SmartInspect: solidity smart contract inspector

Bragagnolo, Santiago; Rocha, Henrique; Denker, Marcus; Ducasse, Sté́phane

doi:10.1109/iwbose.2018.8327566

Cited by 69 publications

(41 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Liu et al [40] proposed to perform the fuzz testing on smart contracts by iteratively generating random but diverse transactions to detect reentrancy bugs. 1) Readability • Human readable code [34], [35] • Human readable execution [36], [37] • Re-entrancy [38], [39], [40] 2) Functional issues • Block randness [41], [42], [43] • Overcharging [44], [45] Deployment • Bytecode analysis [46], [47], [48], [49], [50], [51], [52], [53] 1) Contract correctness • Source code analysis [54], [55], [56], [57] • Machine learning based analysis [58], [59], [60] • Graph based analysis [61], [62] 2) Dynamic control flow • Path-searching [63] • Execution environment [64] Execution 1) Trustworthy oracle • Third-party involved [65] • Decentralized [66], [67] 2) Transaction-ordering dependence • Sequential execution [68] • Predefining contract [69] 3) Execution efficiency • Execution serialization [70], [71], [72] • Inspection of contract [73] Completion 1) Privacy and Security • Privacy [74],…”

Section: Recent Advances For Functional Issuesmentioning

confidence: 99%

An overview on smart contracts: Challenges, advances and platforms

Zheng

Xie

Dai

et al. 2020

Future Generation Computer Systems

739

245

View full text Add to dashboard Cite

Smart contract technology is reshaping conventional industry and business processes. Being embedded in blockchains, smart contracts enable the contractual terms of an agreement to be enforced automatically without the intervention of a trusted third party. As a result, smart contracts can cut down administration and save services costs, improve the efficiency of business processes and reduce the risks. Although smart contracts are promising to drive the new wave of innovation in business processes, there are a number of challenges to be tackled. This paper presents a survey on smart contracts. We first introduce blockchains and smart contracts. We then present the challenges in smart contracts as well as recent technical advances. We also compare typical smart contract platforms and give a categorization of smart contract applications along with some representative examples.

show abstract

Section: Recent Advances For Functional Issuesmentioning

confidence: 99%

An overview on smart contracts: Challenges, advances and platforms

Zheng

Xie

Dai

et al. 2020

Future Generation Computer Systems

739

245

View full text Add to dashboard Cite

show abstract

“…Torres, Schütte, and State [20] developed OSIRIS, a tool designed to scan integer vulnerabilities in Ethereum smart contracts. Bragagnolo et al [21] presented a SmartInspect architecture to inspect smart contracts. It addresses the lack of inspectability of a deployed contract by analyzing the contract state using decompilation techniques.…”

Section: Related Workmentioning

confidence: 99%

A Formal Verification Framework for Security Issues of Blockchain Smart Contracts

Sun

2020

Electronics

View full text Add to dashboard Cite

Blockchain technology has attracted more and more attention from academia and industry recently. Ethereum, which uses blockchain technology, is a distributed computing platform and operating system. Smart contracts are small programs deployed to the Ethereum blockchain for execution. Errors in smart contracts will lead to huge losses. Formal verification can provide a reliable guarantee for the security of blockchain smart contracts. In this paper, the formal method is applied to inspect the security issues of smart contracts. We summarize five kinds of security issues in smart contracts and present formal verification methods for these issues, thus establishing a formal verification framework that can effectively verify the security vulnerabilities of smart contracts. Furthermore, we present a complete formal verification of the Binance Coin (BNB) contract. It shows how to formally verify the above security issues based on the formal verification framework in a specific smart contract. All the proofs are checked formally using the Coq proof assistant in which contract model and specification are formalized. The formal work of this paper has a variety of essential applications, such as the verification of blockchain smart contracts, program verification, and the formal establishment of mathematical and computer theoretical foundations.

show abstract

“…The Parity wallet case study clearly showed that a Blockchain-Oriented Software Engineering (BOSE) [13], [14], [15], [16], [17] is needed to define new directions to allow effective software development. New professional roles, enhanced security and reliability, modeling and verification frameworks, and specialized metrics are needed in order to drive blockchain applications to the next reliable level.…”

Section: Road Map To Bosementioning

confidence: 99%

Smart contracts vulnerabilities: a call for blockchain software engineering?

Destefanis

Marchesi

Ortu

et al. 2018

2018 International Workshop on Blockchain Oriented Software Engineering (IWBOSE)

177

101

View full text Add to dashboard Cite

Smart Contracts have gained tremendous popularity in the past few years, to the point that billions of US Dollars are currently exchanged every day through such technology. However, since the release of the Frontier network of Ethereum in 2015, there have been many cases in which the execution of Smart Contracts managing Ether coins has led to problems or conflicts. Compared to traditional Software Engineering, a discipline of Smart Contract and Blockchain programming, with standardized best practices that can help solve the mentioned problems and conflicts, is not yet sufficiently developed. Furthermore, Smart Contracts rely on a non-standard software life-cycle, according to which, for instance, delivered applications can hardly be updated or bugs resolved by releasing a new version of the software. In this paper we advocate the need for a discipline of Blockchain Software Engineering, addressing the issues posed by smart contract programming and other applications running on blockchains. We analyse a case of study where a bug discovered in a Smart Contract library, and perhaps "unsafe" programming, allowed an attack on Parity, a wallet application, causing the freezing of about 500K Ethers (about 150M USD, in November 2017). In this study we analyze the source code of Parity and the library, and discuss how recognised best practices could mitigate, if adopted and adapted, such detrimental software misbehavior. We also reflect on the specificity of Smart Contract software development, which makes some of the existing approaches insufficient, and call for the definition of a specific Blockchain Software Engineering.

show abstract

SmartInspect: solidity smart contract inspector

Cited by 69 publications

References 14 publications

An overview on smart contracts: Challenges, advances and platforms

An overview on smart contracts: Challenges, advances and platforms

A Formal Verification Framework for Security Issues of Blockchain Smart Contracts

Smart contracts vulnerabilities: a call for blockchain software engineering?

Contact Info

Product

Resources

About