Smart contracts have been plagued by security incidents, which resulted in substantial financial losses. Given numerous research efforts in addressing the security issues of smart contracts, we wondered how software practitioners build security into smart contracts in practice. We performed a mixture of qualitative and quantitative studies with 13 interviewees and 156 survey respondents from 35 countries across six continents to understand practitioners' perceptions and practices on smart contract security. Our study uncovers practitioners' motivations and deterrents of smart contract security, as well as how security efforts and strategies fit into the development lifecycle. We also find that blockchain platforms have a statistically significant impact on practitioners' security perceptions and practices of smart contract development. Based on our findings, we highlight future research directions and provide recommendations for practitioners.
翻译:智能合同受到安全事件的困扰,导致大量财政损失。鉴于为解决智能合同的安全问题所做的大量研究努力,我们想知道软件从业人员如何在实践中将安保纳入智能合同。我们与来自六大洲35个国家的13名受访者和156名受访者进行了定性和定量研究,以了解从业人员对智能合同安全的看法和做法。我们的研究揭示了从业人员对智能合同安全的动机和阻力,以及安全努力和战略如何适合发展生命周期。我们还发现,在统计上,连锁平台对从业人员对智能合同发展的安全看法和做法产生了重大影响。根据我们的调查结果,我们强调未来研究的方向,并向从业人员提出建议。