A Semantic-Based Smart Contract Defect Detection General Platform

Abstract

The emergence of smart contracts has brought blockchain into a new era. Smart contract has the feature that cannot be modified once deployed, which can ensure the credibility of smart contract. Security incidents on blockchain platforms in recent years have been linked to smart contracts. If the code of the smart contract contains defects, it may bring unpredictable risks and losses to the contract participants. Therefore, it is very necessary for smart contract to detect defects before deployment. To solve the above problems, this paper proposes a general platform for smart contract defect detection. The platform generates the abstract syntax tree of smart contracts, obtains the semantic description of corresponding functions, variables. Generate assertions by knowledge of security model libraries and semantic description of abstract syntax trees, and expressions, and then detects the defects of smart contracts. This paper introduces the design and implementation of the platform. Taking the variables parsed by the abstract syntax tree as an example, it explains in detail how the platform detects the delegatecall dangerous call vulnerability.