Finished a weekend project that may be useful for onchain vulnerability analysis of deployed smart contracts:

https://github.com/Decurity/tx-coverage

tx-coverage allows to reveal unused code of live smart contracts by collecting coverage from historical transactions.

With it you can discover code that was never executed onchain and may contain potential bugs.