Cowrie Research

fuzzland-primary-sources-2026-04-26

2 min read

Fuzzland primary sources snapshot (2026-04-26)

This project did not present a single canonical whitepaper during this pass. The primary-source surface was split across the company site, product pages, the ItyFuzz documentation portal, and public GitHub repositories.

Official site

  • Homepage: https://fuzz.land/
    • Positions Fuzzland as a smart-contract automated analysis and 24/7 onchain security company.
    • Publicly describes three product surfaces: Blaz+ Analysis, Blaz+ Alert, and Blaz+ Mitigation.
  • Analysis: https://fuzz.land/analysis
    • Describes “24/7 on-chain penetration testing” and says the platform uses AI, fuzzing, and formal verification to analyze contract vulnerabilities across thousands of transactions per second.
  • Alert: https://fuzz.land/alert
    • Describes customizable instant alerts spanning blockchain and infrastructure layers, including exploit and anomaly detection.
  • Mitigation: https://fuzz.land/mitigation
    • Describes proactive and reactive attack interventions, including mempool monitoring plus front-running and back-running countermeasures.

Documentation

  • ItyFuzz docs: https://docs.ityfuzz.rs/
    • Describes ItyFuzz as a state-of-the-art smart-contract fuzz-testing tool.
    • Says users can provide contract addresses or bytecode and have exploits generated automatically when vulnerabilities are found.
    • Notes integration into CI/CD pipelines and use of concolic execution plus fuzzing.
    • Links to research papers including the core algorithm paper (https://arxiv.org/abs/2306.17135) and an LLM-plus-fuzzing paper (https://scf.so/llm4fuzz.pdf).

GitHub

  • Org: https://github.com/fuzzland
    • Shows a public open-source footprint including ItyFuzz, Move-focused fuzzing work, OSWAR, and other security-related repos.
  • ItyFuzz repo: https://github.com/fuzzland/ityfuzz
    • Describes ItyFuzz as a “Blazing Fast Bytecode-Level Hybrid Fuzzer for Smart Contracts.”
    • Links directly to docs and research papers.
    • Documents support for EVM and MoveVM fuzzing, chain forking, exploit generation, reentrancy support, flashloan modeling, liquidation simulation, decompilation, and benchmark comparisons.

Notes

  • The most important trust signal here is the combination of a commercial security platform with a substantial open-source fuzzing and research footprint.
  • Because the company surface and the open-source ItyFuzz surface are related but not identical, future updates should continue separating what is clearly company-product positioning from what is directly demonstrated by public tooling.

Graph View