Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts

An effective way to maximize code coverage in software tests is through dynamic symbolic execution-a technique that uses constraint solving to systematically explore a program's state space. We introduce an open-source dynamic symbolic execution framework called Manticore for analyzing binaries...

Full description

Saved in:
Bibliographic Details
Published in:IEEE/ACM International Conference on Automated Software Engineering : [proceedings] pp. 1186 - 1189
Main Authors: Mossberg, Mark, Manzano, Felipe, Hennenfent, Eric, Groce, Alex, Grieco, Gustavo, Feist, Josselin, Brunson, Trent, Dinaburg, Artem
Format: Conference Proceeding
Language:English
Published: IEEE 01.11.2019
Subjects:
Benchmark testing
Computer architecture
Engines
ethereum
manticore
mcore
smart contract
Smart contracts
symbolic execution
Weapons
ISSN:2643-1572
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Abstract An effective way to maximize code coverage in software tests is through dynamic symbolic execution-a technique that uses constraint solving to systematically explore a program's state space. We introduce an open-source dynamic symbolic execution framework called Manticore for analyzing binaries and Ethereum smart contracts. Manticore's flexible architecture allows it to support both traditional and exotic execution environments, and its API allows users to customize their analysis. Here, we discuss Manticore's architecture and demonstrate the capabilities we have used to find bugs and verify the correctness of code for our commercial clients.
AbstractList An effective way to maximize code coverage in software tests is through dynamic symbolic execution-a technique that uses constraint solving to systematically explore a program's state space. We introduce an open-source dynamic symbolic execution framework called Manticore for analyzing binaries and Ethereum smart contracts. Manticore's flexible architecture allows it to support both traditional and exotic execution environments, and its API allows users to customize their analysis. Here, we discuss Manticore's architecture and demonstrate the capabilities we have used to find bugs and verify the correctness of code for our commercial clients.
Author Grieco, Gustavo
Feist, Josselin
Dinaburg, Artem
Manzano, Felipe
Groce, Alex
Brunson, Trent
Hennenfent, Eric
Mossberg, Mark
Author_xml – sequence: 1
  givenname: Mark
  surname: Mossberg
  fullname: Mossberg, Mark
  organization: Trail of Bits
– sequence: 2
  givenname: Felipe
  surname: Manzano
  fullname: Manzano, Felipe
  organization: Trail of Bits
– sequence: 3
  givenname: Eric
  surname: Hennenfent
  fullname: Hennenfent, Eric
  organization: Trail of Bits
– sequence: 4
  givenname: Alex
  surname: Groce
  fullname: Groce, Alex
  organization: Trail of Bits
– sequence: 5
  givenname: Gustavo
  surname: Grieco
  fullname: Grieco, Gustavo
  organization: Trail of Bits
– sequence: 6
  givenname: Josselin
  surname: Feist
  fullname: Feist, Josselin
  organization: Trail of Bits
– sequence: 7
  givenname: Trent
  surname: Brunson
  fullname: Brunson, Trent
  organization: Trail of Bits
– sequence: 8
  givenname: Artem
  surname: Dinaburg
  fullname: Dinaburg, Artem
  organization: Trail of Bits
BookMark eNotjsFKAzEURaMo2Fa3btzkB2ZM8iaZibtaWhUqLmrBXUmTF4jOJJIZsfP3VpS7uBy4HO6UnMUUkZBrzkrOmb6db5alYFyXjHGAEzLltWi4kKzhp2QiVAUFl7W4INO-f2dMHqGekLdnE4dgU8Y7OqfbHnOxygGja0e6Gbt9aoOlywParyGkSFfZdPid8gf1KdP7EM1x3FMTHd10Jg90keKQjR36S3LuTdvj1X_PyHa1fF08FuuXh6fFfF0YAD0UCMyBlXulrLTqN-ArjcicQl2hd9xXTaOt5VxYqWVtQQFUyknbKOYNzMjNnzcg4u4zh-ONcddoKQSr4AeN21J-
ContentType Conference Proceeding
DBID 6IE
6IL
CBEJK
RIE
RIL
DOI 10.1109/ASE.2019.00133
DatabaseName IEEE Electronic Library (IEL) Conference Proceedings
IEEE Xplore POP ALL
IEEE Xplore All Conference Proceedings
IEEE Electronic Library (IEL)
IEEE Proceedings Order Plans (POP All) 1998-Present
DatabaseTitleList
Database_xml – sequence: 1
  dbid: RIE
  name: IEEE Electronic Library (IEL)
