Existing tools for detecting address verification vulnerability are limited, especially the ones using dynamic analysis that are resource-intensive and time-consuming. Dynamic analysis may miss vulnerabilities in intricate contracts, thus producing false negatives. Static methods like pattern-based matching and taint analysis are considered more suitable. However, pattern-based matching relies on heuristic rules and may not comprehensively identify vulnerabilities. No existing tools effectively detect this vulnerability, necessitating new approaches to address these limitations in vulnerability detection.
Dynamic analysis requires a runtime environment for execution, which is resource-intensive and time-consuming, contrary to the lightweight goal of implementing a detector for address verification vulnerability.
Static methods are considered including pattern-based matching, symbolic execution, and taint analysis, which are seen as more suitable compared to resource-heavy dynamic analysis for detecting vulnerabilities.
Collection
[
|
...
]