Monero

Read

<p class="is-style-lead">As artificial intelligence (AI) continues to evolve, its potential to replace human jobs has become a topic of concern. One such area is smart contract auditing. </p>



<p class="is-style-default">A recent experiment conducted by OpenZeppelin, a leading blockchain security company, sought to explore this possibility by pitting ChatGPT-4, an AI model developed by OpenAI, against 28 Ethernaut <a href="https://ethernaut.openzeppelin.com/" target="_blank" rel="noreferrer noopener">challenges</a> designed to identify smart contract vulnerabilities.</p>



<p>Ethernaut challenges are a series of puzzles and problems designed to test and improve a user&#8217;s understanding of ethereum (<a href="https://crypto.news/price/ethereum/">ETH</a>) smart contract vulnerabilities. </p>



<p>Created by OpenZeppelin, a leading blockchain security company, these challenges are part of a game-like platform called Ethernaut. Each challenge presents a unique smart contract with a specific vulnerability that players must identify and exploit to solve the challenge.</p>



<div class="cn-block-related-link">

    <svg class="cn-block-related-link__icon icon" aria-hidden="true">
        <use xlink:href="#icon-bookmark"></use>
    </svg>

    
        <span class="cn-block-related-link__prefix">
            You might also like:
        </span>

    
    
        <a href="https://crypto.news/security-firm-exposes-500m-vulnerability-in-trons-multisig-accounts/" class="cn-block-related-link__link">
            Security firm exposes $500m vulnerability in TRON’s multisig accounts        </a>

    
</div>


<p>The levels range in difficulty and cover a variety of common vulnerabilities found in smart contracts, such as re-entrancy attacks, underflows and overflows, and more. By working through these challenges, players can gain a deeper understanding of smart contract security and ethereum development.</p>



<figure class="wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
<iframe title="Ethernaut CTF - Hello Ethernaut (Level 0)" width="1020" height="574" src="https://www.youtube.com/embed/MaGAVBRwvbg?list=PLiAoBT74VLnmRIPZGg4F36fH3BjQ5fLnz" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>
</div></figure>



<p>The experiment involved presenting the AI with the code for a given Ethernaut level and asking it to identify any vulnerabilities. GPT-4 was able to solve 19 out of the 23 challenges that were introduced before its training data cutoff date of September 2021. </p>



<p>However, it fared poorly on Ethernaut&#8217;s newest levels, failing at 4 out of 5. This suggests that while AI can be a useful tool for identifying some security vulnerabilities, it cannot replace the need for a human auditor.</p>



<p>One significant factor for ChatGPT’s success with levels 1-23 is the possibility that GPT-4’s training data contained several solution write-ups for these levels. </p>



<p>Levels 24-28 were released after the 2021 cutoff for GPT-4’s training data, so the inability to solve these levels further points to ChatGPT’s training data including published solutions as a likely explanation for its success.</p>



<p>The AI&#8217;s performance was also influenced by its &#8220;temperature&#8221; setting, which affects the randomness of its responses. With values closer to 2, ChatGPT generates more creative responses, while lower values closer to 0 yield more focused and deterministic answers.</p>



<p>Despite its successes, GPT-4 struggled with certain challenges, often requiring specific follow-up questions to hone in on the vulnerability. </p>



<div class="cn-block-related-link">

    <svg class="cn-block-related-link__icon icon" aria-hidden="true">
        <use xlink:href="#icon-bookmark"></use>
    </svg>

    
        <span class="cn-block-related-link__prefix">
            You might also like:
        </span>

    
    
        <a href="https://crypto.news/cftc-considers-changing-risk-rules-to-account-for-crypto-volatility/" class="cn-block-related-link__link">
            CFTC considers changing risk rules to address crypto volatility        </a>

    
</div>


<p>In some cases, even with strong guidance, the AI failed to produce a correct strategy. This underscores the potential for AI tools to increase audit efficiency when the auditor knows specifically what to look for and how to prompt Large Language Models like ChatGPT effectively.</p>



<p>However, the experiment also revealed that in-depth security knowledge is necessary to assess whether the answer provided by AI is accurate or nonsensical. For example, in Level 24, “PuzzleWallet,” GPT-4 invented a vulnerability related to multicall and falsely claimed that it was not possible for an attacker to become the owner of the wallet.</p>



<p>While the experiment demonstrated that smart contract analysis performed by GPT-4 cannot replace a human security audit, it did show that AI can be a useful tool for finding some security vulnerabilities. </p>



<p>Given the rapid pace of innovation in blockchain and smart contract development, it’s crucial for humans to stay up-to-date on the latest attack vectors and innovations across Web3.</p>



<p>OpenZeppelin’s growing AI team is currently experimenting with OpenAI as well as custom machine learning solutions to improve smart contract vulnerability detection. The goal is to help OpenZeppelin auditors improve coverage and complete audits more efficiently.</p>



<div class="cn-block-related-link">

    <svg class="cn-block-related-link__icon icon" aria-hidden="true">
        <use xlink:href="#icon-bookmark"></use>
    </svg>

    
        <span class="cn-block-related-link__prefix">
            Read more:
        </span>

    
    
        <a href="https://crypto.news/monero-privacy-bug-decreased-anonymity-for-3-years/" class="cn-block-related-link__link">
            Monero privacy bug decreased anonymity for 3 years        </a>

    
</div>

Hacking smart contracts with AI could target old vulnerabilities research shows

crypto.news

Other articles published on Jun 2, 2023

Crypto market pumps ahead of expected rise in US unemployment

Crypto Expert: XRP Identified as a ‘Smart Play’ with Potential to Double to $1

3 SUPER CHEAP Solana NFTs That Can Make You RICH!

LTC Starts June Strong, Crypto Daily TV 2/6/2023

InQubeta presale aims to emulate chainlink and cardano’s ICO success

Elon Musk’s Impact on DOGE Revealed in Insider Trading Lawsuit

Join our free newsletter for daily crypto updates!