Skip to content
THREATWIRE

Foundry

Fast toolkit for Ethereum development and testing

Rust toolkit (forge, cast, anvil, chisel) to build, test, fuzz and deploy Solidity contracts, with fuzz and invariant testing built in.

Open sourceApache-2.0 OR MIT
Visit website View repository Docs
Homepage of Foundry
Official website (getfoundry.sh), captured by ThreatWire.

What Foundry does

Foundry's forge compiles and tests Solidity contracts with tests written in Solidity itself. It includes property-based fuzz testing, invariant testing with stateful call sequences, mainnet forking and gas reports, which makes it a core security testing tool for smart contracts.

Companion tools include cast (interact with chains), anvil (local node) and chisel (Solidity REPL).

Key features

  • Solidity-native unit, fuzz and invariant tests
  • Mainnet forking and cheatcodes
  • anvil local node and cast CLI
  • Gas reports and snapshots
  • Coverage reporting

Licence

Apache-2.0 OR MIT · Apache License 2.0 or MIT · Open source

GitHub reports Apache-2.0; the project is dual-licensed under Apache-2.0 and MIT.

Checked by ThreatWire against the repository's licence file on 2026-10-20. GitHub detects: Apache-2.0.

Security of Foundry itself

No published advisory found for Foundry in GitHub repository advisories. That does not mean the tool has no vulnerabilities.

Sources: GitHub repository advisories · checked 2026-10-20.

Categories and tags

Smart contract securityFuzzing#solidity#testing#fuzzing#rust#evm#blockchain

Related tools

  • Echidna

    Property-based fuzzer for Ethereum smart contracts

    Trail of Bits' fuzzer that generates transaction sequences to break user-defined invariants and assertions in Solidity contracts.

    Stars
    3.2k
    Forks
    437
    Last commit
    5 days ago
    AGPL-3.0-onlyOpen sourceSmart contract security

  • Slither

    Static analyser for Solidity and Vyper

    Trail of Bits' static analysis framework for Solidity and Vyper with dozens of vulnerability detectors, printers and an API for custom analyses.

    Stars
    6.4k
    Forks
    1.2k
    Last commit
    2 months ago
    AGPL-3.0-onlyOpen sourceSmart contract security

  • Mythril

    Symbolic execution analyser for EVM bytecode

    Security analysis tool from Consensys Diligence that uses symbolic execution and SMT solving to find vulnerabilities in EVM bytecode.

    Stars
    4.3k
    Forks
    821
    Last commit
    1 year ago
    MITOpen sourceSmart contract security

  • Halmos

    Symbolic testing for EVM smart contracts

    a16z's symbolic testing tool that runs Foundry-style tests with symbolic inputs to prove properties or find counterexamples.

    Stars
    1k
    Forks
    113
    Last commit
    1 year ago
    AGPL-3.0-onlyOpen sourceSmart contract security

  • Aderyn

    Rust-based Solidity static analyser

    Cyfrin's static analyser for Solidity written in Rust, with detectors, Markdown audit-style reports and editor integration.

    Stars
    797
    Forks
    121
    Last commit
    5 months ago
    GPL-3.0-onlyOpen sourceSmart contract security

  • AFL++

    Coverage-guided fuzzer, successor to AFL

    Community-maintained successor to american fuzzy lop with faster instrumentation, custom mutators and QEMU, Frida and Unicorn modes for binaries.

    Stars
    6.8k
    Forks
    1.3k
    Last commit
    today
    AGPL-3.0-onlyOpen sourceFuzzing

Related on ThreatWire

Share on X@threatwire_https://www.threatwire.tech/tools/foundry