Full-Stack Hierarchical Fusion of Static Features for Smart Contracts Vulnerability Detection

Jie, Wanqing; Koe, Arthur Sandor Voundi; Huang, Pengfei; Zhang, Shiwen

doi:10.1109/blockchain53845.2021.00091

Cited by 3 publications

(1 citation statement)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…2. Source Code Crawling: We crawled source codes using the tool provided by [5] and edited them according to our needs by using the contract addresses from the previous step as input for our script. We were able to crawl different contracts categorised by years.…”

Section: Methodsmentioning

confidence: 99%

A Review of Upgradeable Smart Contract Patterns based on OpenZeppelin Technique

Amri¹,

Aniello²,

Sassone³

2023

The JBBA

View full text Add to dashboard Cite

The Ethereum blockchain is one of the main public platforms to run smart contracts and enable decentralised applications. Since data stored in a blockchain is considered immutable, smart contracts deployed in Ethereum are regarded as tamper-proof and therefore offer strong protection against attacks aiming at tinkering with the execution flow of an application. Yet, like any other software, a smart contract needs to be maintained over time to fix bugs or add new features. Deploying every updated version as a brand-new smart contract in Ethereum leads to problems such as migrating the contract state from the old version and enabling clients to point to the new version in a timely fashion. The OpenZeppelin framework addresses this limitation by providing libraries that enable the deployment of upgradeable smart contracts. This is achieved by relying on proxies that act as intermediaries between clients and smart contracts, allowing the latter to be updated transparently. In this paper, we present the upgradeable smart contract patterns supported by OpenZeppelin and compare them in terms of security, cost, and performance. To show this paradigm's prevalence in Ethereum, we also analyse the usage of OpenZeppelin Upgradeable smart contracts over the last four years.

show abstract

Section: Methodsmentioning

confidence: 99%

A Review of Upgradeable Smart Contract Patterns based on OpenZeppelin Technique

Amri¹,

Aniello²,

Sassone³

2023

The JBBA

View full text Add to dashboard Cite

show abstract

Automatic Patch Generation System for Smart Contract

Guo

2023

2023 IEEE 6th Eurasian Conference on Educational Innovation (ECEI)

View full text Add to dashboard Cite

A systematic literature review of undiscovered vulnerabilities and tools in smart contract technology

Zaazaa,

El Bakkali

2023

Journal of Intelligent Systems

View full text Add to dashboard Cite

In recent years, smart contract technology has garnered significant attention due to its ability to address trust issues that traditional technologies have long struggled with. However, like any evolving technology, smart contracts are not immune to vulnerabilities, and some remain underexplored, often eluding detection by existing vulnerability assessment tools. In this article, we have performed a systematic literature review of all the scientific research and papers conducted between 2016 and 2021. The main objective of this work is to identify what vulnerabilities and smart contract technologies have not been well studied. In addition, we list all the datasets used by previous researchers that can help researchers in building more efficient machine-learning models in the future. In addition, comparisons are drawn among the smart contract analysis tools by considering various features. Finally, various future directions are also discussed in the field of smart contracts that can help researchers to set the direction for future research in this domain.

show abstract

Full-Stack Hierarchical Fusion of Static Features for Smart Contracts Vulnerability Detection

Cited by 3 publications

References 21 publications

A Review of Upgradeable Smart Contract Patterns based on OpenZeppelin Technique

A Review of Upgradeable Smart Contract Patterns based on OpenZeppelin Technique

Automatic Patch Generation System for Smart Contract

A systematic literature review of undiscovered vulnerabilities and tools in smart contract technology

Contact Info

Product

Resources

About