Ethereum Smart Contracts Under Scrutiny: A Survey of Security Verification Tools, Techniques, and Challenges

Smart contracts are self-executing programs that facilitate trustless transactions between multiple parties, most commonly deployed on the Ethereum blockchain. They have become integral to decentralized applications in areas such as voting, digital agreements, and financial systems. However, the imm...

Full description

Saved in:
Bibliographic Details
Main Authors: Mounira Kezadri Hamiaz, Maha Driss
Format: Article
Language:English
Published: MDPI AG 2025-06-01
Series:Computers
Subjects:
Online Access:https://www.mdpi.com/2073-431X/14/6/226
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1849432729010044928
author Mounira Kezadri Hamiaz
Maha Driss
author_facet Mounira Kezadri Hamiaz
Maha Driss
author_sort Mounira Kezadri Hamiaz
collection DOAJ
description Smart contracts are self-executing programs that facilitate trustless transactions between multiple parties, most commonly deployed on the Ethereum blockchain. They have become integral to decentralized applications in areas such as voting, digital agreements, and financial systems. However, the immutable and transparent nature of smart contracts makes security vulnerabilities especially critical, as deployed contracts cannot be modified. Security flaws have led to substantial financial losses, underscoring the need for robust verification before deployment. This survey presents a comprehensive review of the state of the art in smart contract security verification, with a focus on Ethereum. We analyze a wide range of verification methods, including static and dynamic analysis, formal verification, and machine learning, and evaluate 62 open-source tools across their detection accuracy, efficiency, and usability. In addition, we highlight emerging trends, challenges, and the need for cross-methodological integration and benchmarking. Our findings aim to guide researchers, developers, and security auditors in selecting and advancing effective verification approaches for building secure and reliable smart contracts.
format Article
id doaj-art-838fa31708904b4aa98f6cfcda8b24df
institution Kabale University
issn 2073-431X
language English
publishDate 2025-06-01
publisher MDPI AG
record_format Article
series Computers
spelling doaj-art-838fa31708904b4aa98f6cfcda8b24df2025-08-20T03:27:17ZengMDPI AGComputers2073-431X2025-06-0114622610.3390/computers14060226Ethereum Smart Contracts Under Scrutiny: A Survey of Security Verification Tools, Techniques, and ChallengesMounira Kezadri Hamiaz0Maha Driss1Computer Science and Information Department, Applied College, Taibah University, Madinah 42353, Saudi ArabiaRobotics and Internet-of-Things Laboratory, Computer Science Department, College of Computer and Information Sciences, Prince Sultan University, Riyadh 11586, Saudi ArabiaSmart contracts are self-executing programs that facilitate trustless transactions between multiple parties, most commonly deployed on the Ethereum blockchain. They have become integral to decentralized applications in areas such as voting, digital agreements, and financial systems. However, the immutable and transparent nature of smart contracts makes security vulnerabilities especially critical, as deployed contracts cannot be modified. Security flaws have led to substantial financial losses, underscoring the need for robust verification before deployment. This survey presents a comprehensive review of the state of the art in smart contract security verification, with a focus on Ethereum. We analyze a wide range of verification methods, including static and dynamic analysis, formal verification, and machine learning, and evaluate 62 open-source tools across their detection accuracy, efficiency, and usability. In addition, we highlight emerging trends, challenges, and the need for cross-methodological integration and benchmarking. Our findings aim to guide researchers, developers, and security auditors in selecting and advancing effective verification approaches for building secure and reliable smart contracts.https://www.mdpi.com/2073-431X/14/6/226blockchainEthereumsmart contractsformal verificationtesting
spellingShingle Mounira Kezadri Hamiaz
Maha Driss
Ethereum Smart Contracts Under Scrutiny: A Survey of Security Verification Tools, Techniques, and Challenges
Computers
blockchain
Ethereum
smart contracts
formal verification
testing
title Ethereum Smart Contracts Under Scrutiny: A Survey of Security Verification Tools, Techniques, and Challenges
title_full Ethereum Smart Contracts Under Scrutiny: A Survey of Security Verification Tools, Techniques, and Challenges
title_fullStr Ethereum Smart Contracts Under Scrutiny: A Survey of Security Verification Tools, Techniques, and Challenges
title_full_unstemmed Ethereum Smart Contracts Under Scrutiny: A Survey of Security Verification Tools, Techniques, and Challenges
title_short Ethereum Smart Contracts Under Scrutiny: A Survey of Security Verification Tools, Techniques, and Challenges
title_sort ethereum smart contracts under scrutiny a survey of security verification tools techniques and challenges
topic blockchain
Ethereum
smart contracts
formal verification
testing
url https://www.mdpi.com/2073-431X/14/6/226
work_keys_str_mv AT mounirakezadrihamiaz ethereumsmartcontractsunderscrutinyasurveyofsecurityverificationtoolstechniquesandchallenges
AT mahadriss ethereumsmartcontractsunderscrutinyasurveyofsecurityverificationtoolstechniquesandchallenges