Smart Contract Vulnerability Detection Techniques for Hyperledger Fabric

Abstract

Hyperledger Fabric is becoming the most popular blockchain framework used by enterprises and medium-sized companies. Blockchain technology is used for many different domains like finance, voting service, land record etc. Blockchain innovation is a self-executing program called Smart Contract. Hyperledger fabric uses programming languages like Node.js, Java, and GO to implement smart contracts also called chaincode. Smart contracts are programmed to moderate critical transactions between individuals or organizations because terms and conditions embedded in the contract will be executed when certain conditions are met. So smart contract needs to be analyzed before deployment to ensure zero vulnerabilities and flaws on the blockchain application, their execution is critical against attacks which aim at stealing assets. Hence security auditing is an essential part of smart contract development. This paper proposes a static code analysis tool for smart contracts named as UBF-ChaincodeScan which helps to identify security risks in the smart contract code written in Node.js and GO language.