Research on Blockchain Smart Contracts Vulnerability and A Code Audit Tool based on Matching Rules

Abstract

As an emerging service architecture of multi-technology integration, blockchain draws the attention of public because of smart contracts which implement a secure and tamper-proof programming. However, due to the complexity of this architecture, there exists endless attacks against blockchain. Smart contracts as the application layer prototype of blockchain, face more severe security risks. This paper detailly lists the security events of smart contracts in recent years, summarizes several common attack modes, then introduces their principles and analyzes the commonness. Finally, an original version of the contract code audit tool based on matching rules is given. The tool can ensure that the contract has a complete audit process before deployment, so as to decrease the DApp vulnerability caused by poor programming. Moreover, the matching rule library supports customization, the tool can be updated timely to enhance its audit ability.