Crucible is a Rust fuzzing framework for Solana programs that claims sBPF edge tracing through LiteSVM, typed action mutation, and stateful invariant checks without rebuilding the target. Worth a look if you care about smart contract test harnesses, with the usual caveat that the throughput and bug-discovery numbers are repository claims until you run them on your own program.