arXiv: When Verified Source Becomes Attack Input: Defending Smart Contracts Against LLM-Based Vulnerability Scanning

This paper, published on arXiv, presents new research on a critical vulnerability in how smart contracts are secured. It demonstrates that large language models (LLMs), which are increasingly used for automated vulnerability scanning, can be tricked by maliciously crafted code. Specifically, the research shows that a "verified source" of code, which is supposed to be a trusted input for the LLM, can instead be engineered to hide real security flaws or to generate false positives, effectively turning the security tool into an attack vector. This is a novel attack surface that undermines the reliability of AI-assisted code audits.

The primary audience affected are organizations in the decentralized finance (DeFi) and blockchain sectors, including smart contract developers, auditing firms, and any enterprise relying on LLM-based tools for code review or security compliance. Regulated financial institutions exploring blockchain integration should also take note, as this impacts their due diligence and risk management obligations under frameworks like the EU's Digital Operational Resilience Act (DORA) and the Markets in Crypto-Assets Regulation (MiCA).

Compliance teams should immediately assess their current use of AI-based code analysis tools and treat their outputs as unverified rather than authoritative. They must update their vendor risk management and internal control procedures to require human expert review of all LLM-generated vulnerability reports, especially for high-risk contracts. Furthermore, they should monitor this research area closely, as it signals a need for new validation standards and potentially for regulatory guidance on the use of AI in critical security functions.