A static code audit system and method for Ethereum smart contracts

Abstract

The invention discloses a static code audit system and method for smart contracts on the Ethereum platform of the blockchain, and belongs to the technical field of information security. The invention can detect the security threat existing on the smart contract written in the Solidity language on the Ethereum platform, locate the specific location, clarify the hazard and provide a corresponding solution. The method of the present invention: first, the user inputs the project directory to be detected or the path of a single file into the system, and the system performs a preprocessing operation on the input content, copies the entire project into the temporary working directory and deletes the annotation content in the Solidity file therein; Secondly, the system will parse each Solidity file into the form of a syntax tree through operations such as lexical analysis and syntax analysis; then, the system performs static feature matching on the syntax tree structure and the pre-established logical matching features to obtain the matching result; finally, The system classifies and summarizes the matched results to generate a report file, which is the test result.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a static code audit system and method for smart contracts on the Ethereum platform of the block chain. Background technique [0002] In a narrow sense, blockchain technology is a chained data structure that combines data blocks in a sequential manner in chronological order, and is a cryptographically guaranteed non-tamperable and unforgeable distributed ledger. Broadly speaking, blockchain technology uses block chain data structures to verify and store data, uses distributed node consensus algorithms to generate and update data, uses cryptography to ensure the security of data transmission and access, and uses automated scripts to A new distributed infrastructure and computing method for programming and manipulating data through smart contracts composed of code. [0003] Ethereum is an open source public blockchain platform with smart contract functions....

AI Technical Summary

Problems solved by technology

[0005] At present, there are many smart contract applications on the blockchain-based Ethereum platform, such as Backfeed on the social and economic platform, Augur on the decentralized prediction market, and TransActive Grid on the smart grid. However, in the development process of many applications, the design Those who only pay attention to its functionality without considering its security issues lead to potential safety hazards in the application, and because the content of the smart contract is public, anyone can analyze its source code to find loopholes

Images