Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers

Shuohan Wu; Zihao Li; Luyi Yan; Weimin Chen; Muhui Jiang; Chenxu Wang; Xiapu Luo; Hao Zhou

Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers

Shuohan Wu, Zihao Li, Luyi Yan, Weimin Chen, Muhui Jiang, Chenxu Wang, Xiapu Luo, Hao Zhou

Department of Computing

Research output: Chapter in book / Conference proceeding › Conference article published in proceeding or book › Academic research › peer-review

Abstract

Given the growing importance of smart contracts in various applications, ensuring their security and reliability is critical. Fuzzing, an effective vulnerability detection technique, has recently been widely applied to smart contracts. Despite numerous studies, a systematic investigation of smart contract fuzzing techniques remains lacking. In this paper, we fill this gap by: 1) providing a comprehensive review of current research in contract fuzzing, and 2) conducting an in-depth empirical study to evaluate state-of-the-art contract fuzzers' usability. To guarantee a fair evaluation, we employ a carefully-labeled benchmark and introduce a set of pragmatic performance metrics, evaluating fuzzers from five complementary perspectives. Based on our findings, we provide direction for the future research and development of contract fuzzers.

Original language	English
Title of host publication	46th International Conference on Software Engineering
Publication status	Published - Apr 2024

Cite this

@inproceedings{9e9dd6c7ce744bafb23a447d08516228,

title = "Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers",

abstract = "Given the growing importance of smart contracts in various applications, ensuring their security and reliability is critical. Fuzzing, an effective vulnerability detection technique, has recently been widely applied to smart contracts. Despite numerous studies, a systematic investigation of smart contract fuzzing techniques remains lacking. In this paper, we fill this gap by: 1) providing a comprehensive review of current research in contract fuzzing, and 2) conducting an in-depth empirical study to evaluate state-of-the-art contract fuzzers' usability. To guarantee a fair evaluation, we employ a carefully-labeled benchmark and introduce a set of pragmatic performance metrics, evaluating fuzzers from five complementary perspectives. Based on our findings, we provide direction for the future research and development of contract fuzzers.",

author = "Shuohan Wu and Zihao Li and Luyi Yan and Weimin Chen and Muhui Jiang and Chenxu Wang and Xiapu Luo and Hao Zhou",

year = "2024",

month = apr,

language = "English",

booktitle = "46th International Conference on Software Engineering",

}

TY - GEN

T1 - Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers

AU - Wu, Shuohan

AU - Li, Zihao

AU - Yan, Luyi

AU - Chen, Weimin

AU - Jiang, Muhui

AU - Wang, Chenxu

AU - Luo, Xiapu

AU - Zhou, Hao

PY - 2024/4

Y1 - 2024/4

N2 - Given the growing importance of smart contracts in various applications, ensuring their security and reliability is critical. Fuzzing, an effective vulnerability detection technique, has recently been widely applied to smart contracts. Despite numerous studies, a systematic investigation of smart contract fuzzing techniques remains lacking. In this paper, we fill this gap by: 1) providing a comprehensive review of current research in contract fuzzing, and 2) conducting an in-depth empirical study to evaluate state-of-the-art contract fuzzers' usability. To guarantee a fair evaluation, we employ a carefully-labeled benchmark and introduce a set of pragmatic performance metrics, evaluating fuzzers from five complementary perspectives. Based on our findings, we provide direction for the future research and development of contract fuzzers.

AB - Given the growing importance of smart contracts in various applications, ensuring their security and reliability is critical. Fuzzing, an effective vulnerability detection technique, has recently been widely applied to smart contracts. Despite numerous studies, a systematic investigation of smart contract fuzzing techniques remains lacking. In this paper, we fill this gap by: 1) providing a comprehensive review of current research in contract fuzzing, and 2) conducting an in-depth empirical study to evaluate state-of-the-art contract fuzzers' usability. To guarantee a fair evaluation, we employ a carefully-labeled benchmark and introduce a set of pragmatic performance metrics, evaluating fuzzers from five complementary perspectives. Based on our findings, we provide direction for the future research and development of contract fuzzers.

M3 - Conference article published in proceeding or book

BT - 46th International Conference on Software Engineering

ER -

Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers

Abstract

Fingerprint

Cite this