Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers
Abstract
Given the growing importance of smart contracts in various applications, ensuring their security and reliability is critical. Fuzzing, an effective vulnerability detection technique, has recently been widely applied to smart contracts. Despite numerous studies, a systematic investigation of smart contract fuzzing techniques remains lacking. In this paper, we fill this gap by: 1) providing a comprehensive review of current research in contract fuzzing, and 2) conducting an in-depth empirical study to evaluate state-of-the-art contract fuzzers' usability. To guarantee a fair evaluation, we employ a carefully-labeled benchmark and introduce a set of pragmatic performance metrics, evaluating fuzzers from five complementary perspectives. Based on our findings, we provide direction for the future research and development of contract fuzzers.
BibTeX
@inproceedings{Wu-al:ICSE24,
author = {Shuohan Wu and
Zihao Li and
Luyi Yan and
Weimin Chen and
Muhui Jiang and
Chenxu Wang and
Xiapu Luo and
Hao Zhou},
title = {Are We There Yet? Unraveling the {State-of-the-Art} Smart Contract Fuzzers},
booktitle = {ICSE},
pages = {127:1--127:13},
publisher = {{ACM}},
year = {2024},
}