What are Smart Contracts?

Smart contracts have been a recurring presence throughout this series; introduced in our blockchainBlockchainThink of blockchain as a public notebook that everyone owns a copy of. Whatever gets written in it is permanent and visible to all.Keep learning protocolBlockchain ProtocolA blockchain protocol is the set of rules and standards that govern how a blockchain network operates, validates transactions, and reaches consensus.Keep learning article as one of the features that distinguishes EthereumEthereumEthereum is a decentralized blockchain platform that runs smart contracts and dApps, using its native cryptocurrency (ETH) for transactions and fees.Keep learning's design from BitcoinBitcoinBitcoin is a decentralized digital currency that enables secure peer-to-peer transactions without relying on a central authority.Keep learning's, explained technically in our EVMEthereum Virtual Machine (EVM)EVM (Ethereum Virtual Machine) is the software environment that executes smart contracts and decentralized applications on compatible blockchains.Keep learning article as bytecode executed deterministically across every node, and referenced in our gas fees article as the category of interaction that consumes the most computational resource. Like several concepts before it, the topic has earned a dedicated article of its own; one that looks past the technical execution model already covered and examines what smart contracts actually are as a concept, what they genuinely enable, where their limitations lie, and why the phrase "smart contract" is, in certain important respects, a somewhat misleading name for what they actually do.

A Name Worth Questioning

The term "smart contract" was coined by computer scientist and legal scholar Nick Szabo in 1994; more than a decade before Bitcoin existed, and nearly two decades before Ethereum; to describe the broader concept of self-executing contractual logic embedded in software. Szabo's canonical illustration was the vending machine: a device that automatically executes a specific transaction (releases a product) when a specific condition is met (the correct amount is inserted), without requiring a human intermediary to verify the exchange, trust the other party, or enforce the outcome.

This analogy is genuinely useful, but the name "smart contract" carries two implications worth examining critically. First, smart contracts aren't particularly "smart" in any sophisticated sense; they're deterministic programs that execute exactly as written, following precisely the logic coded into them, with no judgment, contextual awareness, or ability to adapt to circumstances their code doesn't anticipate. Second, and perhaps more consequentially, they aren't "contracts" in the full legal sense; they're code, and code doesn't inherently carry legal enforceability, incorporate the full context of applicable law, or handle the ambiguities and disputes that real-world legal contracts are specifically designed to navigate. A smart contract does exactly what its code says, which may or may not be what its author intended, and may or may not align with what any applicable legal framework would require.

Keeping both of these caveats in mind makes it considerably easier to understand both what smart contracts are genuinely good at and where they fall meaningfully short.

What a Smart Contract Actually Is

In Ethereum's specific context, a smart contract is a program; compiled to EVM bytecode as described in our EVM article; deployed at a specific address on the Ethereum blockchain, where it persists permanently and is publicly accessible. It contains both code (the logic of what it does) and state (data it stores and updates as interactions occur), both of which are maintained as part of Ethereum's world state, secured by the same cryptographic hashingHashingHashing is the process of converting data into a fixed-length code using a cryptographic function, ensuring data integrity and security.Keep learning and consensus mechanismsBlockchain consensus mechanismsA consensus mechanism is a method for validating transactions and securing a blockchain without relying on a central authority.Keep learning covered across this entire series.

Once deployed, a smart contract behaves according to three core properties that distinguish it from conventional software running on a centralized server:

Autonomy. Once deployed, a smart contract executes its logic automatically whenever the conditions coded into it are triggered by an incoming transaction, with no human intervention, third-party approval, or ongoing maintenance required to make it run.

Immutability. In its basic form, a smart contract's code cannot be altered after deployment; a direct consequence of the blockchain's tamper-evidence properties established in our very first article. The code that was deployed is the code that runs, forever, regardless of whether its author later wishes they'd written it differently.

