Blockchain is a peer-to-peer network system that stores chains of transaction data. Blockchain is decentralized and immutable. Once data is added to the chain, it cannot be modified or deleted. Smart contracts are intelligent protocols running at the application layer of blockchain, enabling trustworthy transactions without third parties. However, the openness and immutability of the architecture introduce various security risks. Integer bugs arise from improper handling of numerical variables. They pose significant dangers in smart contract because, in contracts, integer variables are often used to represent critical financial information, such as account balances, asset prices, and transaction amounts. If miscalculations occur, they can lead to substantial financial losses. This paper describes SolSecure, a framework based on abstract interpretation theory [1, 2], designed to find integer bugs in Ethereum smart contracts. Experimental results show that SolSecure can effectively detect integer vulnerabilities in Solidity smart contracts.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

SolSecure: A Security Analyzer for Integer Bugs in Smart Contracts

  • Tianyi Liu,
  • Gansen Zhao,
  • Kai Zheng

摘要

Blockchain is a peer-to-peer network system that stores chains of transaction data. Blockchain is decentralized and immutable. Once data is added to the chain, it cannot be modified or deleted. Smart contracts are intelligent protocols running at the application layer of blockchain, enabling trustworthy transactions without third parties. However, the openness and immutability of the architecture introduce various security risks. Integer bugs arise from improper handling of numerical variables. They pose significant dangers in smart contract because, in contracts, integer variables are often used to represent critical financial information, such as account balances, asset prices, and transaction amounts. If miscalculations occur, they can lead to substantial financial losses. This paper describes SolSecure, a framework based on abstract interpretation theory [1, 2], designed to find integer bugs in Ethereum smart contracts. Experimental results show that SolSecure can effectively detect integer vulnerabilities in Solidity smart contracts.