Defects and vulnerabilities in smart contracts, a classification using the NIST bugs framework

Abstract

Rising to popularity in the last decade, blockchain technology has become the preferred platform for the transfer of digital currency. Unfortunately, many of these environments are rife with vulnerabilities exploited by financially motivated attackers. Worse yet, is that a structured analysis and classification of these vulnerabilities is lacking. In this paper, we present the first formal classifications of these vulnerabilities using National Institute of Standards and Technologies Bugs (NIST'S) Framework and propose two new classes: distributed system protocol (DSP) and distributed system resource management (DRM).