Transparency. Every smart contract's bytecode is publicly readable on the blockchain, and when developers choose to publish their Solidity source code (verified against the deployed bytecode by tools like Etherscan), the full logic is human-readable by anyone; a degree of transparency simply unavailable with equivalent software running on a private, centralized server.

If-This-Then-That at Scale

At its most fundamental, a smart contract is an if-this-then-that machine: a specific set of inputs produces a specific, predetermined output, every time, without exception. The sophistication lies not in any individual step of that logic; each opcode, as described in our EVM and gasGas FeesGas fees are transaction costs paid to network validators to process and secure operations on a blockchain, varying with demand and complexity.Keep learning articles, does something very simple; but in the combinations of logic steps that can be composed together to produce complex, automated financial and organizational behavior.

Consider a simple escrow arrangement: traditionally, a buyer and seller who don't trust each other use an intermediary; a bank, a law firm, an escrow agent; to hold payment while a condition is verified, then release it to the appropriate party. A smart contract can automate this entirely: funds are sent into the contract, which holds them until a defined condition is met (confirmed delivery of goods, a specified date passing, an oracle reporting a specific event; a concept discussed in our blockchain securityBlockchain SecurityBlockchain security is the protection of blockchain networks and assets against attacks, fraud, and vulnerabilities using cryptography and consensus mechanisms.Keep learning article), at which point the contract releases funds to the seller automatically. No intermediary. No waiting for business hours. No possibility of the intermediary absconding with the funds. The code is the escrow agent, and its behavior is publicly verifiable before a single cent is committed.

This simple pattern; logic that holds, routes, or transforms assets based on verifiable conditions, without any central intermediary; is the foundation of essentially everything built on Ethereum: decentralized exchangesDEXs (Decentralized Exchanges)DEXs are decentralized exchanges that let users trade cryptocurrencies directly from their wallets using smart contracts, without a central authority.Keep learning, lending platformsLending and Borrowing ProtocolsLending and borrowing protocols are DeFi platforms where users supply crypto to earn interest or borrow assets by providing collateral.Keep learning, yield aggregatorsYield FarmingYield farming is a DeFi strategy where users move crypto assets across protocols to maximize returns from interest, rewards, and incentives.Keep learning, insurance protocols, governanceGovernanceGovernance in crypto is how decisions about a blockchain or protocol are made, often through token holders voting on changes and proposals.Keep learning systems, and the tokenCrypto TokensCrypto tokens are digital assets built on existing blockchains that represent value, access, or utility within a specific project or ecosystem.Keep learning standards underlying both fungible and non-fungible assets.

Token Standards: ERC-20 and ERC-721

Two smart contract standards are worth understanding by name specifically, since they underpin virtually everything in the Ethereum ecosystem that involves assets beyond ETH itself.

ERC-20 is the standard interface defining fungible tokens on Ethereum; tokens where every unit is identical and interchangeable with every other unit of the same type, exactly as one dollar bill is identical to any other. Every major token built on Ethereum; stablecoinsStablecoinsA stablecoin is a type of cryptocurrency designed to keep its value steady.Keep learning, governance tokensGovernance TokensGovernance tokens are cryptocurrencies that give holders voting power to influence decisions, upgrades, and policies within a blockchain protocol or DAO.Keep learning, wrapped assets; implements ERC-20, which defines a standardized set of functions any compliant token contract must expose (transfer, approve, allowance, and others). This standardization is precisely what allows walletsCrypto WalletsA crypto wallet doesn’t store coins like a piggy bank. Instead, it keeps keys that let you access your crypto on the blockchain.Keep learning, exchangesCEXs (Centralized Exchanges)Centralized exchanges (CEXs) are platforms run by companies that facilitate crypto trading by acting as intermediaries between buyers and sellers.Keep learning, and other infrastructure to support thousands of different tokens without requiring custom integration code for each one; a direct, practical illustration of how protocol standards create interoperability, exactly as discussed in our blockchain protocol article.

