karma
@0xkarmacoma
recovering skeptic // research engineer @a16zcrypto
Here are the main points from my Solidity Summit talk: Symbolic execution is a generic technique that can be used to explore paths in your program Symbolic execution treats your program like a dungeon in an RPG: it explores everything until it finds and defeats the boss. The…
you know how devs feel when they watch speedrunners do crazy stuff with their games? this is how I feel when Ihor uses halmos
Just finished a detailed in-depth writeup on catching complex vulnerabilities (including reentrancy and DoS) using halmos+halmos-helpers-lib symbolic testing that are tied to a malicious external contract on a real-world example. Details in🧵
hot take: you can’t just guess the spec from the code which I guess is an argument for the maker naming scheme
Having been on the receiving end of a bug bounty program and audits, this is easy: Severity: High - Permanent freezing of funds. ETH sent to the contract via self-destruct calls cannot be withdrawn from the contract and is cannot be recovered.
I have nightmares about this. It’s a no pants at school sort of situation
said i.e when i meant e.g. and they laughed me out of the coffee shop
not a USB stick, we should etch the weights on a gold-plated disc maybe even send it in space
MIT Technology Review wrote about my dystopian backup plan USB stick
Absolutely huge upgrades to Halmos. Incredible improvements dev ex and vulnerability finding capabilities. Really looking forward to getting my hands dirty with this one. Big props to @0xkarmacoma!
halmos v0.3.0 release highlights! (quick reminder: halmos is a symbolic testing tool for EVM bytecode which interfaces nicely with foundry projects and supports multiple SMT solvers) 1. we (finally) added support for stateful invariant testing
we got the fancy silverware (bulletpoints) out for the occasion
Karma is being modest — huge update for Halmos! ∎ Stateful invariant testing (very powerful) ∎ Flamegraphs (see what Halmos is exploring) ∎ 30x faster interpreter (!!!) ∎ Easily select many solvers ∎ Coverage reports ∎ Solx support ∎ more cheatcodes ∎ ... and more