What are the Actual Flaws in Important Smart Contracts (and How Can We Find Them)?.
No ratings
Presented at FinancialCryptographyandDataSecurity 2020 by
An important problem in smart contract security is understanding the likelihood and criticality of discovered, or potential, weaknesses in contracts. In this paper we provide a summary of Ethereumsmart contract audits performed for 23 professional stakeholders, avoiding the common problem of reporting issues mostly prevalent in lowquality contracts. These audits were performed at a leading companyin blockchain security, using both open-source and proprietary tools, aswell as human code analysis performed by professional security engineers.We categorize 246 individual defects, making it possible to compare theseverity and frequency of different vulnerability types, compare smartcontract and non-smart contract flaws, and to estimate the efficacy ofautomated vulnerability detection approaches.