SolSecure: A Security Analyzer for Integer Bugs in Smart Contracts
摘要
Blockchain is a peer-to-peer network system that stores chains of transaction data. Blockchain is decentralized and immutable. Once data is added to the chain, it cannot be modified or deleted. Smart contracts are intelligent protocols running at the application layer of blockchain, enabling trustworthy transactions without third parties. However, the openness and immutability of the architecture introduce various security risks. Integer bugs arise from improper handling of numerical variables. They pose significant dangers in smart contract because, in contracts, integer variables are often used to represent critical financial information, such as account balances, asset prices, and transaction amounts. If miscalculations occur, they can lead to substantial financial losses. This paper describes SolSecure, a framework based on abstract interpretation theory [1, 2], designed to find integer bugs in Ethereum smart contracts. Experimental results show that SolSecure can effectively detect integer vulnerabilities in Solidity smart contracts.