ERC-721 is the standard interface defining non-fungible tokensNFTsAn NFT is a unique digital asset stored on a blockchain that proves ownership of something.Keep learning; tokens where each unit is unique and distinguishable from every other, making them suitable for representing ownershipOwnershipOwnership in crypto means control over assets via private keys, allowing users to hold, transfer, or manage funds without intermediaries.Keep learning of specific digital or physical assets. Each ERC-721 token has its own unique identifier within its contract, distinct from every other token in the same collection. Together, ERC-20 and ERC-721 form the foundation of virtually the entire Ethereum asset ecosystem.

You can explore the full catalog of Ethereum token standards and improvement proposals; including ERC-20, ERC-721, and the more recent ERC-1155 (a hybrid supporting both fungible and non-fungible tokens within a single contract); directly at eips.ethereum.org, the same resource referenced in our blockchain protocol article for tracking Ethereum's protocol evolution.

Composability: The "Money Lego" Property

One of the most distinctive, genuinely remarkable properties of smart contracts on a shared, public blockchain is composability; the ability for any smart contract to call and interact with any other smart contract on the same network, permissionlessly, in the same transaction.

This property, sometimes described informally as "money legos," allows entirely new protocols to be built on top of existing ones without requiring permission from or coordination with their developers. A yield aggregator can automatically move funds between lending protocols to chase the best rate. A single transaction can borrow funds, use them to arbitrageCrypto ArbitrageCrypto arbitrage is exploiting price differences of cryptocurrency assets across markets to buy low and sell high for profit.Keep learning a price discrepancy across two exchanges, repay the loan, and pocket the profit; all atomically, within a single Ethereum block, in a pattern known as a flash loanFlash LoansFlash loans are uncollateralized crypto loans that must be borrowed and repaid within one blockchain transaction, often used in DeFi strategies.Keep learning. New protocols can integrate established tokens, liquidity poolsLiquidity PoolsLiquidity pools are collections of crypto assets locked in smart contracts that enable decentralized trading by providing liquidity to exchanges.Keep learning, and price oracles created entirely independently, building complex financial infrastructure out of interoperable components none of their creators necessarily anticipated being combined.

This composability is simultaneously one of Ethereum's most powerful features and one of its most significant security risks: if any one component in a chain of composable interactions contains a vulnerability, that vulnerability can potentially be exploited through the interactions of an otherwise entirely legitimate-looking transaction; exactly the oracle manipulation and reentrancy patterns discussed in our blockchain security article.

Upgradability: The Immutability Trade-off

The immutability property described above is, in practice, a double-edged design consideration. For simple, well-audited contracts performing narrow, stable functions, immutability is a genuine security feature; it provides an absolute guarantee that no one, including the contract's original developer, can change the rules after deployment. For more complex protocols that might need bug fixes, improvements, or responses to changing conditions, immutability presents a real challenge.

Several patterns have emerged to address this. Proxy contracts separate a contract's logic from its storage, allowing the underlying logic to be replaced by pointing the proxy at a new implementation contract, while the stored data (balances, positions, and so on) persists in the original storage contract across upgrades. This preserves the ability to fix bugs and improve code, at the cost of reintroducing a degree of trust in whoever controls the upgrade mechanism; a trade-off that connects directly back to the custodyCustodyCustody in crypto is the secure storage and management of private keys or assets, handled either by the user (self-custody) or a third party.Keep learning and decentralizationDecentralizationDecentralization is the distribution of control and decision-making across a network instead of a single central authority.Keep learning principles explored throughout this series.

Variations on this theme; time-locked upgrades that give users advance notice before changes take effect, multi-sig controlled upgrade keysPrivate KeysPrivate keys are secret cryptographic codes that give users full control over their crypto assets and are used to sign and authorize transactions.Keep learning requiring multiple signatories to approve changes, and DAODAOsA DAO is an organization governed by code and community members rather than a central authority.Keep learning-governed upgrade processes that put the community in control of protocol changes; each represent different points along the familiar spectrum between full immutability (maximum trustlessness, minimum flexibility) and full upgradability (maximum flexibility, some trusted party's control reintroduced).

