English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

The Smart Contract Weakness Classification Registry (SWC Registry) is awidely recognized list of smart contract weaknesses specific to the Ethereumplatform. Despite the SWC Registry not being updated with new entries since2020, the sustained development of smart contract analysis tools for detectingSWC-listed weaknesses highlights their ongoing significance in the field.However, evaluating these tools has proven challenging due to the absence of alarge, unbiased, real-world dataset. To address this problem, we aim to build alarge-scale SWC weakness dataset from real-world DApp projects. We recruited 22participants and spent 44 person-months analyzing 1,199 open source auditreports from 29 security teams. In total, we identified 9,154 weaknesses anddeveloped two distinct datasets, i.e., DAPPSCAN-SOURCE and DAPPSCAN-BYTECODE.The DAPPSCAN-SOURCE dataset comprises 39,904 Solidity files, featuring 1,618SWC weaknesses sourced from 682 real-world DApp projects. However, the Solidityfiles in this dataset may not be directly compilable for further analysis. Tofacilitate automated analysis, we developed a tool capable of automaticallyidentifying dependency relationships within DApp projects and completingmissing public libraries. Using this tool, we created DAPPSCAN-BYTECODEdataset, which consists of 6,665 compiled smart contract with 888 SWCweaknesses. Based on DAPPSCAN-BYTECODE, we conducted an empirical study toevaluate the performance of state-of-the-art smart contract weakness detectiontools. The evaluation results revealed sub-par performance for these tools interms of both effectiveness and success detection rate, indicating that futuredevelopment should prioritize real-world datasets over simplistic toycontracts.

DAppSCAN: Building Large-Scale Datasets for Smart Contract Weaknesses in DApp Projects