Investigating Static Analyzers Detection Capabilities on Ethereum Smart Contracts

Abstract

Ethereum smart contracts had ever-increasing development in recent years. Hidden vulnerabilities can not be patched once a smart contract is deployed on a blockchain because of the code immutability. The use of static analyzers reduces the number of vulnerabilities in smart contracts. The paper focuses on the outcomes of some static analyzers for Solidity smart contracts. Based on a language-independent systematization of vulnerabilities, the work performs an analysis of positives detection of some static analyzers on a smart contracts dataset. Such analysis permits (i) identifying a positive correlation among some smart contracts’ metrics and tools’ outcomes, and (ii) investigating where tools detect specific classes of the systematization.