Evidence · DiggingBeagle record
EchoFuzz real-world vulnerability disclosure dataset
Researcher-maintained disclosure artifact listing 146 real-world on-chain contract projects and 19 project/address entries totaling 37 reported findings. It states that most teams could not be contacted directly and that CVE applications are in progress; it should not be treated as independent confirmation of 37 production zero-days.
- Source role
- research artifact
Evidence record
Researcher-maintained disclosure artifact listing 146 real-world on-chain contract projects and 19 project/address entries totaling 37 reported findings. It states that most teams could not be contacted directly and that CVE applications are in progress; it should not be treated as independent confirmation of 37 production zero-days.
Claim-level citations (4)
- supportsEchoFuzz used LLM-guided fuzzing to reach deeper smart-contract states: The EchoFuzz authors report 37 previously unknown vulnerabilities across 19 projects in the real-world dataset; the public researcher repository enumerates 19 project/address entries totaling 37 reported vulnerability instances.
README section 'Real-World Vulnerability', project/address/vulnerability table
- supportsEchoFuzz used LLM-guided fuzzing to reach deeper smart-contract states: The researchers' public vulnerability repository states that most affected contract teams could not be directly contacted and that CVE applications are in progress. The checked public evidence therefore does not independently confirm all 37 findings as production zero-days.
README section 'Real-World Vulnerability', paragraph immediately before the project table
- supportsEchoFuzz used LLM-guided fuzzing to reach deeper smart-contract states: Section 5.1.2 describes D3 as 146 large and complex contract projects manually scraped from Etherscan, and the disclosure repository also says 146; however, Table 1 of the same paper labels D3 as 145, creating a one-project internal count discrepancy.
README section 'Real-World Vulnerability' states 146 real-world on-chain contract projects
- supportsEchoFuzz used LLM-guided fuzzing to reach deeper smart-contract states: The 37 researcher-listed findings break down to 15 integer over/under-flow, 8 gasless, 7 reentrancy, 3 timestamp dependency, 2 unexpected Ether/Ether frozen, 1 dangerous delegatecall and 1 unchecked-call finding; no block-number-dependency finding appears in the listed 19 projects.
README 'Real-World Vulnerability' table and oracle legend; counts derived directly from the 19 listed project/address rows