100+ compiler bugs found across 5 smart-contract compilers — Sui… — nowarp | Web3 Security — TG.ME

100+ compiler bugs found across 5 smart-contract compilers — Sui Move, Cairo, Solang, Solidity, and Leo — in a fresh blog post on compiler fuzzing. Only bugs in later compilation passes are reported; no malformed-input crashes.

The post shares experience, heuristics, and an overview of approaches for setting up a low-effort fuzzing workflow to test compiler implementations. Part 1 focuses only on ICE.

What the post covers:
• Designing and configuring the fuzzing harness for grammar-aware fuzzing
• A new tree-sitter-based grammar-aware mutator that works with any tree-sitter grammar
• Adopting MetaMut-style mutations: 700–1000 language-specific mutation operations per target, from a few prompts
• Corpus collection, generation, and minimization
• Dictionary construction
• LLM-assisted triage — deduplication, minimization, reporting

Three open-source utilities published, plus the complete Sui Move fuzzing harness with 884 custom mutators.

https://nowarp.io/blog/compiler-testing-part-1
April 24, 2026 107 4