GoDetect: Precise Detection of Go Smart Contract Vulnerabilities Based on Static Single Assignment (SSA)

With the growing adoption of permissioned blockchains such as Hyperledger Fabric, ensuring deterministic and correct behavior of Go-based smart contracts (chaincode) is critical. Existing tools commonly rely on AST-pattern matching and therefore struggle to track values through aliasing, interface dispatch, and channel-based communication, which leads to false positives and missed vulnerabilities. We present GoDetect, an SSA-based static analysis framework tailored to Go chaincode that performs intra-procedural taint propagation on SSA form and a set of focused checks to detect non-deterministic sources, map-iteration dependence, and unsafe global state access. Implemented using Go's official analysis toolchain, GoDetect produces evidence traces and actionable remediation suggestions. On a dataset of 100 real-world chaincodes and 180 synthetic benchmarks, GoDetect achieves higher recall and comparable precision to representative AST-based tools, while enabling a practical path to inter-procedural extension.