STAN: Towards Describing Bytecodes of Smart Contract

Li, Xiaoqi; Chen, Ting; Luo, Xiapu; Zhang, Tao; Yu, Le; Zhou, Xu

doi:10.1109/qrs51102.2020.00045

Cited by 17 publications

(5 citation statements)

References 28 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, it has subsequently shifted to the Proof-of-Stake (PoS) algorithm, which is based on the quantity and age of stakes held [14]. It first uses the Turing-complete programming language Solidity and Vyper, etc to develop smart contracts [15] [16]. Anyone can deploy decentralized applications (dapps) on the Ethereum chain that can communicate with others, and the most popular application in the financial field is DeFi, which provides a wide range of financial services.…”

Section: Background a Ethereummentioning

confidence: 99%

A Survey of DeFi Security: Challenges and Opportunities

Li¹,

Bu²,

Li³

et al. 2022

Preprint

Self Cite

View full text Add to dashboard Cite

Decentralized finance (DeFi), which is a promising domain since the era of blockchain 2.0, locked $200 billion in April 2022. However, it quickly dropped to $100 billion in May 2022, which makes us realize that security issues in this area are still a challenging job. DeFi is more complex than traditional finance because it is decentralized through blockchain and without a trustworthy third-party institution to act as a guarantee. So it owns not only financial properties but also technical aspects. Existing synthesis work for DeFi tends to ignore the relevance of various layers of security for the whole system. In addition, distinct layers have different means of protection against specific vulnerabilities, which is not considered by existing analytical work. In this paper, we perform a vulnerability analysis for the entire technology layer of the DeFi application, and then we collect the most impactive attacks in recent years. Finally, we summarize the existing optimization approaches for different layers and provide some challenges and future directions.

show abstract

Section: Background a Ethereummentioning

confidence: 99%

A Survey of DeFi Security: Challenges and Opportunities

Li¹,

Bu²,

Li³

et al. 2022

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…Memory is the temporarily allocated space when smart contracts are executed in EVM, which is automatically freed as the transaction execution finishes. EVM is a 1,024 depth stack-based virtual machine, and the contracts' opcodes are all executed around the stack [16].…”

Section: Smart Contractmentioning

confidence: 99%

Characterizing Erasable Accounts in Ethereum

Chen

Luo

et al. 2020

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Being the most popular permissionless blockchain that supports smart contracts, Ethereum allows any user to create accounts on it. However, not all accounts matter. For example, the accounts due to attacks can be removed. In this paper, we conduct the first investigation on erasable accounts that can be removed to save system resources and even users' money (i.e., ETH or gas). In particular, we propose and develop a novel tool named Glaser, which analyzes the State DataBase of Ethereum to discover five kinds of erasable accounts. The experimental results show that Glaser can accurately reveal 508,482 erasable accounts and these accounts lead to users wasting more than 106 million dollars. Glaser can help stop further economic loss caused by these detected accounts. Moreover, Glaser characterizes the attacks/behaviors related to detected erasable accounts through graph analysis.

show abstract

“…Ethereum: Ethereum is the most popular blockchain system that supports smart contracts [5]. There are two kinds of accounts in Ethereum, i.e., EOA and contract account [6]. EOA is controlled by user through its private key, which does not store any code.…”

Section: Background and Related Workmentioning

confidence: 99%

“…ETH is the native cryptocurrency of Ethereum. Apart from ETH, there are many other kinds of cryptocurrencies based on contracts, and ERC20 is the most popular standard of CBC [6]. All the CBC analyzed in this paper are compliant with ERC20.…”

Section: Background and Related Workmentioning

confidence: 99%

CLUE: Towards Discovering Locked Cryptocurrencies in Ethereum

Li,

Chen,

Luo

et al. 2020

Preprint

Self Cite

View full text Add to dashboard Cite

As the most popular blockchain that supports smart contracts, there are already more than 296 thousand kinds of cryptocurrencies built on Ethereum. However, not all cryptocurrencies can be controlled by users. For example, some money is permanently locked in wallets' accounts due to attacks. In this paper, we conduct the first systematic investigation on locked cryptocurrencies in Ethereum.In particular, we define three categories of accounts with locked cryptocurrencies and develop a novel tool named Clue to discover them. Results show that there are more than 216 million dollars value of cryptocurrencies locked in Ethereum. We also analyze the reasons (i.e., attacks/behaviors) why cryptocurrencies are locked. Because the locked cryptocurrencies can never be controlled by users, avoid interacting with the accounts discovered by Clue and repeating the same mistakes again can help users to save money. CCS CONCEPTS• Security and privacy → Distributed systems security; Software security engineering; • Software and its engineering → Software usability.

show abstract

STAN: Towards Describing Bytecodes of Smart Contract

Cited by 17 publications

References 28 publications

A Survey of DeFi Security: Challenges and Opportunities

A Survey of DeFi Security: Challenges and Opportunities

Characterizing Erasable Accounts in Ethereum

CLUE: Towards Discovering Locked Cryptocurrencies in Ethereum

Contact Info

Product

Resources

About