Analyzing Ethereum Smart Contract Vulnerabilities at Scale Based on營nter-Contract Dependency

نویسندگان

چکیده

Smart contracts running on public blockchains are permissionless and decentralized, attracting both developers malicious participants. Ethereum, the world’s largest decentralized application platform which more than 40 million smart running, is frequently challenged by contract vulnerabilities. What’s worse, since homogeneity of a wide range increase in inter-contract dependencies, vulnerability certain could affect large number other Ethereum. However, little known about how vulnerable on-chain can be affected. Thus, we first present dependency graph (CDG) to perform analysis for Ethereum contracts, where CDG characterizes dependencies formed DELEGATECALL-type internal transaction Then, three generic definitions security violations against given finding respective potential victim affected different types contracts. Further, construct with 195,247 active latest blocks verify above detecting representative Compared previous large-scale analysis, our scheme marks that identify their possible risks based type violation actually occurring. The results show proportion reaches 14.7%, far corresponding (less 0.02%) CDG.

برای دانلود رایگان متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Smart Contract-Based Access Control for the Internet of Things

This paper investigates a critical access control issue in the Internet of Things (IoT). In particular, we propose a smart contract-based framework, which consists of multiple access control contracts (ACCs), one judge contract (JC) and one register contract (RC), to achieve distributed and trustworthy access control for IoT systems. Each ACC provides one access control method for a subject-obj...

متن کامل

Scilla: a Smart Contract Intermediate-Level LAnguage

This paper outlines key design principles of Scilla—an intermediatelevel language for verified smart contracts. Scilla provides a clean separation between the communication aspect of smart contracts on a blockchain, allowing for the rich interaction patterns, and a programming component, which enjoys principled semantics and is amenable to formal verification. Scilla is not meant to be a high-l...

متن کامل

Trust-based Contract Nets

In this paper we use a contract net protocol in order to compare various delegation strategies. We have implemented some different agents, having a set of tasks to delegate (or to perform by themselves); the tasks are performed by the agents in a dynamic environment, that can help or worse their activity. The agent rely upon different strategies in order to choose whom to delegate. We implement...

متن کامل

Contract-based Service Aggregation

We present a methodology for the automated selection and aggregation of (Web) services with the purpose of satisfying client queries. A key ingredient of our approach is the notion of service contract, which consists of signature (WSDL), ontology information (OWL), and behaviour specification (YAWL). The methodology inputs a registry of service contracts and a client service contract, and it au...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

ژورنال

عنوان ژورنال: Cmes-computer Modeling in Engineering & Sciences

سال: 2023

ISSN: ['1526-1492', '1526-1506']

DOI: https://doi.org/10.32604/cmes.2022.021562