  url: https://ieeexplore.ieee.org/
  sourceTypes: Publisher
DeliveryMethod fulltext_linktorsrc
Discipline Computer Science
EISBN 1728125081
9781728125084
EISSN 2643-1572
EndPage 1189
ExternalDocumentID 8952204
Genre orig-research
GroupedDBID 29I
6IE
6IF
6IH
6IK
6IL
6IM
6IN
6J9
AAJGR
AAWTH
ABLEC
ACREN
ADYOE
ADZIZ
AFYQB
ALMA_UNASSIGNED_HOLDINGS
AMTXH
APO
BEFXN
BFFAM
BGNUA
BKEBE
BPEOZ
CBEJK
CHZPO
IEGSK
IPLJI
M43
OCL
RIE
RIL
ID FETCH-LOGICAL-a339t-e30d3c5b66c5c6c6c63f49ee0d6e94efd1f4889cc112c5957c363346d5c860fa3
IEDL.DBID RIE
ISICitedReferencesCount 253
ISICitedReferencesURI http://www.webofscience.com/api/gateway?GWVersion=2&SrcApp=Summon&SrcAuth=ProQuest&DestLinkType=CitingArticles&DestApp=WOS_CPL&KeyUT=000533303400126&url=https%3A%2F%2Fcvtisr.summon.serialssolutions.com%2F%23%21%2Fsearch%3Fho%3Df%26include.ft.matches%3Dt%26l%3Dnull%26q%3D
IngestDate Wed Aug 27 02:39:58 EDT 2025
IsPeerReviewed false
IsScholarly true
Language English
LinkModel DirectLink
MergedId FETCHMERGED-LOGICAL-a339t-e30d3c5b66c5c6c6c63f49ee0d6e94efd1f4889cc112c5957c363346d5c860fa3
PageCount 4
ParticipantIDs ieee_primary_8952204
PublicationCentury 2000
PublicationDate 2019-11-01
PublicationDateYYYYMMDD 2019-11-01
PublicationDate_xml – month: 11
  year: 2019
  text: 2019-11-01
  day: 01
PublicationDecade 2010
PublicationTitle IEEE/ACM International Conference on Automated Software Engineering : [proceedings]
PublicationTitleAbbrev ASE
PublicationYear 2019
Publisher IEEE
Publisher_xml – name: IEEE
SSID ssj0051577
ssib040743839
Score 2.5987635
Snippet An effective way to maximize code coverage in software tests is through dynamic symbolic execution-a technique that uses constraint solving to systematically...
SourceID ieee
SourceType Publisher
StartPage 1186
SubjectTerms Benchmark testing
Computer architecture
Engines
ethereum
manticore
mcore
smart contract
Smart contracts
symbolic execution
Weapons
Title Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts
URI https://ieeexplore.ieee.org/document/8952204
WOSCitedRecordID wos000533303400126&url=https%3A%2F%2Fcvtisr.summon.serialssolutions.com%2F%23%21%2Fsearch%3Fho%3Df%26include.ft.matches%3Dt%26l%3Dnull%26q%3D
hasFullText 1
inHoldings 1
isFullTextHit
isPrint
link http://cvtisr.summon.serialssolutions.com/2.0.0/link/0/eLvHCXMwlV09T8MwELVKxcBUoEV8ywMjoW7tODFbQY0YoKpUirpVzvkiVaIt6gei_x5fkhYGFpQlyhSdz3nvnHvvGLsBK2K0WTtwSmCgVDsNUuvSwIWoJShPmPNzyLfnqNeLRyPTr7DbnRYGEfPmM7yj2_xfvpvDmo7KmrHxbIHMP_eiSBdarW3uKILCmBwui6-wh-koKk0aW8I0O4Mu9XHl5pQ0JPfXKJUcSZLa_97hkDV-JHm8vwObI1bB2TGrbWcy8HKL1tnoxYdqQt6U97zDhz7BgoSsjN37hg8205RsgHn3CyFPOJ5se7O4J6_8gcS5vnTmdub4YOqzipN7FQmplg02TLqvj09BOT0hsFKaVYBSOAlhqjWEoOmSmTKIwmk0CjPXyvzmNQCecUFowgikllJpF0KsRWblCavO5jM8ZRxSX0eBsJ4aoi9XRKoseKSnYqltPWE5Y3UK1PijMMgYlzE6__vxBTuglSgEfZesulqs8Yrtw-dqslxc56v6DZHcoxk
linkProvider IEEE
linkToHtml http://cvtisr.summon.serialssolutions.com/2.0.0/link/0/eLvHCXMwlV1LTwIxEG4ImugJFYxve_BopdDuo97QQDACIQEMN9JtZxMSWQwPI__ezu6CHryYvWz20DTTaeeb7nzfEHJnNA9Bx3VmJQcmZT1ikbYRsx74wkgHmNN7yLdO0OuF47HqF8j9jgsDAGnxGTzga_ov387NGq_KqqFyaAHFP_c8NyrP2Fpb75EYDEPUuMzOYReogyCXaaxxVW0MmljJlcpTYpvcX81U0ljSKv1vFkek8kPKo_1duDkmBUhOSGnblYHmm7RMxl1nrCmqUz7SBh05F2MtFDO27xs62MwiFAKmzS8wqcvR1rY6izr4Sp-QnuuSZ6oTSwcz51cU9auQSrWskFGrOXxus7x_AtNCqBUDwa0wXuT7xjM-PiKWCoBbH5SE2NZit32VMQ5zGU95gRG-ENK3ngl9HmtxSorJPIEzQk3kMinDtQOH4BIWHkltXKzHdKmuHWQ5J2U01OQjk8iY5Da6-PvzLTloD7udSeel93pJDnFVMnrfFSmuFmu4JvvmczVdLm7SFf4GPW-mYA
openUrl ctx_ver=Z39.88-2004&ctx_enc=info%3Aofi%2Fenc%3AUTF-8&rfr_id=info%3Asid%2Fsummon.serialssolutions.com&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=proceeding&rft.title=IEEE%2FACM+International+Conference+on+Automated+Software+Engineering+%3A+%5Bproceedings%5D&rft.atitle=Manticore%3A+A+User-Friendly+Symbolic+Execution+Framework+for+Binaries+and+Smart+Contracts&rft.au=Mossberg%2C+Mark&rft.au=Manzano%2C+Felipe&rft.au=Hennenfent%2C+Eric&rft.au=Groce%2C+Alex&rft.date=2019-11-01&rft.pub=IEEE&rft.eissn=2643-1572&rft.spage=1186&rft.epage=1189&rft_id=info:doi/10.1109%2FASE.2019.00133&rft.externalDocID=8952204