New Approach to Optimize Vulnerabilities Management of Smart Contract in Blockchain Network

Abstract

Blockchain technology is gaining popularity today, replacing centralized data storage on a central server with a decentralized network of ledgers, thus ensuring secure information exchange. A smart contract is a program written on the blockchain that runs autonomously within the Ethereum virtual machine: a transparent and secure program, but once deployed on the blockchain network, it cannot be modified. Despite its advantage over other technologies, smart contract has become a prime target for hackers, making it difficult for developers to eliminate all vulnerabilities before its deployment. In this paper, we propose a static analysis approach aimed at reducing vulnerabilities in smart contract. Our method builds upon PASO (Parser for Solidity) and MSmart approaches: we developed a test lifecycle model for smart contracts and created a tool based on ANTLR4's G4 grammar. It involves both syntactic and lexical analysis to effectively detect bugs and vulnerabilities in smart contract. To validate our method, we used FDR (False Discovery Rate) and FNR (False Negative Rate) as evaluation metrics, data collected from SmartBugs and Etherscan. We validated our approach compared with MSmart and SmartCheck. We got higher FDR and improved FNR, indicating enhanced detection capabilities. After thorough analysis and extensive testing, our tool has proven to be both specific and high-performing.