Security vulnerabilities in smart contracts are a primary risk for Decentralized Finance (DeFi) and blockchain systems. Current research focuses on detection, neglecting end-to-end automated management. To address this, we propose LLM-BSCVM, an LLM-based framework for automated vulnerability management. We introduce a “Decompose–Retrieve–Generate” methodology that breaks down the workflow into six sub-tasks for specialized agents: detection, repair suggestion, risk assessment, repair, patch verification, and report generation. These agents collaborate in an automated chain, retrieving information from knowledge bases to enhance reasoning. Our evaluation shows LLM-BSCVM achieves an accuracy and F1-score over 91% in detection, comparable to state-of-the-art methods but with a lower false positive rate of 5.0%. Notably, the framework achieves a 53% success rate in automated repair and provides professional audit reports. The project is open-source at: https://github.com/sosol717/LLM-BSCVM .

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

LLM-BSCVM: LLM-Based Blockchain Smart Contract Vulnerability Management Framework

  • Yanli Jin,
  • Chunpei Li,
  • Peng Fan,
  • Peng Liu,
  • Xianxian Li,
  • Chen Liu,
  • Wangjie Qiu

摘要

Security vulnerabilities in smart contracts are a primary risk for Decentralized Finance (DeFi) and blockchain systems. Current research focuses on detection, neglecting end-to-end automated management. To address this, we propose LLM-BSCVM, an LLM-based framework for automated vulnerability management. We introduce a “Decompose–Retrieve–Generate” methodology that breaks down the workflow into six sub-tasks for specialized agents: detection, repair suggestion, risk assessment, repair, patch verification, and report generation. These agents collaborate in an automated chain, retrieving information from knowledge bases to enhance reasoning. Our evaluation shows LLM-BSCVM achieves an accuracy and F1-score over 91% in detection, comparable to state-of-the-art methods but with a lower false positive rate of 5.0%. Notably, the framework achieves a 53% success rate in automated repair and provides professional audit reports. The project is open-source at: https://github.com/sosol717/LLM-BSCVM .