关键词: 区块链, 智能合约, 以太坊, 漏洞, 安全

Abstract: With its unique characteristics of decentralization, nontampering, and traceability, blockchain technology provides a new solution to issues such as trust, certificate storage, and data governance in social development. As the core supporting technology of blockchain, smart contract expands the application scope of blockchain from the single digital currency field to other panfinance fields by writing decentralized applications. However, with the continuous development of the application of smart contract in blockchain, its security problems are becoming increasingly prominent. Therefore, it is particularly important to study the security vulnerabilities of smart contract. This paper firstly introduces 11 kinds of smart contract security vulnerabilities such as integer overflow vulnerability, reentrancy attack vulnerability and their prevention strategies, then discusses 4 vulnerability detection methods and corresponding detection tools such as formal verification, symbolic execution, fuzzing testing and taint analysis, and finally looks forward to the future research directions based on summarizing the shortcomings of existing vulnerability detection work.

Key words: blockchain, smart contract, Ethereum, vulnerability, security