Oracle-Supported Dynamic Exploit Generation for Smart Contracts

Haijun Wang, Ye Liu, Yi Li, Shang Wei Lin, Cyrille Artho, Lei Ma, Yang Liu

Research output: Contribution to journalArticlepeer-review

13 Citations (Scopus)

Abstract

Despite the high stakes involved in smart contracts, they are often developed in an undisciplined manner, leaving the security and reliability of blockchain transactions at risk. In this article, we introduce ContraMaster - an oracle-supported dynamic exploit generation framework for smart contracts. Existing approaches mutate only single transactions; ContraMaster exceeds these by mutating the transaction sequences. ContraMaster uses data-flow, control-flow, and the dynamic contract state to guide its mutations. It then monitors the executions of target contract programs, and validates the results against a general-purpose semantic test oracle to discover vulnerabilities. Being a dynamic technique, it guarantees that each discovered vulnerability is a violation of the test oracle and is able to generate the attack script to exploit this vulnerability. In contrast to rule-based approaches, ContraMaster has not shown any false positives, and it easily generalizes to unknown types of vulnerabilities (e.g., logic errors). We evaluate ContraMaster on 218 vulnerable smart contracts. The experimental results confirm its practical applicability and advantages over the state-of-the-art techniques, and also reveal three new types of attacks.

Original languageEnglish
Pages (from-to)1795-1809
Number of pages15
JournalIEEE Transactions on Dependable and Secure Computing
Volume19
Issue number3
DOIs
Publication statusPublished - 2022

All Science Journal Classification (ASJC) codes

  • General Computer Science
  • Electrical and Electronic Engineering

Fingerprint

Dive into the research topics of 'Oracle-Supported Dynamic Exploit Generation for Smart Contracts'. Together they form a unique fingerprint.

Cite this