El Bakkali, Hanan
Unknown Affiliation

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search
Journal : Indonesian Journal of Electrical Engineering and Computer Science

SmartSentry: a comprehensive framework for automated vulnerability discovery in Ethereum smart contracts Zaazaa, Oualid; El Bakkali, Hanan
Indonesian Journal of Electrical Engineering and Computer Science Vol 38, No 1: April 2025
Publisher : Institute of Advanced Engineering and Science

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.11591/ijeecs.v38.i1.pp657-667

Abstract

In the realm of decentralized applications, smart contracts play a pivotal role in managing an extensive array of digital assets within blockchain networks. Ensuring the security of these digital assets hinges upon the adept detection of vulnerabilities present within smart contracts. Extensive research efforts have scrutinized and elucidated numerous smart contract vulnerabilities. However, certain vulnerabilities, including signature malleability, hash collision, and inconsequential code segments, remain relatively unexplored and devoid of dedicated detection tools. In response to this research gap, this paper addresses these three previously understudied vulnerabilities. We contribute to the field by creating a labeled dataset comprising vulnerable smart contracts. This dataset serves as a valuable resource for further scientific inquiries, enabling the testing and validation of various detection frameworks. Additionally, we present SmartSentry a static vulnerability detection framework capable of identifying these vulnerabilities. Using both dataflow and control flow analysis, our framework exhibits exceptional performance, successfully identifying labeled vulnerabilities and real-world vulnerabilities within production smart contracts with speed and efficiency. These efforts collectively enhance our understanding of smart contract vulnerabilities and contribute to the broader advancement of blockchain security.