Initial Attempt at Automated Vulnerability Fixing of Obfuscated Smart Contracts Using a Large Language Model

Countermeasures against vulnerabilities are essential for the security of smart contracts. Some recent studies have focused on automated vulnerability repair using large language models (LLMs). However, the ability of LLMs to fix unknown contracts is still unclear. To address this problem, we applied Code Llama LLM to a real-world smart contract with a vulnerability and its obfuscated version, assuming that the obfuscated version could be considered an unknown contract. We obtained three fixes generated by the LLM for each contract. Of these three, one fix was successful for each contract. While some fixes removed the vulnerability, they also altered the functionality of the contract. No clear difference was observed between the original and obfuscated contracts in terms of the LLM's repairing capability.

Authors

Institutions

Publication Details

Published
2024-11-03
DOI
https://doi.org/10.1109/icce-asia63397.2024.10773661
Citations
1
Primary Topic
FinTech, Crowdfunding, Digital Finance
Type
article
Field-Weighted Citation Impact
0.53
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Initial Attempt at Automated Vulnerability Fixing of Obfuscated Smart Contracts Using a Large Language Model

Tatsuhiro Tsuchiya, Chihiro Kado
1 citations
FinTech, Crowdfunding, Digital Finance
0.53
article

Initial Attempt at Automated Vulnerability Fixing of Obfuscated Smart Contracts Using a Large Language Model

Tatsuhiro Tsuchiya, Chihiro Kado
article en
1 citations

Abstract

Countermeasures against vulnerabilities are essential for the security of smart contracts. Some recent studies have focused on automated vulnerability repair using large language models (LLMs). However, the ability of LLMs to fix unknown contracts is still unclear. To address this problem, we applied Code Llama LLM to a real-world smart contract with a vulnerability and its obfuscated version, assuming that the obfuscated version could be considered an unknown contract. We obtained three fixes generated by the LLM for each contract. Of these three, one fix was successful for each contract. While some fixes removed the vulnerability, they also altered the functionality of the contract. No clear difference was observed between the original and obfuscated contracts in terms of the LLM's repairing capability.

The University of Osaka (JP)
Reduced inequalities
Openalex Percentile: Top 22%
FinTech, Crowdfunding, Digital Finance
0.53
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.