Smart contracts are core tools for scammers and protocol attackers designed to steal digital assets. As there is now more scrutiny around inspecting smart contracts by both users and security tools, scammers are starting to deceive users and security tools,
This trend is likely to continue; we observed this in web2 where malware heavily relies on obfuscation and even utilizes snippets of legitimate code to execute malicious activity (aka franken malware).
A plethora of research from web2 can be leveraged (potential starting points: Tutorial: an overview of malware detection and evasion techniques, Malware Detection Issues, Challenges, and Future Directions: A Survey.
Some helpful resources/ links to understand different evasion techniques in web3 are:
Why do we care?