一句话：提出基于字节码的轻量工具 PROXiFY，无需源码或节点即可检测并分类以太坊代理合约（含非活跃代理）。
以太坊智能合约因不可变而难以升级，代理合约模式允许在不改变合约状态的前提下替换逻辑，但现有检测方法多依赖源代码或交易历史，无法识别长期未被调用的非活跃代理。这些休眠的升级路径一旦被重新激活，便可能引入风险乃至攻击。PROXiFY 是一个基于字节码的轻量检测与分类工具，不需要以太坊节点、源代码或定制的 EVM，通过分析部署字节码中的模式特征来识别代理合约及其类型，包括非活跃代理。在高置信度基准数据集上，其精确率达到 98.6%，召回率为 97.1%。
As Ethereum smart contracts grow in complexity, upgrades are necessary but challenging due to their immutable nature. Proxy contracts enable upgrades without changing contract state, but current detection approaches often rely on source code or transaction history and fail to detect inactive proxies. Detecting these proxies is critical because dormant upgrade paths can be reactivated, introducing risks and potential attacks. We introduce PROXiFY, a lightweight bytecode-based tool that detects and classifies proxy contracts, including inactive ones, without requiring Ethereum nodes, source code, or customized EVMs. PROXiFY achieves a precision of 98.6% and recall of 97.1% on a high-confidence benchmark dataset. A demonstration of PROXiFY can be viewed at https://youtu.be/FuYs22_vosk.
DOI 原文 ·
@inproceedings{paperbot9456,
title = {PROXiFY: A Bytecode Analysis Tool for Detecting and Classifying Proxy Contracts in Ethereum Smart Contracts},
author = {Ilham Qasse and Mohammad Hamdaqa and Björn Þór Jónsson},
booktitle = {ASE},
year = {2025},
doi = {10.1109/ase63991.2025.00388}
}