Can LLMs fix smart contract vulnerabilities?
SMARTIFY: A MULTI-AGENT FRAMEWORK FOR AUTOMATED VULNERABILITY DETECTION AND REPAIR IN SOLIDITY AND MOVE SMART CONTRACTS
This paper introduces Smartify, a multi-agent framework using Large Language Models (LLMs) to automatically find and fix security vulnerabilities in smart contracts written in Solidity and Move programming languages. Smartify uses a team of specialized LLM agents (Auditor, Architect, Code Generator, Refiner, Validator) that work together, mimicking a human software development process, to analyze, plan repairs, generate code, refine it, and validate the fixes. Key for LLM-based multi-agent systems is Smartify's use of specialized, fine-tuned LLMs within its multi-agent architecture, along with retrieval-augmented generation (RAG) for incorporating language-specific best practices and minimizing the need for extensive language-specific training data, especially for the less-resourced Move language. Experiments demonstrate Smartify's effectiveness and generalizability across different LLMs compared to individual models and specialized tools.