Analyzing Ethereum Smart Contract Vulnerabilities at Scale Based on營nter-Contract Dependency
نویسندگان
چکیده
Smart contracts running on public blockchains are permissionless and decentralized, attracting both developers malicious participants. Ethereum, the world’s largest decentralized application platform which more than 40 million smart running, is frequently challenged by contract vulnerabilities. What’s worse, since homogeneity of a wide range increase in inter-contract dependencies, vulnerability certain could affect large number other Ethereum. However, little known about how vulnerable on-chain can be affected. Thus, we first present dependency graph (CDG) to perform analysis for Ethereum contracts, where CDG characterizes dependencies formed DELEGATECALL-type internal transaction Then, three generic definitions security violations against given finding respective potential victim affected different types contracts. Further, construct with 195,247 active latest blocks verify above detecting representative Compared previous large-scale analysis, our scheme marks that identify their possible risks based type violation actually occurring. The results show proportion reaches 14.7%, far corresponding (less 0.02%) CDG.
منابع مشابه
Smart Contract-Based Access Control for the Internet of Things
This paper investigates a critical access control issue in the Internet of Things (IoT). In particular, we propose a smart contract-based framework, which consists of multiple access control contracts (ACCs), one judge contract (JC) and one register contract (RC), to achieve distributed and trustworthy access control for IoT systems. Each ACC provides one access control method for a subject-obj...
متن کاملScilla: a Smart Contract Intermediate-Level LAnguage
This paper outlines key design principles of Scilla—an intermediatelevel language for verified smart contracts. Scilla provides a clean separation between the communication aspect of smart contracts on a blockchain, allowing for the rich interaction patterns, and a programming component, which enjoys principled semantics and is amenable to formal verification. Scilla is not meant to be a high-l...
متن کاملFARAD: Commoditising Forward Purchase Contract in Ultra-capacitor Intellectual Property Rights on Ethereum Blockchain
متن کامل
Trust-based Contract Nets
In this paper we use a contract net protocol in order to compare various delegation strategies. We have implemented some different agents, having a set of tasks to delegate (or to perform by themselves); the tasks are performed by the agents in a dynamic environment, that can help or worse their activity. The agent rely upon different strategies in order to choose whom to delegate. We implement...
متن کاملContract-based Service Aggregation
We present a methodology for the automated selection and aggregation of (Web) services with the purpose of satisfying client queries. A key ingredient of our approach is the notion of service contract, which consists of signature (WSDL), ontology information (OWL), and behaviour specification (YAWL). The methodology inputs a registry of service contracts and a client service contract, and it au...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: Cmes-computer Modeling in Engineering & Sciences
سال: 2023
ISSN: ['1526-1492', '1526-1506']
DOI: https://doi.org/10.32604/cmes.2022.021562