
Briefing
This paper addresses the critical bottleneck in smart contract formal verification ∞ the manual generation of comprehensive properties. It introduces PropertyGPT, a novel system that leverages large language models (LLMs) to automate this process by learning from existing human-written specifications. This breakthrough fundamentally shifts formal verification from a labor-intensive, expert-dependent task to an AI-augmented workflow, promising enhanced security and scalability for decentralized applications. The system’s ability to generate verifiable properties and detect zero-day vulnerabilities marks a significant step towards more resilient blockchain architectures.

Context
Before this research, the formal verification of smart contracts, while offering the highest assurance of correctness, faced a significant challenge in the manual creation of precise properties, including invariants and pre/post-conditions. This labor-intensive process, demanding deep expert knowledge, limited the scalability and comprehensiveness of verification efforts. The immutability of deployed smart contracts, managing billions in digital assets, necessitates an infallible security posture; existing methods often struggled to keep pace with rapid development cycles and evolving threat landscapes.

Analysis
PropertyGPT introduces a core mechanism for automated property generation by employing large language models within a retrieval-augmented framework. The system first embeds existing human-written properties into a vector database. It then retrieves relevant reference properties for in-context learning, enabling the LLM to generate new, customized properties for novel smart contract code.
This methodology fundamentally differs from prior approaches by integrating AI’s generative capabilities with a feedback loop ∞ compilation and static analysis provide iterative guidance for LLM revisions, ensuring generated properties are compilable and appropriate. A dedicated prover subsequently formally verifies the correctness of these generated properties, completing the automated security pipeline.

Parameters
- Core Concept ∞ LLM-driven Property Generation
- System/Protocol Name ∞ PropertyGPT
- Key Authors ∞ Liu, Y. et al.
- Underlying LLM ∞ GPT-4 (demonstrated)
- Validation ∞ Detected 12 zero-day vulnerabilities
- Conference Acceptance ∞ NDSS Symposium 2025

Outlook
This research opens new avenues for scalable and comprehensive smart contract security, allowing developers to integrate rigorous verification earlier and more frequently in the development lifecycle. The potential real-world applications include fully automated security auditing platforms and enhanced continuous integration pipelines for decentralized finance. Future research will likely explore optimizing LLM performance for property generation, extending to broader formal specification languages, and developing more robust feedback mechanisms to further reduce human oversight in the verification process.
Signal Acquired from ∞ arXiv.org