Distributed Runtime Verification of Metric Temporal Properties for Cross-Chain Protocols

Ganguly, Ritam; Xue, Yingjie; Jonckheere, Aaron; Ljung, Parker; Schornstein, Benjamin; Bonakdarpour, Borzoo; Herlihy, Maurice

doi:10.1109/icdcs54860.2022.00012

Cited by 11 publications

(5 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Multiple methodologies have been proposed for the enforcement of these rules. For instance, Ganguly et al [260] introduce a runtime verification approach that assesses partially synchronous distributed computations, leveraging an SMT-based formula. Within this context, they delineate cross-chain rules through metric temporal logic formulas.…”

Section: Interoperability and Cross-chain Rulesmentioning

confidence: 99%

SoK: Security and Privacy of Blockchain Interoperability [Extended Version]

Augusto,

Belchior,

Correia

et al. 2024

Preprint

View full text Add to dashboard Cite

Recent years have witnessed significant advancements in cross-chain technology. However, the field faces two pressing challenges when it comes to security and privacy. Hacks on cross-chain bridges have led to monetary losses of around 3 billion USD, highlighting flaws in security models governing interoperability mechanisms (IMs) and the ineffectiveness of incident response frameworks. Additionally, the exploration of privacy within cross-chain scenarios remains relatively unexplored. Hackers benefit from extensive privacy, whereas users and bridge operators experience restricted privacy, thereby broadening the potential attack surface for adversaries. In this paper, we present the most comprehensive study to date on the security and privacy of blockchain interoperability. Our study employs a rigorous systematic literature review, yielding a corpus of 178 relevant documents, including 58 academic papers and 120 gray literature documents, out of a pool of 531. We systematically categorize 56 interoperability solutions based on a newly created taxonomy focusing on security and privacy considerations. Our dataset, comprising academic research, disclosures from bug bounty programs, and audit reports, exposes 45 cross-chain vulnerabilities, 25 theoretical attacks, and 88 mitigation strategies. Leveraging this data, we analyze 14 notable bridge hacks accounting for over USD 2.9 billion in losses, mapping them to the identified vulnerabilities. Our findings reveal that a substantial portion (65.8\%) of stolen funds originates from projects secured by permissioned intermediary networks with unsecured cryptographic key operations. Regarding privacy, we demonstrate that achieving unlinkability in cross-chain transactions is contingent on the underlying ledgers providing some form of confidentiality. In conclusion, our study offers critical insights into the challenges and vulnerabilities within the realm of cross-chain interoperability. We pinpoint promising directions for future research that can guide both industry practitioners and academics toward substantial advancements in this field. Our work underscores the urgency of enhancing security and privacy measures in cross-chain technology to mitigate the substantial financial risks associated with bridge hacks and to foster user trust in the blockchain ecosystem.

show abstract

Section: Interoperability and Cross-chain Rulesmentioning

confidence: 99%

SoK: Security and Privacy of Blockchain Interoperability [Extended Version]

Augusto,

Belchior,

Correia

et al. 2024

Preprint

View full text Add to dashboard Cite

show abstract

“…[10] proposes a two-fold veriőcation process that involves monitoring the smart contract's execution in real-time and tracking data ŕow to sensitive operations. [38] proposes a generalized runtime veriőcation technique based on metric temporal logic (MTL) for monitoring the execution of smart contracts on multiple blockchains. The paper focuses on ensuring the runtime correctness of smart contracts in a cross-chain environment where different blockchains may not have perfectly synchronized clocks.…”

Section: Blockchains and Runtime Verificationmentioning

confidence: 99%

Practical runtime verification of cross-organizational smart contracts

Kangogo,

Péter,

Klenik

et al. 2024

Preprint

View full text Add to dashboard Cite

Smart contracts in blockchains often implement critical functionality; consequently, their development time software fault detection, removal, and avoidance have been the target of intensive research. However, the applicability of runtime dependability mechanisms to smart contracts has not been explored systematically, mainly due to the transaction pricing models of public blockchains. In this paper, we propose a novel and practical runtime verification approach for Hyperledger Fabric, the leading cross-organizational blockchain platform, as an error detection facility for fault tolerance mechanisms; building on the proposition that, in contrast to the public setting, cross-organizational blockchains have ample computational headroom for their systematic use. We introduce a smart contract entity framework architecture with reusable domain models and encapsulated runtime verification. We describe Hypernate, our open-source implementation of the approach for Java smart contracts, which uses the Java Modelling Language for requirement specification and integrates the OpenJML verification tool. We demonstrate and evaluate the approach on a Fabric implementation of the TPC-C benchmark.

show abstract

“…This is a realistic assumption since different components of a large industrial system have their own clock and it is certain to have a skew between them. A similar SMT-based solution was studied for LTL and MTL specifications in [27], [28] respectively, which we extend to include a more expressive stream-based specification.…”

Section: Related Workmentioning

confidence: 99%

Stream-based Decentralized Runtime Verification

Ganguly¹,

Bonakdarpour²

2023

Preprint

View full text Add to dashboard Cite

Industrial Control Systems (ICS) are often built from geographically distributed components and often use programmable logic controllers for localized processes. Since verification of such systems is challenging because of both time sensitivity of the system specifications and the inherent asynchrony in distributed components, developing runtime assurance that verifies not just the correctness of different components, but also generates aggregated statistics of the systems is of interest. In this paper, we first present a general technique for runtime monitoring of distributed applications whose behavior can be modeled as input/output streams with an internal computation module in the partially synchronous semantics, where an imperfect clock synchronization algorithm is assumed. Second, we propose a generalized stream-based decentralized runtime verification technique. We also rigorously evaluate our algorithm on extensive synthetic experiments and several ICS and aircraft SBS message datasets.

show abstract

Distributed Runtime Verification of Metric Temporal Properties for Cross-Chain Protocols

Cited by 11 publications

References 35 publications

SoK: Security and Privacy of Blockchain Interoperability [Extended Version]

SoK: Security and Privacy of Blockchain Interoperability [Extended Version]

Practical runtime verification of cross-organizational smart contracts

Stream-based Decentralized Runtime Verification

Contact Info

Product

Resources

About