中文
相关论文

相关论文: A Systematic Classification of Vulnerabilities in …

200 篇论文

Smart contract vulnerabilities pose significant security risks to blockchain systems, potentially leading to severe financial losses. Existing methods face several limitations: (1) Program analysis-based approaches rely on predefined…

软件工程 · 计算机科学 2025-04-17 Hang Yuan , Lei Yu , Zhirong Huang , Jingyuan Zhang , Junyi Lu , Shiqi Cheng , Li Yang , Fengjun Zhang , Jiajia Ma , Chun Zuo

Smart contracts concentrate high value assets and complex logic in small, immutable programs, where even minor bugs can cause major losses. Existing taxonomies and tools remain fragmented, organized around symptoms such as reentrancy rather…

密码学与安全 · 计算机科学 2025-11-13 Parsa Hedayatnia , Tina Tavakkoli , Hadi Amini , Mohammad Allahbakhsh , Haleh Amintoosi

Poorly designed smart contracts are particularly vulnerable, as they may allow attackers to exploit weaknesses and steal the virtual currency they manage. In this study, we train a model using unsupervised learning to identify…

密码学与安全 · 计算机科学 2025-04-15 Hong-Sheng Huang , Jen-Yi Ho , Hao-Wen Chen , Hung-Min Sun

Smart contracts, integral to blockchain ecosystems, enable decentralized applications to execute predefined operations without intermediaries. Their ability to enforce trustless interactions has made them a core component of platforms such…

密码学与安全 · 计算机科学 2025-06-10 Mesut Ozdag

Smart contracts on blockchains are prone to diverse security vulnerabilities that can lead to significant financial losses due to their immutable nature. Existing detection approaches often lack flexibility across vulnerability types and…

密码学与安全 · 计算机科学 2026-05-06 Xing Zhang , Keyu Zhang , Taohong Zhu , Anbang Ruan

As the Ethereum platform continues to mature and gain widespread usage, it is crucial to maintain high standards of smart contract writing practices. While bad practices in smart contracts may not directly lead to security issues, they…

密码学与安全 · 计算机科学 2026-02-03 Xiaoqi Li , Zongwei Li , Wenkai Li , Yuqing Zhang , Xin Wang

Smart contracts are software programs featuring both traditional applications and distributed data storage on blockchains. Ethereum is a prominent blockchain platform with the support of smart contracts. The smart contracts act as…

密码学与安全 · 计算机科学 2020-09-18 Purathani Praitheeshan , Lei Pan , Jiangshan Yu , Joseph Liu , Robin Doss

WebAssembly (WASM) has emerged as a crucial technology in smart contract development for several blockchain platforms. Unfortunately, since their introduction, WASM smart contracts have been subject to several security incidents caused by…

密码学与安全 · 计算机科学 2024-12-06 Wansen Wang , Caichang Tu , Zhaoyi Meng , Wenchao Huang , Yan Xiong

Vulnerability Detection (VD) using machine learning faces a significant challenge: the vast diversity of vulnerability types. Each Common Weakness Enumeration (CWE) represents a unique category of vulnerabilities with distinct…

密码学与安全 · 计算机科学 2024-08-06 Syafiq Al Atiiq , Christian Gehrmann , Kevin Dahlén , Karim Khalil

Recent years have seen smart contracts are getting increasingly popular in building trustworthy decentralized applications. Previous research has proposed static and dynamic techniques to detect vulnerabilities in smart contracts. These…

软件工程 · 计算机科学 2022-07-06 Jiaming Ye , Mingliang Ma , Yun Lin , Lei Ma , Yinxing Xue , Jianjun Zhao

Smart contract vulnerabilities have caused billions in financial losses, raising questions about whether programming language paradigms can reduce security overhead. While imperative languages like Solidity require developers to manually…

软件工程 · 计算机科学 2026-05-22 Matteo Vaccargiu , Andrea Pinna , Maria Ilaria Lunesu , Giuseppe Destefanis

The widespread lack of broad source code verification on blockchain explorers such as Etherscan, where despite 78,047,845 smart contracts deployed on Ethereum (as of May 26, 2025), a mere 767,520 (< 1%) are open source, presents a severe…

密码学与安全 · 计算机科学 2025-06-25 Isaac David , Liyi Zhou , Dawn Song , Arthur Gervais , Kaihua Qin

The security of smart contracts is critical in blockchain systems, where even minor vulnerabilities can lead to substantial financial losses. Researchers proposed several vulnerability detection tools evaluated using existing benchmarks.…

软件工程 · 计算机科学 2025-04-23 Gerardo Iuliano , Luigi Allocca , Matteo Cicalese , Dario Di Nucci

While smart contracts are foundational elements of blockchain applications, their inherent susceptibility to security vulnerabilities poses a significant challenge. Existing training datasets employed for vulnerability detection tools may…

密码学与安全 · 计算机科学 2024-10-31 Cuong Tran Manh , Hieu Dinh Vo

As blockchain technology and smart contracts become widely adopted, securing them throughout every stage of the transaction process is essential. The concern of improved security for smart contracts is to find and detect vulnerabilities…

密码学与安全 · 计算机科学 2025-03-11 S M Mostaq Hossain , Amani Altarawneh , Jesse Roberts

Smart contracts on public blockchains now manage large amounts of value, and vulnerabilities in these systems can lead to substantial losses. As AI agents become more capable at reading, writing, and running code, it is natural to ask how…

Weaknesses in computer systems such as faults, bugs and errors in the architecture, design or implementation of software provide vulnerabilities that can be exploited by attackers to compromise the security of a system. Common Weakness…

机器学习 · 计算机科学 2021-02-24 Siddhartha Shankar Das , Edoardo Serra , Mahantesh Halappanavar , Alex Pothen , Ehab Al-Shaer

Smart contracts are programs that execute transactions involving independent parties and cryptocurrencies. As programs, smart contracts are susceptible to a wide range of errors and vulnerabilities. Such vulnerabilities can result in…

密码学与安全 · 计算机科学 2023-07-03 Sundas Munir , Walid Taha

Ethereum smart contracts are public, immutable and distributed and, as such, they are prone to vulnerabilities sourcing from programming mistakes of developers. This paper presents SAFEVM, a verification tool for Ethereum smart contracts…

编程语言 · 计算机科学 2019-06-13 Elvira Albert , Jesús Correas , Pablo Gordillo , Guillermo Román-Díez , Albert Rubio

This paper introduces a method for detecting vulnerabilities in smart contracts using static analysis and a multi-objective optimization algorithm. We focus on four types of vulnerabilities: reentrancy, call stack overflow, integer…

软件工程 · 计算机科学 2024-10-02 Dongcheng Li , W. Eric Wong , Xiaodan Wang , Sean Pan , Liang-Seng Koh