Smart Contract Vulnerabilities, Tools, and Benchmarks: An Updated Systematic Literature Review
Ethereum smart contracts face severe security challenges due to immutability and transparency, yet existing vulnerability detection tools lack systematic evaluation of effectiveness. To address this gap, we conduct a large-scale, systematic literature review (SLR), rigorously selecting and analyzing 222 high-quality papers from an initial pool of 3,380 studies. We propose the first hierarchical taxonomy covering 14 vulnerability categories and 192 distinct vulnerability types. Further, we introduce a novel “tool–vulnerability–benchmark” ternary mapping framework, unifying 219 detection tools and 133 evaluation benchmarks for the first time. Our contributions include: (1) a standardized vulnerability classification schema; (2) a comprehensive functional matrix of all surveyed tools; (3) a fine-grained tool–vulnerability matching atlas; and (4) a reusable, harmonized benchmark suite. This work establishes an authoritative, extensible knowledge infrastructure for smart contract security research, substantially enhancing comparability, reproducibility, and methodological rigor in vulnerability detection studies.