Identifying Vulnerabilities in Smart Contracts using Interval Analysis

TL;DR

This paper explores the application of interval analysis to improve vulnerability detection in smart contracts, demonstrating its effectiveness over existing tools by identifying previously undetected issues.

Contribution

It introduces the integration of interval analysis with an existing detection tool, Slither, to enhance vulnerability detection in smart contracts.

Findings

Existing tools failed to detect vulnerabilities in examples.

Interval analysis successfully identified certain vulnerabilities.

Enhanced detection capabilities compared to baseline tools.

Abstract

This paper serves as a progress report on our research, specifically focusing on utilizing interval analysis, an existing static analysis method, for detecting vulnerabilities in smart contracts. We present a selection of motivating examples featuring vulnerable smart contracts and share the results from our experiments conducted with various existing detection tools. Our findings reveal that these tools were unable to detect the vulnerabilities in our examples. To enhance detection capabilities, we implement interval analysis on top of Slither [3], an existing detection tool, and demonstrate its effectiveness in identifying certain vulnerabilities that other tools fail to detect.