An innovative platform to reduce the risk of cyber attacks on smart contracts for all blockchains by minimising human effort and improving the efficacy of security testing.

点击翻译按钮获取中文摘要

Cambridge Blockchain Group (CBG) is a UK-based SME in the blockchain security industry with a core project team of Dominic Wordsworth (Technical Lead), Tony Buck (Project Lead) and Dan Simons (Development Lead).The adoption of blockchain technology is experiencing a compound annual growth rate of 43%. Computer programs, known as smart contracts, provide blockchain's with essential functionality. Once deployed to a blockchain, smart contract code is immutable therefore security testing is a critical function of the development process.Smart contracts are vulnerable to cyber hacks (web3university.com 2022) . To audit contracts for risk, customers either use security scanning tools or hire third-party auditors to use those tools. Current tools have a very limited scope for finding and preventing risks. As a result 90% of the audit process is completed manually, leading to missed vulnerabilities and financial losses of £1.3bn globally in H1 2022, an 800% increase on the same period in 2021\. There is currently no effective alternative to human testing, which is unscalable, slow and costly.CBG's technology platform will combine integration, automation and orchestration techniques with machine learning to deliver smart contract security improvements of 80%. This will significantly reduce the effort and cost of delivering essential security assurance to blockchain projects, consumers and investors. This will be especially beneficial for disenfranchised members of the UK for whom the use of blockchain-based applications would disproportionately empower. CBG's platform will help insulate these individuals from a financial loss of over £213M per year in the UK alone .CBG's platform integrates commonly used security tools with a single test environment and uses automation, orchestration and machine learning to enable customers and auditors to leverage these tools from a centralised console, optimise their workflow and dramatically improve the efficacy and accuracy of security testing output.