Huma Jamshed, Ansha Zahid, Rizwan Ul Hassan, Ahmad Hussain, N. Islam
{"title":"区块链智能合约漏洞调查","authors":"Huma Jamshed, Ansha Zahid, Rizwan Ul Hassan, Ahmad Hussain, N. Islam","doi":"10.31645/jisrc.22.20.2.2","DOIUrl":null,"url":null,"abstract":"Trustworthy smart contracts is usually challenging due to the multifaceted semantics of essential domain-specific languages and their testability. A vulnerability in smart contracts possibly comprises numerous code-security and may allow an attacker to gain control of a system resulting in financial tribulations. Therefore, it is very essential to design safe and secure smart contracts in blockchain’s immutable environment by applying numerous techniques for assessing flaws before deployment. Application programmers building smart contracts must test their code for vulnerabilities. Security and privacy is top in the list. The objective of this research is to explore: 1) the emerging landscape of smart contracts, 2) identifies the vulnerabilities faced by the developers and 3) What tools are available to address these issues? Our study showed: 1) comprehensive realistic studies in the smart contract security are at present lagging as related to primary studies. 2) 73% of contracts implemented in Solidity had security vulnerabilities. 3) Poor programming technique and 4) Slack programming activity.","PeriodicalId":412730,"journal":{"name":"Journal of Independent Studies and Research Computing","volume":"32 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2022-12-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Survey On Vulnerabilities In Blockchain’s Smart Contracts\",\"authors\":\"Huma Jamshed, Ansha Zahid, Rizwan Ul Hassan, Ahmad Hussain, N. Islam\",\"doi\":\"10.31645/jisrc.22.20.2.2\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Trustworthy smart contracts is usually challenging due to the multifaceted semantics of essential domain-specific languages and their testability. A vulnerability in smart contracts possibly comprises numerous code-security and may allow an attacker to gain control of a system resulting in financial tribulations. Therefore, it is very essential to design safe and secure smart contracts in blockchain’s immutable environment by applying numerous techniques for assessing flaws before deployment. Application programmers building smart contracts must test their code for vulnerabilities. Security and privacy is top in the list. The objective of this research is to explore: 1) the emerging landscape of smart contracts, 2) identifies the vulnerabilities faced by the developers and 3) What tools are available to address these issues? Our study showed: 1) comprehensive realistic studies in the smart contract security are at present lagging as related to primary studies. 2) 73% of contracts implemented in Solidity had security vulnerabilities. 3) Poor programming technique and 4) Slack programming activity.\",\"PeriodicalId\":412730,\"journal\":{\"name\":\"Journal of Independent Studies and Research Computing\",\"volume\":\"32 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2022-12-16\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Journal of Independent Studies and Research Computing\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.31645/jisrc.22.20.2.2\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of Independent Studies and Research Computing","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.31645/jisrc.22.20.2.2","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Survey On Vulnerabilities In Blockchain’s Smart Contracts
Trustworthy smart contracts is usually challenging due to the multifaceted semantics of essential domain-specific languages and their testability. A vulnerability in smart contracts possibly comprises numerous code-security and may allow an attacker to gain control of a system resulting in financial tribulations. Therefore, it is very essential to design safe and secure smart contracts in blockchain’s immutable environment by applying numerous techniques for assessing flaws before deployment. Application programmers building smart contracts must test their code for vulnerabilities. Security and privacy is top in the list. The objective of this research is to explore: 1) the emerging landscape of smart contracts, 2) identifies the vulnerabilities faced by the developers and 3) What tools are available to address these issues? Our study showed: 1) comprehensive realistic studies in the smart contract security are at present lagging as related to primary studies. 2) 73% of contracts implemented in Solidity had security vulnerabilities. 3) Poor programming technique and 4) Slack programming activity.