Ackee-Blockchain

trident: Fuzz Solana Programs with Anza's SVM

Trident is a manually guided Rust fuzzing framework for Solana programs, built around Anza’s Solana SVM API through TridentSVM. It helps teams exercise stateful instruction flows and find edge cases that ordinary unit tests may miss.

Stars
407
Forks
58
Stars, last 30 days
+2
Last commit
5 months ago
Contributors
20

Our take

Quietno commits in the last 90 days

Health score

35/100

How it is scored
Activity
38
Community
62
Issues
21
Pull requests
20

+2 stars in the last 30 days

Trident is a focused Solana fuzzing tool with an active release history, though its measured activity is currently quiet: no commits, merged pull requests, or closed issues in the last 90 days.

Good fit if

  • You build Rust programs for Solana and need stateful transaction fuzzing on Anza’s SVM API.
  • You want custom instruction flows, property checks, or regression comparisons in fuzz tests.
  • Your team can work with a Rust-based CLI and values the MIT-licensed project.

Look elsewhere if

  • You need a fuzzing framework for platforms other than Solana programs written in Rust.
  • You require evidence of recent repository maintenance before adopting a security-testing dependency.
All health signals
Last commit2026-05-18 (5 months ago)
Commits, last 90 days0
Releases, last 12 months6 (latest 0.13.0-rc.4, 2026-05-18, pre-release)
Contributors20 (top contributor: 42% of commits)
Issues closed, last 90 days0
Pull requests merged, last 90 days0
Project age4 years

Checked on 2026-10-15 with the GitHub API.

Project history

Daily GitHub snapshots since Oct 7, 2026. History covers stars and forks; health signals are not tracked historically.

Selected snapshot

Stars

409

Forks

60

Change since Nov 14, 2026: 0 stars·0 forks

Overview

Trident is a manually guided fuzzing framework for Rust-based Solana programs, built around Anza’s Solana SVM API through its TridentSVM client. It is designed to run high-volume, stateful transaction sequences so developers can explore account-state changes and uncover edge cases that may not appear in unit tests.

Fuzz tests use custom strategies, flow-based sequences, and Anchor-like macros. Trident is aimed at Solana program developers and security teams who want to test program behavior before release or as part of ongoing development.

Key Features

  • Manually guided strategies for exploring program paths.
  • Stateful input generation based on account changes.
  • TridentSVM execution using Anza’s Solana SVM API.
  • Anchor-like macros for defining fuzz tests.
  • Flow-based control for composing instruction sequences.
  • Property-based checks that compare account states before and after execution.
  • Regression testing to compare fuzzing results across program versions.

Use Cases

  • Solana developers can fuzz instruction flows when ordinary unit tests do not cover realistic sequences of account changes.
  • Security engineers can run fuzz campaigns while preparing a program for an audit.
  • Teams maintaining deployed programs can use fuzzing in CI to check for regressions between versions.
  • Researchers and protocol developers can generate complex transaction sequences to probe edge cases during prototyping.

What you need

Detected in the repository

  • Rust (from Cargo.toml)
  • Automated checks on GitHub Actions

License in plain words

MITpermissive

  • Commercial use: yes
  • Modify and redistribute: yes
  • You must keep: the copyright and license notice
  • Share your changes: no

A summary, not legal advice: the LICENSE file is what applies.

Getting Started

Install the CLI with Cargo:

cargo install trident-cli

See the README and documentation for setup details and examples.

Alternatives

  • wake: Wake tests and fuzzes Solidity contracts on Ethereum, while Trident targets Solana programs using Rust and Solana’s SVM.
ProjectLanguageLicenseStarsStatus
tridentRustMIT407Quiet
wakePythonISC376Quiet

Considerations

  • The measured health status is Quiet: there have been no commits, merged pull requests, or closed issues in the last 90 days. The project has had releases in the past year, including a latest measured release that is a prerelease.
  • The repository has 20 contributors, and the measured contribution share is not concentrated in one person.
  • Rust is required. The provided requirements data indicates CI is configured but does not report tests as a requirement.
  • Trident targets Solana programs; it is not presented as a general-purpose fuzzer for other runtimes or languages.

Found this useful?

Share it with someone who would like trident.

Comparisons