Web3Bugs: Demystifying Exploitable Bugs in Smart Contracts
{"type": "project", "title": "Web3Bugs: Demystifying Exploitable Bugs in Smart Contracts", "website": "https://github.com/ZhangZhuoSJTU/Web3Bugs", "createdAt": 1682110487673, "userGithub": "ZhangZhuoSJTU", "credentials": {"twitter": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..eRZnuaZQ0nogpe2yV5eP64SPLbxHJQywsvMVQR1MY9SdbXofZnFVLboa3uUwB27FsH976B9ncorz9U3UlRH4CA", "type": "Ed25519Signature2018", "created": "2023-04-21T20:57:35.260Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2023-04-21T20:57:35.259Z", "expirationDate": "2023-07-20T20:57:35.259Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x5dAdf8d579F9F1a47F180De6542BCc44da0EC94a", "hash": "v0.0.0:2D9dDbwf6IQwely20vwUviScsdDomxHBG3frwRJfbRM=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextTwitter#i2huer"}}}, "description": "## Project Summary\n\nOur project, \"_Web3Bugs: Demystifying Exploitable Bugs in Smart Contracts_\", aims to provide a valuable resource for Web3 developers and security analysts by facilitating their understanding of exploitable bugs in _real-world_ smart contracts. \n\nBy persistently conducting in-depth analyses of exploitable bugs sourced from reputable auditing platforms and categorizing each bug based on its characteristics, we aim to elucidate the features of exploitable bugs and raise awareness that a significant portion of such bugs remain undetected by existing automated analysis tools. This initiative will inspire practitioners to develop more refined and context-sensitive automatic semantical oracles for identifying these exploitable vulnerabilities, thereby driving the advancement of cutting-edge automated or semi-automated smart contract analysis tools.\n\n## Impact\n\nThe influence of our project will be considerable for the Web3 community, as it will promote secure smart contract implementation practices and encourage the creation of safer smart contracts. By highlighting the importance of exploitable bugs, advocating for advanced vulnerability detection techniques, and emphasizing the need for human involvement in the auditing process, our project will play a pivotal role in fostering Web3 security education.\n\nBy presenting a comprehensive collection of exploitable bugs, accompanied by explanations and classifications, as well as a thorough list of vulnerability detection techniques and publicly available security analysis tools, our project will serve as an essential educational resource for Web3 developers and security analysts. Additionally, we aim to accelerate the development of automatic semantical oracles (by providing a comprehensive dataset of exploitable bugs), which will enhance smart contract security and reduce the risks associated with exploitable vulnerabilities.\n\nIn conclusion, our project will bolster the robustness and stability of the Web3 ecosystem, ultimately benefiting users and stakeholders in the decentralized finance space.", "projectTwitter": "i2huer"}