Dataset: Characterizing Smart Contracts Vulnerabilities and Bugs: An Empirical Study

Dataset: Characterizing Smart Contracts Vulnerabilities and Bugs: An Empirical Study

This Dataset includes the following: 

1. "Vulnerabilities categories card labeling.xml" file that represents the data for Categories of vulnerabilities in Smart Contracts (RQ1).
2. "Impact cards labeling.xml" file that represents the data for Impact of Vulnerabilities and Bugs in smart contracts(RQ2).
3. "Fix Time Duration.xml" file that shows the Vulnerabilities Fixing Duration in smart contracts(RQ3).
4. "Defined 34 Vulnerabilities.pdf" this file shows the 34 vulnerabilities and bugs that we defined and identify from real-world smart contracts
 on Stack Overflow and developers are facing in their smart contracts' source codes.

------
XML files structure:
The XML files can be opened used any text editor (e.g. notepad++) or any code editor (e.g. Visual Studio Code).

1. Each file has a root that is <Card_Table></Card_Table> which contains all the cards we labeled. 
2. Each card is represented by the <Card></Card> and contains the following:
            - The main Tag marked by <Tag> that was used to search and collect the card from StackOverflow. 
            - The URL marked by <URL> of the post on StackOverflow which contains all the information of the post (i.e., the question information, the answers, comments, votes, post and answer times)
            - The other tages marked by <OtherTags> that shows all the tags used in the post. 
            - The first expert labeling for the categories of vulnerabilities in each card is represented by <FirstExpertCategoryLabel>.
            - The second expert labeling for the categories of vulnerabilities in each card is represented by <SecondExpertCategoryLabel>.
            - The <CategoryAgreement> used to calculate the inter-rater agreement between the two labelers. 
            - The first expert labeling for the impact of vulnerabilities in each card is represented by <FirstExpertImpactLabel>.
            - The second expert labeling for the impact of vulnerabilities in each card is represented by </SecondExpertImpactLabel>.
            - The <PostTime> shows the time at which the post was created on StackOverflow.
            - The <CorrectAnswerTime> shows the time at which the correct answer of the card was posted on StackOverflow.
            - Finally, the <FixTimeDurationDAYS> shows the fix time duration of each card in days, we calculated it based on the differnce between the <CorrectAnswerTime> and  the <PostTime>.