Abstract: Methods and apparatuses of the disclosure provide a framework including a customized running environment and an analysis engine unit that can use runtime information from the running environment to identify known or unknown attacks to smart contracts on any blockchains and protect the smart contracts against the attacks. This general-purpose framework has low runtime overhead, reduced difficulty of developing analysis engine units, and improved response speed for new attacks.