arrow
Return

Oracle-Supported Dynamic Exploit Generation for Smart Contracts

delete2022-05-01
delete18
delete
OA
AI
H
Haijun Wang
Y
Ye Liu
Y
Yi Li *
S
Shang‐Wei Lin
C
Cyrille Artho
L
Lei Ma
刘
刘洋 (Yang Liu)
DOI:10.1109/TDSC.2020.3037332delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Despite the high stakes involved in smart contracts, they are often developed in an undisciplined manner, leaving the security and reliability of blockchain transactions at risk. In this article, we introduce ContraMaster-an oracle-supported dynamic exploit generation framework for smart contracts. Existing approaches mutate only single transactions; ContraMaster exceeds these by mutating the transaction sequences. ContraMaster uses data-flow, control-flow, and the dynamic contract state to guide its mutations. It then monitors the executions of target contract programs, and validates the results against a general-purpose semantic test oracle to discover vulnerabilities. Being a dynamic technique, it guarantees that each discovered vulnerability is a violation of the test oracle and is able to generate the attack script to exploit this vulnerability. In contrast to rule-based approaches, ContraMaster has not shown any false positives, and it easily generalizes to unknown types of vulnerabilities (e.g., logic errors). We evaluate ContraMaster on 218 vulnerable smart contracts. The experimental results confirm its practical applicability and advantages over the state-of-the-art techniques, and also reveal three new types of attacks.
Keywords:
Smart contracts
Blockchain
Semantics
Cryptography
Fuzzing
Computer science
Solid modeling
Smart contract
test oracle
security vulnerability
fuzzing
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Transactions on Dependable and Secure Computing cover
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
Papers:
2.6K
Citations:
9.6K

Organization

N
Nanyang Technological University
Scholars:
4.9W
Papers: 4.8W
Citations: 8.1W
R
Royal Institute of Technology
Scholars:
1.8W
Papers: 1.8W
Citations: 25
K
Kyushu University
Scholars:
3.2W
Papers: 2.6W
Citations: 2.8W
researcher View more organizations
Cited Papers

Cited Papers

CReam: A Smart Contract Enabled Collusion-Resistant e-Auction
err2019-07-01
err71
PREAI
errWu, Shuangke; Chen, Yanjiao; Wang, Qian; Li, Minghui; Wang, Cong; Luo, Xiangyang
errShare
errSave
errShare
errSave
Kimberlite Terminology and Classification
err2013-07-12
err0
PREAI
errB. H. Scott Smith; T. E. Nowicki; J. K. Russell; K. J. Webb; R. H. Mitchell; C. M. Hetman; M. Harder; E. M. W. Skinner; Jv. A. Robey
errShare
errSave
Motion of Scandium Ions in Sc2C84 Observed by 45Sc Solution NMR
err1996-06-06
err0
PREAI
errYoko Miyake; Shinzo Suzuki; Yasuhiko Kojima; Koichi Kikuchi; Kaoru Kobayashi; Shigeru Nagase; Masatsune Kainosho; Yohji Achiba; Yutaka Maniwa; Keith Fisher
errShare
errSave
Effects of HIV-1 infection on malaria parasitemia in milo sub-location, western Kenya
err2015-07-15
err0
errOAAI
errErick Kipkoech Rutto; Joshua Nyagol; Julius Oyugi; Samson Ndege; Noel Onyango; Andrew Obala; Chrispinus J Simiyu; Gye Boor; Winfrida Chelangat Cheriro; Barasa Otsyula; Ben Estambale
errShare
errSave
Dependence Guided Symbolic Execution
err2017-03-01
err42
errOAAI
errWang, Haijun; Liu, Ting; Guan, Xiaohong; Shen, Chao; Zheng, Qinghua; Yang, Zijiang
errShare
errSave
researcher View more