论文标题

通过比较历史记录版本,查找以太坊智能合约问题

Finding Ethereum Smart Contracts Security Issues by Comparing History Versions

论文作者

Chen, Jiachi

论文摘要

智能合约是在区块链上运行的图灵完整程序。即使检测到错误,也无法修改它们。自源性功能是销毁区块链系统上合同并在合同余额中转移所有以太货币的唯一方法。因此,许多开发人员使用此功能来销毁合同并在检测到错误时重新部署新合同。在本文中,我们提出了一种基于学习的方法,通过查找已破坏的合同的更新版本来找到以太坊智能合约的安全问题。找到更新的版本后,我们使用开放卡分类来查找安全问题。

Smart contracts are Turing-complete programs running on the blockchain. They cannot be modified, even when bugs are detected. The Selfdestruct function is the only way to destroy a contract on the blockchain system and transfer all the Ethers on the contract balance. Thus, many developers use this function to destroy a contract and redeploy a new one when bugs are detected. In this paper, we propose a deep learning-based method to find security issues of Ethereum smart contracts by finding the updated version of a destructed contract. After finding the updated versions, we use open card sorting to find security issues.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源