Book ChapterDOI
A Survey of Attacks on Ethereum Smart Contracts SoK
Nicola Atzei,Massimo Bartoletti,Tiziana Cimoli +2 more
- Vol. 10204, pp 164-186
Reads0
Chats0
TLDR
This work analyses the security vulnerabilities of Ethereum smart contracts, providing a taxonomy of common programming pitfalls which may lead to vulnerabilities, and shows a series of attacks which exploit these vulnerabilities, allowing an adversary to steal money or cause other damage.Abstract:
Smart contracts are computer programs that can be correctly executed by a network of mutually distrusting nodes, without the need of an external trusted authority. Since smart contracts handle and transfer assets of considerable value, besides their correct execution it is also crucial that their implementation is secure against attacks which aim at stealing or tampering the assets. We study this problem in Ethereum, the most well-known and used framework for smart contracts so far. We analyse the security vulnerabilities of Ethereum smart contracts, providing a taxonomy of common programming pitfalls which may lead to vulnerabilities. We show a series of attacks which exploit these vulnerabilities, allowing an adversary to steal money or cause other damage.read more
Citations
More filters
Journal ArticleDOI
ExGen: Cross-platform, Automated Exploit Generation for Smart Contract Vulnerabilities
TL;DR: E X G EN successfully outperforms state-of-the-art tool, namely teEther, in generating exploits for vulnerable Ethereum (Solidity) contracts and is able to exploit zero-day vulnerabilities of 24 EOS smart contracts.
Journal ArticleDOI
Unruly Innovation: Distributed Ledgers, Blockchains and the Protection of Transactional Rents
TL;DR: In this article, the authors present a new conceptual model of disruptive innovation and apply it to distributed ledger technology and illustrate the new features of this technology and why there is an argument that, in several respects, the combination of distributed ledger technologies and cryptographically enabled contracts changes the economic framework within which individuals, firms and policy makers reside.
Proceedings ArticleDOI
Analyzing Financial Smart Contracts for Blockchain
Muskan Vinayak,Har Amrit Pal Singh Panesar,Saulo dos Santos,Ruppa K. Thulasiram,Parimala Thulasiraman,Srimantoorao S. Appadoo +5 more
TL;DR: This work has designed a smart contract and demonstrated that this smart contract could be used to take various possible positions in an European style option and analyzed the contract for potential security vulnerabilities when implemented in Blockchain.
Journal ArticleDOI
Trustworthy Blockchain Gateways for Resource-Constrained Clients and IoT Devices
TL;DR: In this paper, the authors propose a data attestation solution that employs full nodes as validators to attest the responses reported by gateways of lightweight nodes, and leverage smart contracts to give lightweight clients confidence in the data reported as they are unable to validate it from the blockchain network themselves.
Posted Content
Blockchain meets Biometrics: Concepts, Application to Template Protection, and Trends
TL;DR: Key tradeoffs involved in that integration, namely, latency, processing time, economic cost, and biometric performance are experimentally studied through the implementation of a smart contract on the Ethereum blockchain platform, which is publicly available in github for research purposes.
References
More filters
Book
Isabelle/HOL: A Proof Assistant for Higher-Order Logic
TL;DR: This presentation discusses Functional Programming in HOL, which aims to provide students with an understanding of the programming language through the lens of Haskell.
Ethereum: A Secure Decentralised Generalised Transaction Ledger
TL;DR: Ethereum as mentioned in this paper is a transactional singleton machine with shared state, which can be seen as a simple application on a decentralised, but singleton, compute resource, and it provides a plurality of resources, each with a distinct state and operating code but able to interact through a message-passing framework with others.
Journal ArticleDOI
Formalizing and Securing Relationships on Public Networks
TL;DR: Protocols with application in important contracting areas, including credit, content rights management, payment systems, and contracts with bearer are discussed.
Proceedings ArticleDOI
On the Security and Performance of Proof of Work Blockchains
TL;DR: This paper introduces a novel quantitative framework to analyse the security and performance implications of various consensus and network parameters of PoW blockchains and devise optimal adversarial strategies for double-spending and selfish mining while taking into account real world constraints.
Proceedings ArticleDOI
Making Smart Contracts Smarter
TL;DR: This paper investigates the security of running smart contracts based on Ethereum in an open distributed network like those of cryptocurrencies, and proposes ways to enhance the operational semantics of Ethereum to make contracts less vulnerable.