Recently, I’ve researched white-box testing tools for solidity contract.
IMO, most of the recent papers have threats to the validity of their test sets.
Usually, they collect all different verified contract from Etherscan.
And that’s all.
We’d better prepare the rigid standard for comparing and testing the accuracy of the verifiers.
I’ve kickstarted a project called VeriSmartBench similar to BigCloneBench and ethereum-analyzer-suites-runner for research purpose.
Currently, the project only contains smart contracts worth to analyze selected by certain conditions: “>= 30 TX history”, “>= 1ETH deposits”.
But the goal of the project is
- Integrate with popular white-box tools.
- Support real-world vulnerable codes like Juliet Test Suite.
- Describe details of the vulnerability.
Is it seems to be meaningful? If then, which work should be the first?