SecSEC: Securing Smart Ethereum Contracts

Abstract

Smart contracts are a driving force for the Ethereum blockchain. A smart contract is a code that resides on blockchain and executes when certain predetermined conditions are satisfied. Ethereum smart contracts handle ether (a cryptocurrency) equivalent to millions of dollars and other essential assets. A bug in the smart contract can cause financial loss and damage to essential assets. The Ethereum community has developed ample tools to detect bugs in smart contracts. However, the tools generate false reports. We plan to integrate existing tools and detect smart contract bugs by combining the best of each tool. We use the Logistic Regression model to combine the tools. We are working on a training dataset of around 40K real-world Ethereum smart contracts labelled with vulnerabilities for the Logistic Regression model. We also plan to improve individual tools by finding the drawbacks of each tool. Finally, we aim to develop a new tool that will be better than existing tools regarding precision and recall.