ZhangZhuoSJTU/Web3Bugs resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1819 stars · 248 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated dataset of exploitable bugs in Solidity smart contracts, extracted from code4rena audit contests and classified by bug nature (out-of-scope, simple-oracle-detectable, or requiring high-level semantic oracles). It accompanies an ICSE 2023 paper and includes the examined contracts, audit reports, and classification results.

Use cases

• study exploitable bugs in smart contracts
• build better smart contract vulnerability detection tools
• find real-world solidity security bug examples
• research functional bugs that simple oracles miss
• benchmark smart contract security analysis tools
• learn about web3 security from audit contest reports

When to choose

• you need labeled real-world smart contract vulnerabilities for research or tool evaluation
• you are studying or teaching blockchain security and want audit reports alongside buggy code
• you are developing semantic bug-detection oracles for Solidity

When to avoid

• you need a runnable vulnerability scanner rather than a dataset
• you need bugs from chains or languages beyond Solidity/EVM
• you need a stable frozen dataset, since classifications may change with ongoing contests

Facets

dataset · maturity active

security vulnerability-scanning testing data-science security blockchain developer-tools cross-platform smart-contracts solidity blockchain-security bug-classification code4rena web3 vulnerability-dataset icse23 research

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ZhangZhuoSJTU/Web3Bugs")