Wake cover

Wake

The fuzzing and testing framework for Solidity, written in Python. Wake helps you write safer smart contracts, faster.

Built by Ackee Blockchain Security — trusted auditors of Lido, Safe, and Axelar.

Why Wake?

Built-in fuzzing — automatically generate diverse inputs and edge cases to uncover hidden vulnerabilities
Vulnerability detectors — catch reentrancy, overflows, and logic flaws early
Seamless developer experience — VS Code extension, GitHub Actions, solc manager
Cross-chain testing — works with Anvil, Hardhat, and Ganache

Features and benefits

Testing framework based on pytest — write clean, simple tests with familiar tooling
Manually-guided fuzzing (MGF) — combine automated fuzzing with human insights to target specific contract behaviors and edge cases
Property-based fuzzer — automatically generate diverse inputs to uncover hidden bugs faster
Deployments & mainnet interactions — test contracts in realistic environments before going live
Vulnerability and code quality detectors — detect reentrancy, overflows, and bad patterns early in development
Printers for extracting useful information from Solidity code — gain insights into contract structures and flows
Static analysis framework for custom detectors and printers — extend Wake with project-specific rules
GitHub actions for setting up Wake and running detectors — integrate seamlessly into CI/CD pipelines
Language server (LSP) — get autocompletion, hints, and references inside your IDE
VS Code extension (Solidity (Wake)) — instant feedback while writing Solidity code
Solc version manager — manage compiler versions with ease for consistent builds

Wake vs other tools

	Slither	ApeWorx	Brownie	Hardhat	Foundry	Wake
Language	Python	Python	Python	Typescript	Rust	Python
Maintained	✅	✅	❌	✅	✅	✅
Testing	❌	✅	✅	✅	✅	✅
Fuzzing	❌	❌	✅*	✅**	✅	✅
Detectors	✅	❌	❌	❌	❌	✅
Language server	❌	❌	❌	✅	❌	✅

* available with Hypothesis plugin ** only in Solidity

Dependencies

Python (version 3.8 or higher)
Rosetta must be enabled on Apple Silicon Macs

Installation

via pip

pip3 install eth-wake

Discovered vulnerabilities

Vulnerability	Severity	Project	Method	Discovered by	Resources
Profit & loss accounted twice	Critical	IPOR	Fuzz test	Ackee Blockchain	Report, Wake tests
Loan refinancing reentrancy	Critical	PWN	Detector	Ackee Blockchain	Report
Incorrect optimization in loan refinancing	Critical	PWN	Fuzz test	Ackee Blockchain	Report, Wake tests
Incorrect enqueued keys accounting	High	Lido	Fuzz test	Ackee Blockchain	Report, Wake tests
Console permanent denial of service	High	Brahma	Fuzz test	Ackee Blockchain	Report
Swap unwinding formula error	High	IPOR	Fuzz test	Ackee Blockchain	Report, Wake tests
Swap unwinding fee accounted twice	High	IPOR	Fuzz test	Ackee Blockchain	Report, Wake tests
Incorrect event data	High	Solady	Integration test	Ackee Blockchain	Report, Wake tests
`INTEREST_FROM_STRATEGY_BELOW_ZERO` reverts DoS	Medium	IPOR	Fuzz test	Ackee Blockchain	Report, Wake tests
Inaccurate hypothetical interest formula	Medium	IPOR	Fuzz test	Ackee Blockchain	Report, Wake tests
Swap unwinding fee normalization error	Medium	IPOR	Fuzz test	Ackee Blockchain	Report, Wake tests
Liquidation deposits accounted into LP balance	Medium	IPOR	Fuzz test	Ackee Blockchain	Report, Wake tests
Missing receive function	Medium	Axelar	Fuzz test	Ackee Blockchain	Wake tests
`SafeERC20` not used for `approve`	Medium	Lido	Fuzz test	Ackee Blockchain	Wake tests
Non-optimistic vetting & unbonded keys bad accounting	Medium	Lido	Fuzz test	Ackee Blockchain	Report, Wake tests
Chainlink common denominator bad logic	Medium	PWN	Fuzz test	Ackee Blockchain	Report, Wake tests
Outdated/reverting Chainlink feed causes DoS	Medium	PWN	Fuzz test	Ackee Blockchain	Report, Wake tests
Incorrect EIP-712 typehash	Medium	PWN	Detector	Ackee Blockchain	Report
Incorrect EIP-712 data encoding	Medium	PWN	Fuzz test	Ackee Blockchain	Report, Wake tests

