To Healthier Ethereum: A Comprehensive and Iterative Smart Contract Weakness Enumeration
Jiachi Chen, Mingyuan Huang, Zewei Lin, Peilin Zheng, Zibin Zheng

TL;DR
This paper presents SWE, a comprehensive, up-to-date, and iterative vulnerability list for Ethereum smart contracts, addressing gaps in existing lists by including recent vulnerabilities and proposing mechanisms for ongoing maintenance.
Contribution
It introduces SWE, a new systematic vulnerability enumeration for smart contracts, with a scalable update process to keep it current and comprehensive.
Findings
Collected 273 vulnerabilities from 86 papers
Identified 40 common contract weaknesses
Classified weaknesses into 20 sub-research fields
Abstract
With the increasing popularity of cryptocurrencies and blockchain technology, smart contracts have become a prominent feature in developing decentralized applications. However, these smart contracts are susceptible to vulnerabilities that hackers can exploit, resulting in significant financial losses. In response to this growing concern, various initiatives have emerged. Notably, the SWC vulnerability list played an important role in raising awareness and understanding of smart contract weaknesses. However, the SWC list lacks maintenance and has not been updated with new vulnerabilities since 2020. To address this gap, this paper introduces the Smart Contract Weakness Enumeration (SWE), a comprehensive and practical vulnerability list up until 2023. We collect 273 vulnerability descriptions from 86 top conference papers and journal papers, employing open card sorting techniques to…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsBlockchain Technology Applications and Security · Cryptography and Data Security · Spam and Phishing Detection