What Smart Contracts Cannot Do

A direct, honest treatment of smart contracts requires being equally clear about what they can't do, since the limits are as important as the capabilities for anyone evaluating their suitability for a given purpose.

They cannot access the outside world natively. A smart contract running on Ethereum has no ability to independently reach out to the internet, check a weather report, read a stock price, or verify whether a physical delivery occurred. Any real-world data a contract needs must be supplied by an oracle; an external service that brings off-chain data on-chain; introducing a point of trust and potential manipulation that the contract itself cannot prevent, as discussed in our blockchain security article.

They cannot be "smart" about ambiguity. A smart contract does exactly what its code says, full stop. Legal contracts exist specifically to handle ambiguity, interpretation, and circumstances that weren't anticipated at the time of drafting; none of which a deterministic program is equipped to navigate. A contract that sends funds if "the project is delivered satisfactorily" can't be implemented as written, because satisfaction is a subjective judgment the code can't make.

They cannot fix themselves after deployment. Bugs discovered after a basic, non-upgradeable contract is deployed cannot be patched. The code that's on chain is the code that runs; forever; which is why pre-deployment auditing is treated with such seriousness in the industry.

Legal enforceability is not inherent. The fact that a smart contract executes as coded doesn't automatically make its outcome legally binding, recognized, or enforceable in any particular jurisdiction. The intersection of smart contract logic and existing legal frameworks is a genuinely evolving area, with different jurisdictions taking meaningfully different approaches, and specific legal questions deserve advice from a qualified professional rather than assumptions based on the technology alone.

For a hands-on understanding of how real, deployed smart contracts actually look in practice, Remix IDE; referenced in our EVM article; remains the most accessible starting point: it lets you write, compile, and deploy a simple contract to a test networkBlockchain NetworkA blockchain network is a system of computers connected to each other that follow the same set of rules to record, share, and validate transactions.Keep learning in minutes, seeing every stage of the process directly rather than through abstraction. For exploring existing, production contracts in the wild, Etherscan displays verified source code, transaction history, and live interaction data for every contract deployed on Ethereum's mainnet; making it straightforward to examine how real, high-value protocols are actually structured.

Bringing It Together

Smart contracts are the feature that transformed Ethereum from a cryptocurrencyCryptocurrencyCryptocurrency, often called “crypto,” is a form of digital currency that uses cryptography (advanced math and code) to keep it secure.Keep learning network into a general-purpose decentralized computing platform; automating logic that would otherwise require trusted intermediaries, and doing so in a way that's publicly verifiable, autonomous, and resistant to unilateral manipulation by any single party. To summarize:

• A smart contract is a program deployed at a specific blockchain address, containing both code and state, executing deterministically whenever triggered by an incoming transaction
• Its three defining properties are autonomy, immutability, and transparency; each a direct consequence of the blockchain architecture this series has covered throughout
• The ERC-20 and ERC-721 standards demonstrate how standardized smart contract interfaces create broad interoperability across the entire ecosystem
• Composability; contracts freely calling and interacting with each other; is simultaneously Ethereum's most powerful design feature and a meaningful amplifier of security risk
• Upgradability patterns navigate the tension between immutability's security benefits and the practical need to fix bugs and improve code over time
• Smart contracts cannot access the outside world natively, cannot handle ambiguity intelligently, cannot repair themselves after deployment, and do not carry inherent legal enforceability; limits that are just as important to understand as the capabilities themselves

Nick Szabo's vending machine analogy, from nearly three decades ago, remains the clearest encapsulation of both what smart contracts genuinely achieve and what they fundamentally are: an automated, deterministic machine that executes a specific transaction when a specific condition is met; reliable, transparent, and tireless, but only ever as good as the code written to define those conditions in the first place.