Features in-depth

Fuzzer

Wake’s fuzzer builds on top of the testing framework and allows efficient fuzz testing of Solidity smart contracts.

from wake.testing import *
from wake.testing.fuzzing import *
from pytypes.contracts.Counter import Counter

class CounterTest(FuzzTest):
    def pre_sequence(self) -> None:
        self.counter = Counter.deploy()
        self.count = 0

    @flow()
    def increment(self) -> None:
        self.counter.increment()
        self.count += 1

    @flow()
    def decrement(self) -> None:
        with may_revert(PanicCodeEnum.UNDERFLOW_OVERFLOW) as e:
            self.counter.decrement()

        if e.value is not None:
            assert self.count == 0
        else:
            self.count -= 1

    @invariant(period=10)
    def count(self) -> None:
        assert self.counter.count() == self.count

@chain.connect()
def test_counter():
    CounterTest().run(sequences_count=30, flows_count=100)

Detectors and printers

All vulnerability & code quality detectors can be run using:

wake detect all

Run a specific detector:

wake detect <detector-name>

See the documentation for a full list of detectors.

Run a printer:

wake print <printer-name>

See the documentation for a full list of printers.

For custom detectors & printers, check the getting started guide and repos for wake_detectors and wake_printers.

LSP Server

Wake implements an LSP server for Solidity. Run it with:

wake lsp

Or specify a port (default 65432):

wake lsp --port 1234

See all features in the documentation.

Documentation, contribution and community

License

This project is licensed under the ISC license.

Partners

RockawayX	Coinbase

Metadata

Release files for eth-wake 4.22.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for eth-wake 4.22.2
File	Size	Uploaded	Provenance
eth_wake-4.22.2.tar.gz	901.4 kB	Oct 22, 2026	Without provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for eth-wake 4.22.2
File	Interpreter	ABI	Platform	Reset
eth_wake-4.22.2-py3-none-any.whl 1.1 MB Oct 22, 2026 Without provenance	Python 3	none	any	Details

Total release size: 2.0 MB

Release files / eth_wake-4.22.2.tar.gz

Download URL	eth_wake-4.22.2.tar.gz
Size	901.4 kB
Tags	Source
SHA-256 checksum How to use checksums	`4bc31e55cf86f36ed29f1f109bcc934084b16172e74946a46e40ffa83c65b323`
BLAKE2b-256 checksum How to use checksums	`40e247926568695ae55084f100e89f85ab5360185d779db7e95b80891d34e397`
Upload date	Oct 22, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`uv/0.13.5 {"installer":{"name":"uv","version":"0.13.5","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}`

Release files / eth_wake-4.22.2-py3-none-any.whl

Download URL	eth_wake-4.22.2-py3-none-any.whl
Size	1.1 MB
Tags	Python 3
SHA-256 checksum How to use checksums	`2d46768faec083743102b0cb0d23c4153df14cb2b8f9684297d3ee115c35aabf`
BLAKE2b-256 checksum How to use checksums	`e4492c6f0dfd7e13978747eb3e80d78c04b8c8f0d1434faa9d3543129475130c`
Upload date	Oct 22, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`uv/0.13.5 {"installer":{"name":"uv","version":"0.13.5","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}`

Security for eth-wake 4.22.2

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.