Hello, Cheshire cats! 😁✨
I recently came across an interesting article about how AI is used to find vulnerabilities in smart contracts and write real exploits 🔹🧬
First, let's look at what smart contracts are✅ These are programs that run on the blockchain and manage assets, tokens, etc. Contracts are usually written in Solidity for the Ethereum network or other blockchains like Binance Smart Chain.
The problem is that these contracts often contain a bunch of legacies and also have bugs 💊
Errors can range from incorrect logic to vulnerabilities that allow attackers to steal tokens. For example, in 2024 there was a case with the Penpie protocol when $27 million in Eth was stolen due to a reentrancy vulnerability.
There are several ways to find such problems🔑
The first way is to use tools like fuzzers that search for vulnerabilities based on predefined patterns. However, complex attacks, such as manipulation of MEV (maximum recoverable value) or reentrancy (re-entry), are usually not found by such tools. The second way is to hire auditors who manually check the code. But it is expensive and takes a lot of time.
The article described a new approach⚙️ Researchers have developed the A1 system, which uses an AI language model with six tools.🛠 These tools are needed for A1 to find vulnerabilities in smart contracts and check if they can be exploited, or if this is a false positive.
P.S
I also found some similar tools on GitHub:
IAcontract: A tool for finding vulnerabilities in smart contracts. He makes reports with examples of exploitation. Similar to A1, with an emphasis on automation and convenience for developers.
Automated-Vulnerability-Scanning-with-Agentic-AI: Here, several AI agents work together to find vulnerabilities.
Aether: A framework for deep analysis of smart contract code to find unconventional vulnerabilities, as A1 does.
#smart_contract #tools #crypto #crypto_protection #attacks #pentest #explication #neural_networks
I recently came across an interesting article about how AI is used to find vulnerabilities in smart contracts and write real exploits 🔹🧬
First, let's look at what smart contracts are✅ These are programs that run on the blockchain and manage assets, tokens, etc. Contracts are usually written in Solidity for the Ethereum network or other blockchains like Binance Smart Chain.
The problem is that these contracts often contain a bunch of legacies and also have bugs 💊
Errors can range from incorrect logic to vulnerabilities that allow attackers to steal tokens. For example, in 2024 there was a case with the Penpie protocol when $27 million in Eth was stolen due to a reentrancy vulnerability.
There are several ways to find such problems🔑
The first way is to use tools like fuzzers that search for vulnerabilities based on predefined patterns. However, complex attacks, such as manipulation of MEV (maximum recoverable value) or reentrancy (re-entry), are usually not found by such tools. The second way is to hire auditors who manually check the code. But it is expensive and takes a lot of time.
The article described a new approach⚙️ Researchers have developed the A1 system, which uses an AI language model with six tools.🛠 These tools are needed for A1 to find vulnerabilities in smart contracts and check if they can be exploited, or if this is a false positive.
P.S
I also found some similar tools on GitHub:
IAcontract: A tool for finding vulnerabilities in smart contracts. He makes reports with examples of exploitation. Similar to A1, with an emphasis on automation and convenience for developers.
Automated-Vulnerability-Scanning-with-Agentic-AI: Here, several AI agents work together to find vulnerabilities.
Aether: A framework for deep analysis of smart contract code to find unconventional vulnerabilities, as A1 does.
#smart_contract #tools #crypto #crypto_protection #attacks #pentest #explication #neural_networks