This paper serves as a progress report on our research, specifically focusing on utilizing interval analysis, an existing static analysis method, for detecting vulnerabilities in smart contracts. We present a selection of motivating examples featuring vulnerable smart contracts and share the results from our experiments conducted with various existing detection tools. Our findings reveal that these tools were unable to detect the vulnerabilities in our examples. To enhance detection capabilities, we implement interval analysis on top of Slither [3], an existing detection tool, and demonstrate its effectiveness in identifying certain vulnerabilities that other tools fail to detect.
翻译:本文作为我们研究进展的报告,重点探讨如何利用区间分析(一种现有静态分析方法)检测智能合约中的漏洞。我们通过一组具有漏洞的智能合约实例来论证研究动机,并分享使用多种现有检测工具进行的实验结果。研究结果表明,这些工具无法检测出我们示例中的漏洞。为增强检测能力,我们在现有检测工具Slither[3]的基础上实现了区间分析方法,并证明了该方法在识别其他工具无法检测的特定漏洞方面的有效性。