The main threats affecting smart contracts are usually attributable to weaknesses present within the source code. Over time, a register of such weaknesses, known as the Smart Contract Weakness Classification (SWC) Registry, has been drawn up, which can be consulted at https://swcregistry.io/docs/SWC-100.
The SWC Registry is released under the MIT License and is freely available at https://github.com/SmartContractSecurity/SWC-registry.
The main goals of the SWC Registry are as follows:
- Classifying security issues in smart contracts
- Describing security issues in smart contracts adopting a common language
- Helping training and increasing performance for smart contract analysis tools
In the following sections, we will analyze the main weaknesses present within the source code of smart contracts developed using the Solidity programming language.
...