跳到正文
arXiv cs.AI· Zifan Peng, Peng Huang, Jingyi Zheng, Yingjie Xue, Xuechao Wang, Xinlei He, Xia Hu, Dongrui Liu·· 3 小时前AI 评分37

CONSTRAINTDIAL:基于协议变异的智能合约安全终身任务构建框架

Beyond Copying: Lifelong Smart Contract Security Task Construction via Protocol Mutation

AI 导读

研究者提出 CONSTRAINTDIAL 框架,通过协议变异构建智能合约安全任务,避免现有评测奖励记忆或抄袭公开链上攻击代码的答案。框架自动化本地合约重建,用攻击执行引导修改使原攻击失效但保留可利用性与正常功能,并从 203 个公开案例构建了 3,045 个覆盖检测、利用和修补的任务输入。

正文 · 原文

View PDF HTML (experimental)

Abstract:AI agents can inspect code and run tests to support smart contract security. SlowMist reports about $38.6 billion in losses across the broader blockchain ecosystem. Existing evaluations can reward memorized or copied answers, including attack code recovered from public blockchain transactions. Reconstructing contracts and validating tasks also require costly manual effort. To address these issues, we propose CONSTRAINTDIAL, a framework for lifelong construction of smart contract security tasks via protocol mutation. It automates local contract reconstruction and uses attack execution to select changes to the required calls or inputs. Execution checks guide revisions that make the original attack fail while preserving exploitability, the security objective, and normal functionality. New incidents and audit findings enter the same procedure. With CONSTRAINTDIAL, we construct 3,045 task inputs from 203 public cases, covering detect, exploit, and patch. Compared with reconstruction alone, protocol mutation reduces success with supplied public answers by 10.9 percentage points on average across detect, exploit, and patch. The fraction of tasks solved by copying online answers falls by 9.3 points.
Subjects: Cryptography and Security (cs.CR); Artificial Intelligence (cs.AI)
Cite as: arXiv:2610.32453 [cs.CR]
  (or arXiv:2610.32453v1 [cs.CR] for this version)
  https://doi.org/10.48550/arXiv.2610.32453

arXiv-issued DOI via DataCite (pending registration)

Submission history

From: Zifan Peng [view email]
[v1] Fri, 23 Oct 2026 10:17:43 UTC (439 KB)

来源:arXiv cs.AI · arxiv.org