Interactive smart contract auditing with ChatGPT

• Main Author: Lee, Joash Kai
• Other Authors: Liu Yang
• Format: Final Year Project
• Language: English
• Published: Nanyang Technological University 2024
• Subjects: Computer and Information Science; Smart contract; Solidity; Large language model; Vulnerability detection
• Online Access: https://hdl.handle.net/10356/175342
• Institution: Nanyang Technological University

In this paper, we will analyse the efficacy of a web-based smart contract auditor that uses LLMs to audit smart contracts in Solidity. First, we propose a set of pre-defined prompts to help smart contract developers query the LLM. Next, we allow users different follow-up queries to harness the unique language capabilities of GPT, improving the detection and user experience of the auditing tool. Our solution: AuditGPT is a web-based interface that allows users to select different prompting styles for their code. Our experiments show that flexibility in prompting styles can aid human developers in understanding code vulnerabilities as well as improved detection rates compared to trivial vulnerability checking