ArXiv TLDR

Comparing Smart Contract Paradigms: A Preliminary Study of Security and Developer Experience

🐦 Tweet
2604.26727

Matteo Vaccargiu, Andrea Pinna, Maria Ilaria Lunesu, Giuseppe Destefanis

cs.SEcs.PL

TLDR

A study compares Solidity and Move for smart contracts, finding Move reduces security checks and boosts confidence despite larger code and learning curve.

Key contributions

  • Compared 12 functionally-equivalent contract pairs in Solidity and Move.
  • Move reduced explicit security checks by 60% (6.7% vs 16.8%) compared to Solidity.
  • Move contracts were 47% larger but maintained identical cyclomatic complexity.
  • Developers reported higher safety confidence in Move, preferring it for security-critical applications.

Why it matters

This study offers crucial insights into how programming paradigms affect smart contract security and developer experience. It helps inform language selection by quantifying trade-offs, showing resource-oriented languages like Move shift security from runtime to compile-time guarantees, despite adoption challenges.

Original Abstract

Smart contract vulnerabilities have caused billions in financial losses, raising questions about whether programming language paradigms can reduce security overhead. While imperative languages like Solidity require developers to manually implement security checks, resource-oriented languages like Move encode safety guarantees in type systems. We present a preliminary mixed-methods study analyzing 12 functionally-equivalent contract pairs implemented in both Solidity and Move by the same development team, complemented by a survey of 11 developers experienced in both languages. Quantitative analysis reveals that Move reduces explicit security overhead by 60\% (security check density: 6.7% vs. 16.8%, p=0.002, Cohen's d=-1.75) at the cost of 47% larger code size (p=0.002, d=1.90), while maintaining identical cyclomatic complexity. Developer surveys show moderate learning difficulty but higher safety confidence in Move (Median=6/7, 10 of 11 above neutral), with 55% preferring Move for security-critical applications despite ecosystem maturity gaps. These preliminary findings suggest resource-oriented paradigms shift security from runtime validation to compile-time guarantees, though adoption requires investment in learning and tooling. The controlled comparison provides initial evidence for paradigm effects on smart contract development, informing language selection decisions and identifying opportunities for improved developer resources.

📬 Weekly AI Paper Digest

Get the top 10 AI/ML arXiv papers from the week — summarized, scored, and delivered to your inbox every Monday.