INVARIANT TESTING IN THE CLOUD

Run Echidna, Medusa, Halmos, Foundry and Agentic Workflows for invariant testing in 3 clicks

Watch the 1 minute intro

Helping these projects deploy safely

Centrifuge logoBadger logoCorn LogoLiquity LogoBalancer LogoCredit coop Logo

TVL Protected

$3BLN+

Aggregate TVL of our Customers

$100MLN+

TVL Protected with Live Monitoring

12.5k+

Cloud Fuzzing Runs done with Recon Pro

Benefits

THE MISSING PIECE

Invariant Testing reruns on each commit, ensuring bugs don't come back.

NEVER STUCK IN QUEUE

Unlimited number of parallel runs, we cap the total hours of usage, not the number of concurrent runs

ONE INTERFACE, ALL OF THE TOOLS

Echidna, Medusa, Foundry, Halmos and Kontrol, the Recon panel abstracts away the complexity of handling infra, shareable runs, reusable corpus, rpc forks

DYNAMIC REPLACEMENT

Change your tests constants, block number, from the UI

RECON MAGIC

Run agentic workflows to help you identify invariants and reach coverage with invariant tests

Experimental

GOVERNANCE FUZZING

Trigger an invariant testing suite against all of your onchain smart contracts.

Testimonials

Our services are tailored to our customers

company logo

We worked with the phenomenal @getreconxyz team to get invariant testing coverage for the @centrifuge ERC-7540 implementation, leveraging their Recon Pro platform. Looking forward to seeing where @getreconxyz goes next, they have ambitious plans to take invariant testing to the next level!

Centrifuge

Jeroen - CTO

company logo

We first met Alex during some excellent security discussions re: Liquity v1. The breadth and depth of his audit of our v2 exceeded expectations - particularly impressive for a solo effort. He uncovered several technical, arithmetic and economic issues and discussed them with us in detail. I’d highly recommend his manual reviews for any DeFi team that takes their security seriously.

Liquity

Rick - Cofounder

company logo

Recon has allowed us to speed up the development of invariant tests immensely. We are able to create and execute test suites in the cloud effortlessly with virtually no boilerplate code. I highly recommend using Recon to automate your fuzzing setup.

Badger DAO

James - Lead Dev

company logo

The recon team is continuously innovating to make invariant testing vastly more accessible to projects, which makes a meaningful difference in security outcomes. They bring their broad expertise in and passion for web3 security to any engagement above and beyond the specified scope.

Corn

Dapp - Cofounder

company logo

Engaging with Alex&Lourens showed great proactiveness to answer deep-technical Qs along the process and help to discuss together items that require deeper drilling on invariants, really valuable not only their ability to answer Qs, but educating you on the process and empowering your team for better understanding of invariants on your architecture!

Onchainification

Petrovska - Cofounder

company logo

Alex has an incredible eye for detail, leaving no stone unturned during our audit. His review helped us gain confidence in our codebase before going to a competitive audit. I would highly recommend Alex’s security services to anyone building smart contract systems.

Solidity Labs

Elliot - Founder

company logo

We worked together with Alex to review a Safe module for our DAO multi-sig. We really valued his proactiveness and quick response times so that we could ship in a timely manner. 🚀

Balancer DAO

Xeonus - Balancer Maxis

company logo

The ROI on our engagement with Recon was extremely high. They built an invariant test suite that uncovered hard-to-spot high-severity issues and gave us a powerful tool to ship with confidence. Moving forward, invariant testing will be core to our smart contract development at Credit Coop. When we do our next audit, Recon will have to be a part of the picture.

Credit Coop

Thomas Hepner - Cofonder & CTO

company logo

Alex had the most transparent and interactive process of any auditor I've worked with. He was very proactive and provided in-depth analysis even beyond what was initially requested. In the end, our team was able to iterate on findings a lot quicker than we'd estimated, while also learning a huge amount along the way

Quill Finance

Naps62.eth - Cofonder & CTO

How does it work

Installation is faster than finding your hardware wallet

  1. Install the Recon Github App

  2. Run a Job in 3 clicks

  3. Save and reuse configurations as Recipes

  4. Run jobs on PR or Commit, trigger it off of a onchain event

Tutorial Videos

Intro to Recon Pro V2

1min

Next Videos (18)

Run Jobs with Recon Pro

5min

Run Jobs with Recon Pro

Recon Magic Workflow

8min

Recon Magic Workflow

Recipes

2min

Recipes

Alerts

2min

Alerts

Dynamic Replacement

1min

Dynamic Replacement

Campaigns

3min

Campaigns

Governance Fuzzing

2min

Governance Fuzzing

Corpus Reuse

2min

Corpus Reuse

Echidna Jobs

5min

Echidna Jobs

Foundry Jobs

2min

Foundry Jobs

Medusa Jobs

1min

Medusa Jobs

Halmos Jobs

1min

Halmos Jobs

All Recon Tools

1min

All Recon Tools

The Recon Extension

5min

The Recon Extension

Storage & Governance Tools

3min

Storage & Governance Tools

Economic Tools

4min

Economic Tools

Bytecode Tools

6min

Bytecode Tools

The Recon Sandbox

1min

The Recon Sandbox

Trophies

Recon Pro was used to find these bugs

Cap Money

Medium | Agent health changes after realizeRestakerInterest

🏆

Fuzzing helped found a way to desynch accounting

BUG LINK >

Spine Finance

Critical | Permanent DOS and loss of funds when Y reaches 0

🏆

Fuzzing with a Lossy Vault allowed to identify this edge case

BUG LINK >

Badger

Critical | Insolvency due to Incorrect Accounting

🏆

remBADGER Accounting bug, prevented

BUG LINK >

TapiocaDAO

High | Overflow causes Permanent DOS in twTAP

🏆

The only researcher that wrote a POC

BUG LINK >

Centrifuge

Medium | Rounding errors allows bypassing caps

🏆

Invariant Tests helped prevent a notoriously hard to detect edge case

BUG LINK >

Corn

Critical | Insolvency due to Incorrect Accounting

🏆

Invariant Testing quickly found a mistake in accounting and helped ensure all subsequent changes were safe

