The DOI matches its Crossref record; 24 of the 24 references it cites were found in a registry or an index.
Smart Contract: Attacks and Protections
Open accessAbstract
Smart contracts are programs that reside within decentralized blockchains and are executed pursuant to triggered instructions. A smart contract acts in a similar way to a traditional agreement but negates the necessity for the involvement of a third party. Smart contracts are capable of initiating their commands automatically, thus eliminating the involvement of a regulatory body. As a consequence of blockchain's immutable feature, smart contracts are developed in a manner that is distinct from traditional software. Once deployed to the blockchain, a smart contract cannot be modified or updated for security patches, thus encouraging developers to implement strong security strategies before deployment in order to avoid potential exploitation at a later time. However, the most recent dreadful attacks and the multifarious existing vulnerabilities which result as a consequence of the absence of security patches have challenged the sustainability of this technology. Attacks such as the Decentralized Autonomous Organization (DAO) attack and the Parity Wallet hack have cost millions of dollars simply as a consequence of naïve bugs in the smart contract code. In this paper, we classify blockchain exploitation techniques into 4 categories based on the attack rationale; attacking consensus protocols, bugs in the smart contract, malware running in the operating system, and fraudulent users. We then focus on smart contract vulnerabilities, analyzing the 7 most important attack techniques to determine the real impact on smart contract technology. We reveal that even adopting the 10 most widely used tools to detect smart contract vulnerabilities, these still contain known vulnerabilities, providing a dangerously false sense of security. We conclude the paper with a discussion about recommendations and future research lines to progress towards a secure smart contract solution.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Making Smart Contracts Smarter
Luu, L., Chu, D.-H., Olickel, H., Saxena, P., & Hobor, A. (2016) · Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2976749.2978309 · Cited by 2,249
Hawk: The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts
Kosba, A., Miller, A., Shi, E., Wen, Z., & Papamanthou, C. (2016) · 2016 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2016.55 · Cited by 2,227
A Survey of Attacks on Ethereum Smart Contracts (SoK)
Atzei, N., Bartoletti, M., & Cimoli, T. (2017) · Lecture Notes in Computer Science · doi:10.1007/978-3-662-54455-6_8 · Cited by 1,553
Securify: Practical Security Analysis of Smart Contracts
Tsankov, P., Dan, A., Drachsler-Cohen, D., Gervais, A., Bünzli, F., & Vechev, M. (2018) · Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3243734.3243780 · Cited by 1,043
A Survey of Blockchain Security Issues and Challenges
Lin, I., & Liao, T.-C. (2017) · International journal of network security · doi:10.6633/ijns.201709.19(5).01 · Cited by 999
Slither: A Static Analysis Framework for Smart Contracts
Feist, J., Grieco, G., & Groce, A. (2019) · 2019 IEEE/ACM 2nd International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB) · doi:10.1109/wetseb.2019.00008 · Cited by 872
ContractFuzzer: fuzzing smart contracts for vulnerability detection
Jiang, B., Liu, Y., & Chan, W. K. (2018) · Proceedings of the 33rd ACM/IEEE International Conference on Automated Software Engineering · doi:10.1145/3238147.3238177 · Cited by 820
ZEUS: Analyzing Safety of Smart Contracts
Kalra, S., Goel, S., Dhawan, M., & Sharma, S. (2018) · Proceedings 2018 Network and Distributed System Security Symposium · doi:10.14722/ndss.2018.23082 · Cited by 702
SmartCheck: static analysis of ethereum smart contracts
Tikhomirov, S., Voskresenskaya, E., Ivanitskiy, I., Takhaviev, R., Marchenko, E., & Alexandrov, Y. (2018) · Proceedings of the 1st International Workshop on Emerging Trends in Software Engineering for Blockchain · doi:10.1145/3194113.3194115 · Cited by 672
Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts
Mossberg, M., Manzano, F., Hennenfent, E., Groce, A., Grieco, G., Feist, J., Brunson, T., & Dinaburg, A. (2019) · 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase.2019.00133 · Cited by 391
Cited by
Security Challenges and Opportunities for Smart Contracts in Internet of Things: A Survey
Peng, K., Li, M., Huang, H., Wang, C., Wan, S., & Choo, K.-K. R. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3074544 · Cited by 130
Smart Contract Vulnerability Detection: The Role of Large Language Model (LLM)
Boi, B., Esposito, C., & Lee, S. (2024) · ACM SIGAPP Applied Computing Review · doi:10.1145/3687251.3687253 · Cited by 41
Blockchain Applications and Challenges in Smart grid
Younes, Z., Alhamrouni, I., Mekhilef, S., & Khan, M. R. B. (2021) · 2021 IEEE Conference on Energy Conversion (CENCON) · doi:10.1109/cencon51869.2021.9627297 · Cited by 28
Metadata
- Authors
- Sayeed, S., Marco-Gisbert, H., & Caira, T.
- Venue
- IEEE Access
- Published
- 2020
- Volume
- 8
- Pages
- 24416-24427
- ISSN
- 2169-3536 (ISSN-L)
- OpenAlex
- W3004205122
- Cited by
- 322
- References
- 24
- FWCI
- 38.59
- Type
- journal article
- Language
- en
- Open access
- gold
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Smart Contract: Attacks and Protections. https://app.cochat.ai/papers/10.1109/access.2020.2970495
- The paper
- Sayeed, S., Marco-Gisbert, H., & Caira, T. (2020). Smart Contract: Attacks and Protections. IEEE Access. https://doi.org/10.1109/access.2020.2970495
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.