谷歌浏览器插件
订阅小程序
在清言上使用

SmartGraph: Static Analysis Tool for Solidity Smart Contracts.

Andrei Zhukov,Vladimir Korkhov

ICCSA (Workshops 1)(2023)

引用 1|浏览4
暂无评分
摘要
Smart contracts written in Solidity can have various vulnerabilities, which can lead to significant losses if not detected and addressed in time. Static analysis is an effective method to identify potential security issues before deploying smart contracts on the blockchain. In this paper, we present a tool for static analysis of Solidity smart contracts that uses a graph as an intermediate representation to facilitate analysis. The tool converts Solidity code into a graph structure that captures the code’s structure and dependencies, allowing analysis at a higher level of abstraction. The tool provides a set of rules for detecting various security issues such as reentrancy attacks, integer overflows, and state variables shadowing. We evaluate the tool on a set of Solidity contracts, present en experimental comparison of the tool performance compared to other existing tools, and demonstrate its effectiveness in detecting security vulnerabilities previously reported in the literature. The tool’s use of a graph-based intermediate representation enables a high level of abstraction that can capture complex relationships and dependencies between the various components of the code. Overall, the proposed tool provides an efficient and effective approach to perform static analysis of Solidity smart contracts.
更多
查看译文
关键词
static analysis tool,solidity smartgraph contracts
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要