Smart contracts are self-executing programs on blockchain platforms like Ethereum, which have revolutionized decentralized finance by enabling trustless transactions and the operation of decentralized applications. Despite their potential, the security of smart contracts remains a critical concern due to their immutability and transparency, which expose them to malicious actors. Numerous solutions for vulnerability detection have been proposed, but it is still unclear which one is the most effective. This paper presents a systematic literature review that explores vulnerabilities in Ethereum smart contracts, focusing on automated detection tools and benchmark evaluation. We reviewed 3,380 studies from five digital libraries and five major software engineering conferences, applying a structured selection process that resulted in 222 high-quality studies. The key results include a hierarchical taxonomy of 192 vulnerabilities grouped into 13 categories, a comprehensive list of 219 detection tools with corresponding functionalities, methods, and code transformation techniques, a mapping between our taxonomy and the list of tools, and a collection of 133 benchmarks used for tool evaluation. We conclude with a discussion about the insights into the current state of Ethereum smart contract security and directions for future research.

翻译：智能合约是以太坊等区块链平台上的自执行程序，通过实现无需信任的交易和去中心化应用的运行，彻底改变了去中心化金融领域。尽管潜力巨大，但智能合约的不可篡改性和透明性使其面临恶意攻击者的威胁，其安全性仍是关键问题。目前已提出多种漏洞检测方案，但何种方案最为有效仍不明确。本文通过系统性文献综述，深入探讨以太坊智能合约的漏洞问题，重点关注自动化检测工具与基准测试评估。我们检索了五个数字图书馆及五个主要软件工程会议的3,380项研究，通过结构化筛选流程最终纳入222项高质量研究。核心成果包括：涵盖13个类别共192种漏洞的层次化分类体系、包含219个检测工具及其对应功能、方法与代码转换技术的完整清单、分类体系与工具清单的映射关系，以及用于工具评估的133个基准测试集。最后，本文讨论了当前以太坊智能合约安全的研究现状，并展望了未来研究方向。