Security fuzzing for Solana programs
We break it so they can't.
Security tools for Solana either need you to write the attacks yourself, or hand you a long list of possible bugs that are mostly false alarms. Fuzzy attacks your program in a local copy of Solana and reports only what it actually broke, with the transaction to prove it.
How a run works
It learns the program
From the IDL, Fuzzy builds accounts and calls every instruction the way an honest user would, so it knows which paths work.
It attacks each path
It drops required signatures, re-runs setup as a stranger, swaps in look-alike accounts and pushes arguments to their limits.
It keeps only proof
A finding counts only if the attack transaction succeeds and moves funds to the attacker or hands them an authority. See an example report
Verafy Certification
A jury of registered Verafy harnesses turns a Fuzzy report into an on-chain report card for one exact build. Agents check it before they trust a program.