In this position paper we discuss challenges and solutions to identify security vulnerabilities in crypto-currency ecosystems using static analysis. We first give a brief overview of crypto-currency ecosystems, which are undergoing tremendous growth in recent years around the world. Then we analyze three real vulnerabilities in crypto-currency systems, and explain the difficulty for SAST (Static Application Security Testing) software to detect them. We then propose a framework to resolve this problem, which can be easily integrated into existing SAST software, and utilize the distributed storage capability of existing crypto-currency networks.
['Shu Wang', 'Bingzhou Zheng']
Static application security testing for crypto-currency ecosystems