State Reachability Analysis
State reachability analysis is a formal method to determine if a specific state in a system can ever be reached starting from an initial configuration. In smart contract security, this is used to prove that a dangerous state, such as an unlocked vault or a drained treasury, is impossible to reach regardless of the sequence of transactions.
If the reachability analysis finds a path to an insecure state, the protocol is fundamentally broken and requires a design change. This is a rigorous way to guarantee that the system's security properties hold true in all possible futures.
For complex financial derivatives, this analysis provides the ultimate assurance that the protocol is safe from logical exploits. It essentially checks the reachability of "bad" states, ensuring that no combination of user inputs or market events can trigger them.