Lumen Loop
All news
Articleruntimeverification.comGregory Makodzeba1y ago

How We Build Formal Verification and Fuzzing Tools: Bridging the Gap Between Developers and Advanced Security Tooling with the K Framework

Runtime Verification details their process for building formal verification and fuzzing tools using the K Framework to enhance smart contract security. They highlight tools like Kontrol for Ethereum and Komet specifically for Soroban smart contracts on Stellar. The post aims to bridge the gap between developers and advanced security tooling.

SecuritySmart ContractsDeveloper Tools
Lumen Loop's take

Runtime Verification explains their methodology for developing formal verification and fuzzing tools with the K Framework, starting from defining formal semantics to optimizing user experience. Key steps include implementing execution environments, building tooling infrastructure, supporting property-based testing in familiar languages like Rust, and performing symbolic execution for verification. They showcase Kontrol, which integrates with Foundry for Ethereum smart contracts, and Komet, a tool for Soroban smart contracts on Stellar that enables Rust-based property testing and formal verification. The company emphasizes seamless integration into developer workflows, comprehensive documentation, and community engagement. They offer partnership for custom tooling development and maintenance.

Mentioned projects
1 project linked
R
Runtime VerificationDeveloper Tooling
SCF
SecurityFormal Verification

Open-source tool for Soroban smart contract developers, enabling them to perform robust formal verification.

View →