Three Sources of Blockchain Technology Vulnerabilities - how to Deal with them?
Vladimir Nikolaevich Kustov, Grokhotov Aleksey, Beksaev Nikolay, Selanteva Ekaterina, Renjith V. Ravi · 2022 Second International Conference on Computer Science, Engineering and Applications (ICCSEA) · 2022
The authors consider the problem of ensuring the security of smart contracts. The relevance of research is associated with a growing field of threats, an increase in economic risks, and the absence or insufficiency of the necessary tools to ensure the security of smart contracts. The authors begin the study by classifying the sources of vulnerabilities in smart contracts. The authors distinguish three groups: the disadvantages and limitations of the programming languages of smart contracts, the weaknesses of the blockchain technology itself, and the penalties associated with the misunderstanding or incorrect application of accepted programming methods. The authors provide a detailed classification of the vulnerabilities of smart contracts. Further, the authors show the need to use static code analyzers of smart contracts and their automation using static code analyzers of smart contracts. The final part discusses the results of an experiment to study the effectiveness of using static analyzers to improve the security of smart contracts.