CCS2022
VRust: Automated Vulnerability Detection for Solana Smart Contracts
Siwei Cui, Gang Zhao, Yifei Gao, Tien Tavu, Jeff Huang
31 citations
Abstract
In the rapidly evolving domain of blockchain technology, the security of smart contracts is paramount due to their immutable and transparent nature. Solana, as a prominent language for Ethereum smart contract development, presents unique challenges and vulnerabilities that can lead to significant financial losses if exploited. This research introduces an innovative approach to enhancing smart contract security by deploying a fine-tuned version of the Mistral-7B-Instruct-v0.1-sharded language model, tailored to identify and report vulnerabilities in Solana smart contracts. Utilizing a dataset specifically crafted from known Solana code vulnerabilities, the model was trained to discern and articulate potential security flaws effectively. The fine-tuning process involved rigorous adjustment of the model's parameters to optimize its accuracy and reliability. A Python-based application was developed, integrating the model to allow users to submit Solana code and receive an immediate vulnerability assessment. This paper evaluates the model's performance against traditional methods, highlighting its precision and the broader implications for automated security auditing in blockchain ecosystems. The results demonstrate that the fine-tuned language model significantly improves the efficiency and accuracy of vulnerability detection in Solana smart contracts, suggesting a scalable solution for blockchain security.