzer, Vandal, EF/CF) to the industry ready fuzzers and tools we have today, including some of the new trends like symbolic execution, manually guided fuzzing and AI integration. The main goal of the talk is to start the discussion of what kind of features the community is looking for, what are the main friction points and expectations from smart contract developers to actually use the tools.
Gustavo Grieco is a freelance blockchain security engineer who loves to build fuzzing tool. He holds a PhD in Computer Security and spent nearly eight years at Trail of Bits, where he worked on a wide range of security projects, from auditing complex protocols to building smart contract fuzzers like Echidna. He was recently elected as a Technical Security Expert for the Arbitrum DAO audit program.