// the find
Ackee-Blockchain/trident
Rust-based framework to Fuzz Solana programs, designed to help you ship secure code.
Trident is a Rust fuzzing framework purpose-built for Solana/Anchor programs, letting you write flow-based fuzz tests that drive sequences of transactions against your program and assert on resulting account state. It's aimed at Solana program developers and auditors who want to catch missing constraints and overflow bugs before a formal audit, not general Rust developers.
It's built and maintained by Ackee Blockchain Security, an actual auditing firm with Solana Foundation and Marinade grants behind it, so the fuzzing strategies encode real audit experience rather than academic fuzzing theory. The flow-based API lets you compose multi-instruction transaction sequences and compare account state before/after, which catches cross-instruction invariant violations that plain unit tests or naive single-instruction fuzzers miss. It runs on TridentSVM, built on Anza's SVM API, so it executes transactions without spinning up a full validator per iteration, which is what makes the high throughput claims plausible. Regression testing support (diffing fuzz results between program versions) is a genuinely useful feature for catching behavior changes in CI once you have a baseline campaign.
It's entirely Solana/Anchor-specific, so none of it transfers if you're not already in that ecosystem, and the #[init]/#[flow] macro DSL means you're writing real boilerplate per instruction before you get any fuzzing signal. The actual API and macro reference lives only on the external docs site (ackee.xyz) rather than in the repo itself, so the README alone isn't enough to write a non-trivial fuzz suite. The 12,000 tx/s throughput figure is stated with no benchmark methodology, hardware, or program complexity attached, so it's a marketing number until you reproduce it yourself. There's also no visible example of how large or long-running a realistic fuzz campaign needs to be to find anything, which matters a lot for teams deciding how much CI time to budget.