BUG LINK >

Credit Coop

Medium | Rounding allows bypassing minting cap

🏆

Invariant testing helped identify a rounding issue allowing a minting cap to be bypassed

BUG LINK >

TapiocaDAO

Medium | Incorrect decoding in decodeLockTwpTapDstMsg

🏆

Showing how Invariant tests could have caught this

BUG LINK >

TEAM

Alex

Alex

Top C4 Judge, Former Badger Lead Dev, Code that handled hundreds of millions of dollars, Bug findings in most protocols you use every day

Antonio

Antonio

Creator of EchidnaToFoundry, Author of some of the most read articles on Invariant Testing, Advisor to multiple high profile projects

Nican0r

Nican0r

Lead Invariants Engineer worked on Centrifuge, Liquity, Corn and more

Kn0t

Kn0t

Senior Full-Stack Developer, Lead Invariants Engineer, driving R&D and future tools at Recon

0xsi

0xsi

Lead Software Engineer && Fuzzing engineer behind a lot of Recon features

We can support your team at all stages of development

Early Stage:

Define key invariants, scaffold and maintain invariant testers

Add invariants as the project grows

Pre Audit Stage:

Reach 100% Coverage, handout to your Auditors a full set of test repros to produce meaningful states or broken properties

Solo Review Stage:

Recon is made by highly respected SRs that can help you with Manual Review

Audit Stage:

We can support you during audits, by adding new properties flagged by your reviewers and by reproducing bugs in invariant tests as a means to ensure they are not introduced later

Our cloud runners ensure you can quickly queue and test fixes, no more waiting for your engineer to come back from the weekend

Our offers:

  • Manual Review

    >

    A high quality review done by top Security Researchers, ideally paired with Invariant Testing

  • Invariant Test Writing

    >

    Testing written by an experienced fuzzing engineer, for projects that want to skill up their codebase, includes unlimited cloud runs during the engagement

  • Recon Pro

    >

    Cloud Fuzzing as a service, a versatile and easy way to run invariant testing in the cloud

Invariant testing starters

project logo

Create Chimera App

The easiest way to scaffold invariant tests

project logo

Eigenlayer Fuzzing

A plug and play suite to test meaningful Eigenlayer States, a must for every Eigenlayer Integrator

project logo

Renzo Fuzzing

A complete invariant suite for the Renzo Protocol, able to replicate multiple exploits found in subsequent audits

project logo

Call Test Undo

A simple contract meant to turn state changing function calls into invariant tests that do not pollute the story

project logo

ERC7540 Reusable Properties

Simple to Reuse, high level properties for ERC7540 Vaults, Built in Collaboration with Centrifuge

project logo

Chimera

Open Source Framework to unify Invariant, Fuzz and Formal Verification into a single, write once run everywhere API

Recon builder

FREE

For Open Source Projects

90

Repos built

200

Hours saved

It's never been easier

2 click scaffolding a State of the Art Medusa, Echidna, Halmos and Kontrol Invariant Testing Setup

Use the right tools for the job

Use Foundry to develop and debug, use medusa and echidna for invariant testing

Only as opinionated as necessary

Compatible with any Foundry project. Zero configuration necessary

Check how it works

The Dangers of Arbitrary Calls and How to do them safely

42min

Next Videos (2)

Eigenlayer Ecosystem Fuzzing - Write Invariant Tests for Eigenlayer in just a few minutes

30min

Eigenlayer Ecosystem Fuzzing - Write Invariant Tests for Eigenlayer in just a few minutes

The Recon Pro Workflow

44min

The Recon Pro Workflow

Substack posts

First Day At Invariant School

Featured in Week in Ethereum, a simple introduction to Invariant Testing

Substack Image

Read >

Reusable Properties for ERC7540 Vaults

How to implement properties developer by the Recon + Centrifuge teams for ERC7540 vaults

Substack Image

Read >

Lessons Learned from Fuzzing Centrifuge Protocol part 2

Separating signal from noise in broken properties

Substack Image

Read >

Finding Real Vulnerabilities with the Renzo-Fuzzing repo

Using the renzo-fuzzing repo to reproduce vulnerabilities from the Renzo audit report from code4rena

Substack Image

Read >

Lessons From The Fuzzing Trenches

Lessons learned from building a fuzzing suite for Renzo Protocol

Substack Image

Read >

Integrating EigenLayer Into Your Test Suite

Deploy the entire EigenLayer system + simulate slashing events in your test suite

Substack Image

Read >

eBTC Retrospective

A reflection on lessons learned in our extended fuzzing of eBTC

Substack Image

Read >