SolaSim: Clone Detection for Solana Smart Contracts via Program Representation

doi:10.1145/3643916.3644406

科研成果详情

题名	SolaSim: Clone Detection for Solana Smart Contracts via Program Representation
作者	Wang，Che 1; Li，Yue 2; Gao，Jianbo 1; Wang，Ke 1; Zhang，Jiashuo 1; Guan，Zhi 3; Chen，Zhong 1
发表日期	2024
会议名称	32nd IEEE/ACM International Conference on Program Comprehension, ICPC 2024
会议录名称	IEEE International Conference on Program Comprehension
ISSN	2643-7147
页码	258-269
会议日期	2024-04-15——2024-04-15
会议地点	prt,Lisbon
摘要	The open-source nature of smart contracts provides the facility for developers to clone contracts and introduces the risk of vulnerability proliferation as well. Despite intensive research on smart contract clone detection in recent years, existing techniques are still unsatisfactory in detecting Solana smart contracts. To fill this gap, in this paper, we designed a clone detection tool SolaSim for Solana smart contracts and conducted an empirical study to understand the code reuse in the Solana ecosystem. Specifically, SolaSim is based on the semantic metadata extractor and the similarity checker. For each contract, the semantic metadata extractor generates an instruction-level weighted Attributed Control Flow Graph (ACFG) and its semantic metadata (i.e., a combination of high-level semantic and structure information) based on Rust Mid-level Intermediate Representation. The similarity checker adopts a combinatorial optimization algorithm to compute the statistical similarity of a pair of contracts. The evaluation results demonstrated the effectiveness of SolaSim in identifying clones with 94.3% accuracy and it can identify up to Type-3 clone level. Notably, we found there are over 50% clone ratios in the Solana smart contracts ecosystem, in which most of them are cloned from famous open-sourced projects.
关键词	Clone Detection Code Reuse Smart Contract Solana
DOI	10.1145/3643916.3644406
URL	查看来源
语种	英语English
Scopus入藏号	2-s2.0-85197296535
引用统计
文献类型	会议论文
条目标识符	https://repository.uic.edu.cn/handle/39GCC9TT/13451
专题	个人在本单位外知识产出
通讯作者	Wang，Che
作者单位	1.Peking University,School of Computer Science,Beijing,China 2.Taiyuan University of Technology,College of Computer Science and Technology,Taiyuan,China 3.Peking University,National Engineering Research Center For Software Engineering,Beijing,China
推荐引用方式 GB/T 7714	Wang，Che,Li，Yue,Gao，Jianboet al. SolaSim: Clone Detection for Solana Smart Contracts via Program Representation[C], 2024: 258-269.