Vulseye: Detect Smart Contract Vulnerabilities via Stateful Directed Graybox Fuzzing
Wuhan University · Nanyang Technological University · +1 more institution
Abstract
Smart contracts, the cornerstone of decentralized applications, have become increasingly prominent in revolutionizing the digital landscape. However, vulnerabilities in smart contracts pose great risks to user assets and undermine overall trust in decentralized systems. Fuzzing, a prominent security testing technique, is extensively explored to detect vulnerabilities. But current smart contract fuzzers fall short of expectations in testing efficiency for two primary reasons. Firstly, smart contracts are stateful programs, and existing approaches, primarily coverage-guided, lack effective feedback from the contract state. Consequently, they struggle to effectively explore the contract state space. Secondly,…
Citation impact
- FWCI
- 94.42
- Percentile
- 100%
- References
- 43
Authors
9Topics & keywords
- Fuzz testing
- Stateful firewall
- Computer science
- Computer security
- Programming language
- Software
- Network packet