Stellar Community Fund

By Soroban Assistant

DYET (Do you even test?)

SCF #14

$15.0K

Legacy v4.0 Award

Awarded

AI fuzzer that finds bugs and vulnerabilities in your Soroban smart contracts.

Products & Services

There have been a lot of bugs and vulnerabilities in smart contracts on other chains which led to significant losses. Having an automatic and easy way of testing or writing tests might give Soroban smart contracts an edge against the competition by minimizing losses in the ecosystem and community. We propose an AI fuzzer and test generation for Soroban smart contracts. It would be a model trained with reinforcement learning and its goal would be to cover every code block in the least amount of calls. Later, a detector and parser of the blockchain state would be needed to determine if the state is valid or not or if certain accounts received funds they weren't supposed to. We see many ways to explore this problem: aim for a model that covers most of the lines/blocks of code in the least possible number of calls, use the training process as fuzzing, and use user annotations and code parsers as an additional source of information for training and fuzzing. The most important information includes code branching and reading or writing to memory.

Update: We've created a demo of a chatbot that can answer questions about Soroban documentation, generate code/tests, and audit contracts.