English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Security attacks targeting smart contracts have been on the rise, which haveled to financial loss and erosion of trust. Therefore, it is important toenable developers to discover security vulnerabilities in smart contractsbefore deployment. A number of static analysis tools have been developed forfinding security bugs in smart contracts. However, despite the numerousbug-finding tools, there is no systematic approach to evaluate the proposedtools and gauge their effectiveness. This paper proposes SolidiFI, an automatedand systematic approach for evaluating smart contract static analysis tools.SolidiFI is based on injecting bugs (i.e., code defects) into all potentiallocations in a smart contract to introduce targeted security vulnerabilities.SolidiFI then checks the generated buggy contract using the static analysistools, and identifies the bugs that the tools are unable to detect(false-negatives) along with identifying the bugs reported as false-positives.SolidiFI is used to evaluate six widely-used static analysis tools, namely,Oyente, Securify, Mythril, SmartCheck, Manticore and Slither, using a set of 50contracts injected by 9369 distinct bugs. It finds several instances of bugsthat are not detected by the evaluated tools despite their claims of being ableto detect such bugs, and all the tools report many false positives

How Effective are Smart Contract Analysis Tools? Evaluating Smart Contract Static Analysis Tools Using Bug Injection