Audit-Driven Signature Tracing for Smart Contract Safety

Explore a novel approach to enhancing smart contract security through bytecode-level signature extraction from audit reports in this 33-minute conference talk. Learn how smart contract ecosystems suffer from repeated vulnerabilities due to widespread code reuse across forks and clones, and discover why traditional audit reports lack the structure needed for traceability and automated flaw detection. Understand the proposed methodology for extracting signatures from known vulnerable and patched functions based on existing audit reports, which can serve as reusable safety metadata to identify one-day vulnerabilities in deployed contracts. Examine the technical framework for creating these bytecode-level signatures and their potential integration with open source security workflows and SBOM-like systems. Gain insights into early-stage tooling concepts and see how this approach could revolutionize smart contract security practices by making audit findings more actionable and traceable across the ecosystem.