Analysis of Smart Contract Security Vulnerabilities and Tools

This Repository details the series of works on Blockchain and Smart Contract Security

Background

Started to work on Smart Contract Security as part of the Blockchain Technology Course (20CY712 and 21CY712) and expanded the project to a large scale to cater to the need for Open-Source Smart Contract Vulnerability Detection Tools.

Start Date: Nov 2021

Aim

To understand, explore and detect Vulnerabilities in Smart Contracts

• Permissionless:
• Permissioned:

Languages Focussed

• Solidity
• Vyper

Vulnerability Tracker

• Decentralized Application Security Project (DASP) 10
• Smart Contract Weakness Classification (SWC)
• Amrita Blockchain Vulnerability Tracker

Work Carried

• 2021

  • Explore Tenderly (GP, SG, STV, RG)
  • Explore Mythx (GP, SG, STV, RG)

• 2022

• 2023

  • Extensive Literature survey on the Tools and Techniques used for Smart Contract Security Analysis
  • Test Setup for identified tools
  • Execution of sample smart contracts

Credits

• P. Gnanendra Prasad (GP) guided by Ramaguru R (part of M.Tech - Blockchain Technology Course: 20CY712)
• Sreelakshmi G (SG) guided by Ramaguru R (part of M.Tech - Blockchain Technology Course: 20CY712)
• Sreelakshmi TV (STV) guided by Ramaguru R (part of M.Tech - Blockchain Technology Course: 20CY712)
• Pothuri Lakshmi Harika (PLH) guided by Ramaguru R (part of M.Tech - Blockchain Technology Course: 21CY712 and M.Tech Dissertation)
• Ruthwik Krishna Bandreddy (RKB), Vinayak R (VR), Yaswanth Gademsetti (YG), A S Deepan (ASD) part of B-RIG Sept 2023.
• Adithya N S (ANS), Anaswara Suresh M K (ASMK), C S Amritha (CSA), Joshua Anto A (JAA), Shree Harini T (SHT) part of B-RIG from Oct 2023.
• Ramaguru Radhakrishnan (RG) for Ph.D

Dissertations

• Pothuri Lakshmi Harika
  Bridging the gaps in Solidity Smart Contract Vulnerability Detection Tools

Publications

TBD