<?xml version="1.0" encoding="UTF-8"?>
<article article-type="Research Article">
  <front>
    <journal-meta>
      <journal-id journal-id-type="publisher">journal-of-information-and-optimization-sciences</journal-id>
      <journal-title-group>
        <journal-title>Journal of Information and Optimization Sciences</journal-title>
      </journal-title-group>
      <issn publication-format="electronic">2169-0103</issn>
      <issn publication-format="print">0252-2667</issn>
      <publisher>
        <publisher-name>Taru Publications</publisher-name>
      </publisher>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="doi">10.47974/JIOS-2207</article-id>
      <title-group>
        <article-title>A comprehensive security framework for Ethereum smart contracts : Integrating static analysis and dynamic testing</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Kushwaha</surname>
            <given-names>Satpal Singh</given-names>
          </name>
          <aff>Department of Computer Science and Engineering, Manipal University Jaipur, Jaipur, Rajasthan, 303007, India</aff>
        </contrib>
        <contrib contrib-type="author" corresp="yes">
          <name>
            <surname>Saxena</surname>
            <given-names>Anubhav</given-names>
          </name>
          <aff>Department of IoT and Intelligent Systems, Manipal University Jaipur, Jaipur, Rajasthan, 303007, India</aff>
        </contrib>
      </contrib-group>
      <fpage>1</fpage>
      <lpage>9</lpage>
      <pub-date date-type="pub">
        <day>31</day>
        <month>08</month>
        <year>2026</year>
      </pub-date>
      <abstract>
        <p>Ethereum smart contracts, pivotal components of decentralized applications, are increasingly susceptible to various security vulnerabilities. To address these challenges, this paper presents a unified security approach that combines static analysis and dynamic testing techniques. Static analysis, with its capability to scrutinize code without execution, offers a comprehensive detection of vulnerabilities by analyzing the smart contract’s source code. Dynamic testing, on the other hand, involves executing the code in a controlled environment to uncover runtime issues that static analysis might overlook. Our approach leverages the strengths of both techniques to enhance the overall security assessment of Ethereum smart contracts. Static analysis is employed to identify potential security flaws in the codebase, such as reentrancy, integer overflow, and access control issues. Subsequently, dynamic testing, through fuzzing and symbolic execution, validates these findings and detects additional vulnerabilities by observing the contract’s behavior during execution. The integration of these methodologies provides a more robust and comprehensive security analysis framework. We demonstrate the effectiveness of our hybrid approach through highlighting its superiority in identifying and mitigating security threats compared to traditional single-method analyses. This unified security approach not only enhances the detection of vulnerabilities but also contributes to the development of more secure and reliable smart contracts in the Ethereum ecosystem.</p>
      </abstract>
      <kwd-group>
        <kwd>Static analysis</kwd>
        <kwd>Dynamic analysis</kwd>
        <kwd>Smart contract</kwd>
        <kwd>Ethereum</kwd>
        <kwd>Vulnerability detection</kwd>
      </kwd-group>
      <custom-meta-group>
        <custom-meta>
          <meta-name>access</meta-name>
          <meta-value>open</meta-value>
        </custom-meta>
        <custom-meta>
          <meta-name>retracted</meta-name>
          <meta-value>no</meta-value>
        </custom-meta>
      </custom-meta-group>
    </article-meta>
  </front>
</article>
