Security Analysis Methods on Ethereum Smart Contract Vulnerabilities: A Survey

Smart contracts are software programs featuring both traditional applications distributed data storage on blockchains. Ethereum is a prominent blockchain with the support of smart contracts. The smart contracts act as agents in critical decentralized applications and hold a significant of cryptocurrency to perform trusted transactions and agreements. of dollars as part of the assets held by the smart contracts were or frozen through the notorious attacks just between 2016 and 2018, such the DAO attack, Parity Multi-Sig Wallet attack, and the integer/overflow attacks. These attacks were caused by a combination of flaws in designing and implementing software codes. However, many vulnerabilities of less severity are to be discovered because of the natures of the Solidity language and the non-updateable feature of. Hence, we surveyed 16 security vulnerabilities in smart contract, and some vulnerabilities do not have a proper solution. This survey to identify the key vulnerabilities in smart contracts on Ethereum in the of their internal mechanisms and software security. By correlating 16 Ethereum vulnerabilities and 19 software issues, we predict that many attacks are yet to be exploited. And we explored many software tools to detect the security vulnerabilities of contracts in terms of static analysis, dynamic analysis, and formal. This survey presents the security problems in smart contracts with the available analysis tools and the detection methods. We also the limitations of the tools or analysis methods with respect to identified security vulnerabilities of the smart contracts.