A Review of Code Vulnerability Detection Techniques Based on Static Analysis

Blockchain-based applications, such as web3.0, play an increasingly important role in the future internet, but security issues pose a significant threat to their development. Static analysis techniques can help mitigate software vulnerabilities, including those in smart contracts, by analyzing the source code of blockchain-based applications without executing it to identify potential security issues. This paper provides a comprehensive overview of the relationship between blockchain-based applications and static analysis-based code vulnerability detection techniques with a focus on smart contracts. First, it introduces the background of both blockchain and static analysis techniques. Then, it discusses the theoretical foundation of static analysis and the different analysis methods based on intermediate representations of code. It also offers a review of the key techniques and achievements in the fields of traditional static analysis and learning-based analysis, highlighting the particular challenges of applying them to smart contracts. Finally, the paper discusses the challenges in code vulnerability detection based on static analysis and provides potential future research directions. Our literature review aims to provide software developers and researchers with a comprehensive perspective on the relationship among blockchain-based applications, smart contracts and static analysis-based code vulnerability detection techniques, which can help enhance the security of these applications and promote their practical application in the future internet.