A Systematic Review and Performance Evaluation of Open-Source Tools for Smart Contract Vulnerability Detection
Source abstract
Abstract
With the rise of blockchain technology, the security issues of smart contracts have become increasingly critical. Despite the availability of numerous smart contract vulnerability detection tools, many face challenges such as... | Find, read and cite all the research you need on Tech Science Press
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Insurance and Financial Risk Management · FinTech, Crowdfunding, Digital Finance · Blockchain Technology Applications and Security
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (82)
Show source-provided references
1. S. Nakamoto, “Bitcoin: A peer-to-peer electronic cash system,” Accessed: Mar. 15, 2024. [Online]. Available: https://bitcoin.org/bitcoin.pdf
2. Formalizing and securing relationships on public networks10.5210/fm.v2i9.548 ↗
3. SoK: Unraveling bitcoin smart contracts
4. Secure multiparty computations on bitcoin10.1145/2896386 ↗
5. A next-generation smart contract and decentralized application platform
6. A systematic review of blockchain10.1186/s40854-019-0147-z ↗
7. ContractGuard: Defend Ethereum smart contracts with embedded intrusion detection
8. Smart contracts: Security patterns in the ethereum ecosystem and solidity
9. ZEUS: analyzing safety of smart contracts
10. Finding the greedy, prodigal, and suicidal contracts at scale
11. P. Daian, “Analysis of the DAO exploit,” Accessed: Dec. 20, 2023. [Online]. Available: https://hackingdistributed.com/2016/06/18/analysis-of-the-dao-exploit/
12. The DAO hacked
13. L. Breidenbach, P. Daian, A. Juels, and E. G. Sirer, “An in-depth look at the parity multisig bug,” 2023. Accessed: Mar. 15, 2023. [Online]. Available: https://hackingdistributed.com/2017/07/22/deep-dive-parity-bug/
14. Etherscan, “Beautychain (BEC) token tracker | etherscan,” 2003. Accessed: Mar. 15, 2023. [Online]. Available: https://etherscan.io/token/0xc5d105e63711398af9bbff092d4b6769c82f793d
15. Blockchain smart contracts formalization: Approaches and challenges to address vulnerabilities10.1016/j.cose.2019.101654 ↗
16. Ethereum: A secure decentralised generalised transaction ledger
17. Overview of business innovations and research opportunities in blockchain and introduction to the special issue10.1186/s40854-016-0049-2 ↗
18. Blockchain disruption and smart contracts10.1093/rfs/hhz007 ↗
19. Understanding blockchain technology for future supply chains: A systematic literature review and research agenda10.1108/SCM-03-2018-0148 ↗
20. On blockchain and its integration with IoT. Challenges and opportunities10.1016/j.future.2018.05.046 ↗
21. Applicability of blockchain smart contracts in securing internet and IoT: A systematic literature review10.1016/j.cosrev.2020.100360 ↗
22. Security challenges and opportunities for smart contracts in internet of things: A survey10.1109/JIOT.2021.3074544 ↗
23. Elastic smart contracts in blockchains10.1109/JAS.2021.1004222 ↗
24. Applications of distributed ledger technology (DLT) and blockchain-enabled smart contracts in construction10.1016/j.autcon.2021.103955 ↗
25. Smart contracts in energy systems: A systematic review of fundamental approaches and implementations10.1016/j.rser.2021.112013 ↗
26. Blockchain-based smart contracts: a systematic mapping study of academic research, 2018
27. A survey on the security of blockchain systems10.1016/j.future.2017.08.020 ↗
28. A survey of attacks on ethereum smart contracts (SOK)
29. Data security and privacy in bitcoin system: A survey10.1007/s11390-020-9638-7 ↗
30. SmartCheck: Static analysis of ethereum smart contracts
31. Slither: A static analysis framework for smart contracts
32. Understanding source code evolution using abstract syntax tree matching
33. Control flow analysis10.1145/390013.808479 ↗
34. Automated whitebox fuzz testing
35. Symbolic execution and program testing10.1145/360248.360252 ↗
36. Dynamic taint analysis for automatic detection, analysis, and signaturegeneration of exploits on commodity software
