I’m releasing Hound, my agent-based code analyzer that has earned an actual $15k bug bounty

A short while ago I published the latest iteration of Hound, an agent-based framework that tries to emulate human reasoning to find logic bugs in source code. This is the latest version that has been tested rudimentary. It is built mostly with smart contract analysis in mind, but is language agnostic – that said, it will probably not work well with large codebases yet (come sampling is not well-tested).

Last year, an earlier version of this found a medium-risk bug in a project listed on Immunefi that paid $15k which was more than enough to pay for API costs! It also found 1/3 of the bugs in a Code4rena contest codebase.

It does not come close to a human expert yet, but it’s definitely an improvement from just copy/pasting the code into ChatGPT.

Note that this is a research prototype so no guarantees that it works well across the board.

Links

Github repo

Blog post explaining how it works

Paper will probably follow later once it’s properly benchmarked.

submitted by /u/Rude_Ad3947
[link] [comments]

Read More >>

Samsung announces a virtual Unpacked event for September 4 at 5:30am ET, where new tablets and the Galaxy S25 FE are expected (Ian Carlos Campbell/Engadget)

Ian Carlos Campbell / Engadget:
Samsung announces a virtual Unpacked event for September 4 at 5:30am ET, where new tablets and the Galaxy S25 FE are expected  —  New tablets and an S25 FE will likely make an appearance.  —&…

Read More >>

Top CDC officials quit, with one condemning ‘ongoing weaponization of public health’ – US politics live

Top-level resignations at Centers for Disease Control and Prevention come just after CDC chief Susan Monarez is ousted less than a month into the jobCDC director Susan Monarez ousted after less than one month in the jobInside Medicine, a newsletter wri…

Read More >>