Survey on Quality Assurance of Smart Contracts

Author:

Wei Zhiyuan1ORCID,Sun Jing2ORCID,Zhang Zijian3ORCID,Zhang Xianhao3ORCID,Yang Xiaoxuan3ORCID,Zhu Liehuang3ORCID

Affiliation:

1. School of Computer Science, Beijing Institute of Technology, Beijing, China

2. Faculty of Science, University of Auckland - City Campus, Auckland, New Zealand

3. School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China

Abstract

As blockchain technology continues to advance, the secure deployment of smart contracts has become increasingly prevalent, underscoring the critical need for robust security measures. This surge in usage has led to a rise in security breaches, often resulting in substantial financial losses for users. This paper presents a comprehensive survey of smart contract quality assurance, from understanding vulnerabilities to evaluating the effectiveness of detection tools. Our work is notable for its innovative classification of forty smart contract vulnerabilities, mapping them to established attack patterns. We further examine nine defense mechanisms, assessing their efficacy in mitigating smart contract attacks. Furthermore, we develop a labeled dataset as a benchmark encompassing ten common vulnerability types, which serves as a critical resource for future research. We also conduct comprehensive experiments to evaluate fourteen vulnerability detection tools, providing a comparative analysis that highlights their strengths and limitations. In summary, this survey synthesizes state-of-the-art knowledge in smart contract security, offering practical recommendations to guide future research and foster the development of robust security practices in the field.

Publisher

Association for Computing Machinery (ACM)

Reference136 articles.

1. Josh Achiam Steven Adler and Sandhini Agarwal. 2023. Gpt-4 technical report. arXiv preprint arXiv:2303.08774(2023).

2. Elvira Albert, Puri Arenas, and Antonio et al. Flores-Montoya. 2014. SACO: static analyzer for concurrent objects. In Tools and Algorithms for the Construction and Analysis of Systems: 20th International Conference, TACAS 2014, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2014, Grenoble, France, April 5-13, 2014. Proceedings 20. Springer, 562–567.

3. Elvira Albert, Puri Arenas, and Samir Genaim. 2008. Automatic inference of upper bounds for recurrence relations in cost analysis. In Static Analysis: 15th International Symposium, SAS 2008, Valencia, Spain, July 16-18, 2008. Proceedings 15. Springer, 221–237.

4. Elvira Albert, Jesús Correas, and Pablo Gordillo et al. 2020. GASOL: Gas Analysis and Optimization for Ethereum Smart Contracts. In Tools and Algorithms for the Construction and Analysis of Systems - 26th International Conference, TACAS 2020, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2020, Dublin, Ireland, April 25-30, 2020, Proceedings, Part II(Lecture Notes in Computer Science, Vol.  12079). Springer, 118–125.

5. Elvira Albert Pablo Gordillo and Albert Rubio et al. 2019. Running on Fumes - Preventing Out-of-Gas Vulnerabilities in Ethereum Smart Contracts Using Static Resource Analysis. In Verification and Evaluation of Computer and Communication Systems - 13th International Conference VECoS 2019 Porto Portugal October 9 2019 Proceedings(Lecture Notes in Computer Science Vol.  11847). Springer 63–78.

同舟云学术

1.学者识别学者识别

2.学术分析学术分析

3.人才评估人才评估

"同舟云学术"是以全球学者为主线,采集、加工和组织学术论文而形成的新型学术文献查询和分析系统,可以对全球学者进行文献检索和人才价值评估。用户可以通过关注某些学科领域的顶尖人物而持续追踪该领域的学科进展和研究前沿。经过近期的数据扩容,当前同舟云学术共收录了国内外主流学术期刊6万余种,收集的期刊论文及会议论文总量共计约1.5亿篇,并以每天添加12000余篇中外论文的速度递增。我们也可以为用户提供个性化、定制化的学者数据。欢迎来电咨询!咨询电话:010-8811{复制后删除}0370

www.globalauthorid.com

TOP

Copyright © 2019-2024 北京同舟云网络信息技术有限公司
京公网安备11010802033243号  京ICP备18003416号-3