ContractArmor: Attack Surface Generator for Smart Contracts

Abstract

This paper presents an ongoing study of a novel attack surface generator tool for smart contracts developed in Solidity. The tool leverages a rule-based engine and ChatGPT API for security analysis. The rule-based engine provides numerical values and key variables and functions for further analysis, while ChatGPT handles complex queries. However, ChatGPT may generate similar responses for more general questions, irrespective of the given contract code. The tool combines both approaches to identify and mitigate potential security vulnerabilities in Solidity-based smart contracts. The effectiveness of the tool is evaluated on real-world smart contracts, and its potential for detecting and preventing common attack vectors is demonstrated.