English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

The increased adoption of smart contracts in many industries has made them anattractive target for cybercriminals, leading to millions of dollars in losses.Thus, deploying smart contracts with detected vulnerabilities (known todevelopers) are not acceptable, and fixing all the detected vulnerabilities isneeded, which incurs high manual labor cost without effective tool support. Tofill this need, in this paper, we propose ContractFix, a novel framework thatautomatically generates security patches for vulnerable smart contracts.ContractFix is a general framework that can incorporate different fix patternsfor different types of vulnerabilities. Users can use it as a security fix-ittool that automatically applies patches and verifies the patched contractsbefore deploying the contracts. To address the unique challenges in fixingsmart contract vulnerabilities, given an input smart contract, \tool conductsour proposed ensemble identification based on multiple static verificationtools to identify vulnerabilities that are amenable for automatic fix. Then,ContractFix generates patches using template-based fix patterns and conductsprogram analysis (program dependency computation and pointer analysis) forsmart contracts to accurately infer and populate the parameter values for thefix patterns. Finally, ContractFix performs static verification that guaranteesthe patched contract is free of vulnerabilities. Our evaluations on $144$ realvulnerable contracts demonstrate that \tool can successfully fix $94\%$ of thedetected vulnerabilities ($565$ out of $601$) and preserve the expectedbehaviors of the smart contracts.

CONTRACTFIX: A Framework for Automatically Fixing Vulnerabilities in Smart Contracts