一句话：系统综述并实证评估智能合约模糊测试器，建立基准与多维指标，指出未来方向。
智能合约在各类应用中日益重要，保障其安全性与可靠性至关重要。模糊测试作为一种有效的漏洞检测技术，近年来被广泛应用于智能合约，但该领域仍缺乏对合约模糊测试技术的系统性考察。本文填补这一空白：一方面全面综述当前合约模糊测试研究，另一方面开展深入实证研究，评估最先进合约模糊测试器的可用性。为保证公平评估，作者采用精心标注的基准，并引入一组务实的性能指标，从五个互补视角对模糊测试器进行评价。基于研究发现，本文为合约模糊测试器的未来研究与开发提供了方向。
Given the growing importance of smart contracts in various applications, ensuring their security and reliability is critical. Fuzzing, an effective vulnerability detection technique, has recently been widely applied to smart contracts. Despite numerous studies, a systematic investigation of smart contract fuzzing techniques remains lacking. In this paper, we fill this gap by: 1) providing a comprehensive review of current research in contract fuzzing, and 2) conducting an in-depth empirical study to evaluate state-of-the-art contract fuzzers' usability. To guarantee a fair evaluation, we employ a carefully-labeled benchmark and introduce a set of pragmatic performance metrics, evaluating fuzzers from five complementary perspectives. Based on our findings, we provide direction for the future research and development of contract fuzzers.
@inproceedings{paperbot11395,
title = {Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers},
author = {Shuohan Wu and Zihao Li and Luyi Yan and Weimin Chen and Muhui Jiang and Chenxu Wang and Xiapu Luo and Hao Zhou},
booktitle = {ICSE},
year = {2024},
doi = {10.1145/3597503.3639152}
}