论文标题

一项有关以太坊智能合约脆弱性的调查

A Survey on Vulnerabilities of Ethereum Smart Contracts

论文作者

Khan, Zulfiqar Ali, Namin, Akbar Siami

论文摘要

智能合约(SC)是区块链技术的扩展。以太坊区块链是第一个合并SC的人,因此开始了加密货币和电子交易的新时代。坚固有助于对SC进行编程。尽管如此,在2014年稳固出现后不久,基于坚固的SC遭到了许多攻击,剥夺了SC帐户持有人的宝贵资金。这些攻击的主要原因是SC中存在脆弱性。本文讨论了SC漏洞并根据故障操作的领域知识对它们进行了分类。此分类是提醒开发人员和软件工程师的来源,为了确保SC的安全,每个SC都需要使用有效的工具进行适当的测试来捕捉这些课程的漏洞。

Smart contract (SC) is an extension of BlockChain technology. Ethereum BlockChain was the first to incorporate SC and thus started a new era of crypto-currencies and electronic transactions. Solidity helps to program the SCs. Still, soon after Solidity's emergence in 2014, Solidity-based SCs suffered many attacks that deprived the SC account holders of their precious funds. The main reason for these attacks was the presence of vulnerabilities in SC. This paper discusses SC vulnerabilities and classifies them according to the domain knowledge of the faulty operations. This classification is a source of reminding developers and software engineers that for SC's safety, each SC requires proper testing with effective tools to catch those classes' vulnerabilities.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源