paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Olympia: Fuzzer Benchmarking for Solidity

Olympia:面向 Solidity 的模糊测试基准生成
ASE Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering2024匹配度 2/10 · 该论文聚焦智能合约模糊测试的基准生成与评测,与用户核心方向(静态分析、LLM/Agent、浮点程序分析、贝叶斯程序分析)无直接关联,仅与“在缺乏基准的重要场景下设计基准”这一兴趣点有微弱交集。引用 1 inbox
Jana Chadt, Christoph Hochrainer, Valentin Wüstholz, Maria Christakis
crossref: 2026-09-12

AI 速览

一句话:提出首个面向智能合约模糊测试的基准生成工具 Olympia,并据此评测四个 Solidity 模糊器。

智能合约漏洞已造成数十亿美元资产损失,学术界与工业界为此开发了多种智能合约模糊测试器,但客观比较它们的缺陷发现能力一直很困难。本文提出 Olympia——首个专为智能合约(而非通用程序)模糊测试器设计的基准生成工具。作者利用 Olympia 对四个知名的开源 Solidity 智能合约模糊测试器进行了有效性评估。该工作为智能合约模糊测试提供了可复现、可比较的基准生成方法,有助于更客观地衡量不同模糊器的漏洞发现能力。

问题
智能合约漏洞导致巨额资产损失,已有多种模糊测试器,但缺乏客观比较其缺陷发现效果的手段。
方法
提出 Olympia,首个面向智能合约模糊测试器(而非通用程序)的基准生成工具。
评估
使用 Olympia 对四个知名开源 Solidity 智能合约模糊测试器进行有效性评估。
原文摘要(Abstract)

Over the last few years, smart-contract hacks have resulted in the loss of billions of assets. To efficiently identify such vulnerabilities, academic and industrial researchers have developed several popular smart-contract fuzzers. However, it has been challenging to objectively compare their bug-finding effectiveness. In this paper, we present Olympia, the first benchmark-generation tool that is designed for smart-contract, rather than general-purpose, fuzzers. We have used Olympia to evaluate the effectiveness of four well known, open-source fuzzers for Solidity smart contracts.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot8354,
  title = {Olympia: Fuzzer Benchmarking for Solidity},
  author = {Jana Chadt and Christoph Hochrainer and Valentin Wüstholz and Maria Christakis},
  booktitle = {ASE},
  year = {2024},
  doi = {10.1145/3691620.3695352}
}