Smart Contract and Its Security in Blockchain
Hui Li, Han Wang · 2024
This chapter provides an overview of smart contracts, their inherent security vulnerabilities as well as approaches to detecting vulnerabilities. It first discusses the concept of smart contracts and their vital role in driving Web 3.0 applications across various domains. Then, vulnerabilities are explored at different layers including Solidity, Ethereum Virtual Machine (EVM), block and Web 3.0. A taxonomy of vulnerability detection techniques is presented, covering formal verification, symbolic execution, fuzzing, taint analysis, and machine learning. Significant tools based on these techniques are analyzed and compared. The chapter aims to systematically categorize methodologies and evaluate existing solutions to address security risks associated with smart contracts.