AI-powered formal verification finds real Redis/Valkey bugs, incl. a 23-char freeze

LingmingZhang · x · 2026-10-28

Grigore Rosu reports that a single 23-character command can freeze an entire Redis server. His team pointed an AI-powered formal verification kit at Redis and Valkey — the systems running much of the internet's caching, queues and sessions — extracting intent, formalizing properties and invariants, then finding and verifying counterexamples. It surfaced real, reproducible bugs in core internet infrastructure, including several memory-safety issues now under coordinated disclosure, with a couple of public examples attached. Lingming Zhang retweeted the thread.

Original post →

More from Infra

Infra channel →