Uploaded July 2025 | Updated September 2026, 3 hours ago

---

This presentation is led by Marco Simplicio from University of São Paulo.

There are today many automated tools and techniques aimed at detecting vulnerabilities in smart contracts, increasing confidence on their correct behavior. Albeit promising, and even used in real-world auditing procedures, in principle it is hard to compare those tools, or even to determine whether or not they can accurately identify a particular vulnerability.

Aiming to close this gap, we built an open database containing smart contracts with common vulnerabilities, which we used for: (1) benchmarking vulnerability detection tools, allowing a baseline comparison between them; (2) identifying some vulnerabilities that are commonly ignored by such tools. The goal of the presentation is describe the database construction strategy, the results obtained with the comparison, and list the tools that, combined, can more accurately find bugs in smart contracts written with Solidity.

Learn more about Apex at xrpledgerapex.com