37. VULPEDIA: Detecting vulnerable ethereum smart contracts via abstracted vulnerability signatures10.1016/j.jss.2022.111410 ↗
38. Finding permission bugs in smart contracts with role mining
39. XFuzz: Machine learning guided cross-contract fuzzing10.1109/TDSC.2022.3182373 ↗
40. ESBMC-solidity: An SMT-based model checker for solidity smart contracts
41. eTainter: Detecting gas-related vulnerabilities in smart contracts
42. SAILFISH: Vetting smart contract state-inconsistency bugs in seconds
43. RA: A static analysis tool for analyzing re-entrancy attacks in ethereum smart contracts
44. Eth2Vec: Learning contract-wide code representations for vulnerability detection on ethereum smart contracts
45. EtherSolve: Computing an accurate control-flow graph from ethereum bytecode
46. Gas Gauge: A security analysis tool for smart contract out-of-gas vulnerabilities
47. Echidna: Effective, usable, and fast fuzzing for smart contracts
48. WANA: Symbolic execution of wasm bytecode for cross-platform smart contract vulnerability detection
49. Checking smart contracts with structural code embedding10.1109/TSE.2020.2971482 ↗
50. VERISMART: A highly precise safety verifier for ethereum smart contracts
51. sFuzz: An efficient adaptive fuzzer for solidity smart contracts
52. ETHBMC: A bounded model checker for smart contracts
53. Evmfuzzer: detect EVM vulnerabilities via fuzz testing
54. Soliditycheck: quickly detecting smart contract problems through regular expressions
55. P. Zhang, F. Xiao, and X. Luo, “Soliditycheck/soliditycheck.pdf at master · xf97/soliditycheck,” 2023. Accessed: Mar. 20, 2023. [Online]. Available: https://github.com/xf97/SolidityCheck
56. Vultron: Catching vulnerable smart contracts once and for all
57. VeriSolid: Correct-by-design smart contracts for ethereum
58. SIF: A framework for solidity contract instrumentation and analysis
59. FEther: An extensible definitional interpreter for smart-contract verifications in coq10.1109/ACCESS.2019.2905428 ↗
60. Vandal: A scalable security analysis framework for smart contracts
61. Securify: Practical security analysis of smart contracts
62. ETHIR: A framework for high-level analysis of ethereum bytecode
63. Porosity: A decompiler for blockchain-based smart contracts bytecode
64. Tool demonstration: Fsolidm for designing secure ethereum smart contracts
65. E. Hildenbrandt et al., “KEVM: A complete semantics of the ethereum virtual machine,” 2017. Accessed: Mar. 10, 2024. [Online]. Available: https://www.ideals.illinois.edu/items/102260
66. Ant, “Antlr,” Accessed: Mar. 10, 2024. [Online]. Available: http://www.antlr.org/
67. Consensys, “Consensys/mythril,” Accessed: Mar. 15, 2024. [Online]. Available: https://github.com/ConsenSys/mythril
68. Making smart contracts smarter
69. Towards analyzing the complexity landscape of solidity based ethereum smart contracts
70. Protofire, “Solhint,” 2023. Accessed: Mar. 22, 2023. [Online]. Available: https://protofire.github.io/solhint/
71. Contractfuzzer: Fuzzing smart contracts for vulnerability detection
72. Osiris: Hunting for integer bugs in ethereum smart contracts
73. The art of the scam: Demystifying honeypots in ethereum smart contracts
74. McGill-DMaS, “Github-mcgill-dmas/kam1n0-community: the kam1n0 assembly analysis platform,” 2023. Accessed: Mar. 03, 2023. [Online]. Available: https://github.com/McGill-DMaS/Kam1n0-Community
75. Gradle, “Gradle build tool,” 2023. Accessed: Mar. 03, 2023. [Online]. Available: https://gradle.org/
76. Homebrew, “Homebrew,” 2023. Accessed: Mar. 03, 2023. [Online]. Available: https://brew.sh/
77. NixOS, “Download nix/nixos,” 2023. Accessed: March 03, 2023
78. Commercialhaskell, “The Haskell tool stack,” 2023. Accessed: Mar. 03, 2023. [Online]. Available: https://docs.haskellstack.org/en/stable/
79. A security framework for ethereum smart contracts10.1016/j.comcom.2021.03.008 ↗
80. SmartBugs: A framework to analyze solidity smart contracts
81. Empirical review of automated analysis tools on 47,587 ethereum smart contracts
82. Giampaolo, “Psutil,” Accessed: Mar. 15, 2024. [Online]. Available: https://github.com/giampaolo/psutil