Thu 26 Aug 2021 07:00 - 07:10 - Dependability—Blockchain 1 Chair(s): John Grundy
Smart contracts have been increasingly used together with blockchains to automate financial and business transactions. However, many bugs and vulnerabilities have been identified in many contracts which raises serious concerns about smart contract security, not to mention that the blockchain systems on which the smart contracts are built can be buggy. Thus, there is a significant need to better maintain smart contract code and ensure its high reliability. In this paper, we propose an automated approach to learn characteristics of smart contracts in Solidity, which is useful for clone detection, bug detection, and contract validation on smart contracts. Our new approach is based on word embeddings and vector space comparison. We parse smart contract code into word streams with code structural information, convert code elements (e.g., statements, functions) into numerical vectors that are supposed to encode the code syntax and semantics, and compare the similarities among the vectors encoding code and known bugs, to identify potential issues. We have implemented the approach in a prototype, named SmartEmbed, and evaluated it with more than 22,000 smart contracts collected from the Ethereum blockchain. Results show that our tool can effectively identify many repetitive instances of Solidity code, where the clone ratio is around 90%. Code clones such as type-III or even type-IV semantic clones can also be detected accurately. Our tool can identify more than 1000 clone-related bugs based on our bug databases efficiently and accurately. Our tool can also help to efficiently validate any given smart contract against a known set of bugs, which can help to improve the users’ confidence in the reliability of the contract.
Wed 25 AugDisplayed time zone: Athens change
19:00 - 20:00 | Dependability—Blockchain 1Journal First / Research Papers / Industry Papers +12h Chair(s): Luciano Baresi Politecnico di Milano | ||
19:00 10mPaper | Checking Smart Contracts with Structural Code Embedding Journal First Zhipeng Gao Monash University, Lingxiao Jiang Singapore Management University, Xin Xia Huawei Technologies, David Lo Singapore Management University, John Grundy Monash University | ||
19:10 10mPaper | ÐArcher: Detecting On-Chain-Off-Chain Synchronization Bugs in Decentralized Applications Research Papers Wuqi Zhang Hong Kong University of Science and Technology, Lili Wei Hong Kong University of Science and Technology, Shuqing Li Southern University of Science and Technology, Yepang Liu Southern University of Science and Technology, Shing-Chi Cheung Hong Kong University of Science and Technology DOI Pre-print | ||
19:20 10mPaper | Making Smart Contract Development More Secure and Easier Industry Papers Meng Ren Tsinghua University, Fuchen Ma Tsinghua University, Zijing Yin Tsinghua University, Ying Fu Ant Group, Huizhong Li WeBank, Wanli Chang University of York, Yu Jiang Tsinghua University DOI | ||
19:30 30mLive Q&A | Q&A (Dependability—Blockchain 1) Research Papers |
Thu 26 AugDisplayed time zone: Athens change
07:00 - 08:00 | Dependability—Blockchain 1Industry Papers / Journal First / Research Papers Chair(s): John Grundy Monash University | ||
07:00 10mPaper | Checking Smart Contracts with Structural Code Embedding Journal First Zhipeng Gao Monash University, Lingxiao Jiang Singapore Management University, Xin Xia Huawei Technologies, David Lo Singapore Management University, John Grundy Monash University | ||
07:10 10mPaper | ÐArcher: Detecting On-Chain-Off-Chain Synchronization Bugs in Decentralized Applications Research Papers Wuqi Zhang Hong Kong University of Science and Technology, Lili Wei Hong Kong University of Science and Technology, Shuqing Li Southern University of Science and Technology, Yepang Liu Southern University of Science and Technology, Shing-Chi Cheung Hong Kong University of Science and Technology DOI Pre-print | ||
07:20 10mPaper | Making Smart Contract Development More Secure and Easier Industry Papers Meng Ren Tsinghua University, Fuchen Ma Tsinghua University, Zijing Yin Tsinghua University, Ying Fu Ant Group, Huizhong Li WeBank, Wanli Chang University of York, Yu Jiang Tsinghua University DOI | ||
07:30 30mLive Q&A | Q&A (Dependability—Blockchain 1) Research Papers |