SOURCE-LINKED INTELLIGENCE

Automated Vulnerability Injection in Smart Contracts Using Large Language Models

arXiv · AI, language, vision and robotics · article · Sep 2, 2026 · UTC

Assessing vulnerability detection tools for smart contracts requires datasets with known ground truth, yet such datasets are scarce and difficult to build by hand. We propose an approach that uses Large Language Models (LLMs) to automatically inject vulnerabilities into Solidity smart contracts, and demonstrate it in a case study targeting 49 vulnerability types from OpenSCV. Injected contracts are validated through a multi-step pipeline checking compilation, execution, business logic, and the presence of the intended vulnerability. Applied to real-world contracts from SmartBugs, LLMs generate

Read original source ↗ Open in workspace

recordType

paper

region

Global