5 results about "Solidity" patented technology

The invention discloses a method and a system for detecting the inconsistency between Solidence compilers, and solves the technical problem that the existing method for detecting the inconsistency between the Solidence compilers lacks comprehensiveness in detection of the defect of the inconsistency between the Solidence compilers and other types of cross-compiler inconsistency between the Solidence compilers. The method comprises the following steps: acquiring initial seed programs, complete source codes, official difference documents and complete source codes of corresponding actuators of a plurality of Solidiity compilers; generating explicit and implicit code block data of each compiler and a target variation rule matched with the initial seed program through the large model, and repairing through the reference compiler and the large model to obtain an initial test program variant; then finely adjusting the large model, generating a target test program variant, identifying, compiling and executing an inconsistent result; and finally, in combination with the official difference document, generating an inconsistency detection report between Solidity compilers.

This invention discloses a method and apparatus for identifying dynamic NFTs based on Solidity smart contracts, comprising the following steps: First, obtain the Solidity source code of the NFT contract, convert the smart contract source code into an abstract syntax tree (AST), then extract the function syntax tree subtrees for querying NFT metadata from the AST, and perform a preorder traversal on the extracted AST subtrees. During traversal, the AST subtrees of the extracted function call nodes are concatenated to the current traversed node, and the leaf nodes during the traversal are recorded. Finally, the traversal sequence is vectorized using the word2vec algorithm to generate feature vectors, and the feature vectors are input into a machine learning model for classification to determine whether the Solidity smart contract belongs to a dynamic NFT.

The present application belongs to the field of path search method, especially the method for realizing path search depth self-adaptive adjustment based on abstract syntax tree, aiming at the problem that the existing contract with large number of code lines has deep function call and the symbolic execution cannot cover, the contract faced by the symbolic execution is basically the low version smart contract with not more than 200 lines, ignoring the problem that the symbolic execution is difficult to cover part of path in long / complex contract, the present application proposes the following scheme, which comprises the following steps: S1: input: the open source contract on EtherScan or the smart contract source code written by the developer is taken as the program input; S2: compilation: the smart contract is compiled through the Solidity compiler, the AST information and the smart contract bytecode generated in the compilation process are collected, the present application is based on the symbolic execution technology, combines the AST information which can reflect the semantics of the smart contract source code, and adaptively adjusts the path search depth in the symbolic execution process, so as to avoid the problem that the vulnerability position cannot be detected and the coverage is low in the long contract.

The application discloses a Solidity compiler defect detection method based on cross-component fuzz testing, obtains a seed program through data cleaning on historical defect data and test programs; data with the same defect component is screened from the historical defect data of the seed program, and defect features are extracted to obtain program generation prompts, and new test programs are generated according to the program generation prompts; bytecode and error information are generated by executing the new test programs through the compiler, the bytecode is executed through the Ethereum virtual machine to output execution logs, consistency comparison is performed according to the execution logs and the error information to determine logical defects, and a defect report is generated according to the logical defects; the program triggering the defect is used to guide program variation, and the program triggering the defect and the defect description are used to trigger the key features of the defect, so that the program triggering the compiler defect can be efficiently generated, and the problem that the generated test program cannot trigger the compiler defect is solved.

The invention discloses an intelligent contract vulnerability detection method and device based on an LLaMA large language model. The method comprises the steps that an original source code data set of an intelligent contract is collected, intelligent contract source codes in the original source code data set are cleaned, a target source code data set is obtained, and the intelligent contract source codes are source codes obtained by adopting Solidiity programming language editing; according to a preset vulnerability type sequence, performing vulnerability type marking on the smart contract source code in the target source code data set; calling a source code processor of a Solidiity programming language to process the marked source code of the smart contract, and generating a fine tuning data set required by the model; pre-training the original LLaMA model by using the target source code data set to obtain an intermediate LLaMA model; a LoRA mode is used, the fine tuning data set is utilized to carry out multiple times of fine tuning on the middle LLaMA model, and a target LLaMA model is obtained; and using the target LLaMA model to carry out vulnerability identification on the Solidiity smart contract source code. The technical problem of low vulnerability detection accuracy of the smart contract in the related technology is solved.