一句话：提出跨合约静态分析，以检测多合约交互场景中实际可触发的重入漏洞。
重入漏洞是智能合约中最严重的安全缺陷之一，近年来造成巨大经济损失。已有检测方法在待测代码涉及多个智能合约交互时，常出现不理想的误报和漏报。本文基于标题提出跨合约静态分析，用于检测实际可触发的重入漏洞，核心目标是覆盖多合约交互路径下的重入风险，提升检测准确性。摘要未给出具体分析算法、实现细节与实验评估结果。
Reentrancy bugs, one of the most severe vulnerabilities in smart contracts, have caused huge financial loss in recent years. Researchers have proposed many approaches to detecting them. However, empirical studies have shown that these approaches suffer from undesirable false positives and false negatives, when the code under detection involves the interaction between multiple smart contracts.
DOI 原文 ·
@inproceedings{paperbot5959,
title = {Cross-contract static analysis for detecting practical reentrancy vulnerabilities in smart contracts},
author = {Yinxing Xue and Mingliang Ma and Yun Lin and Yulei Sui and Jiaming Ye and Tianyong Peng},
booktitle = {ASE},
year = {2020},
doi = {10.1145/3324884.3416553}
}