Classification of Ethereum Vulnerabilities and their Propagations

Mirko Staderini, Caterina Palli, Andrea Bondavalli

202025 citationsDOI

Abstract

Blockchain technology is having an ever-increasing impact on distributed applications domain, since the adoption of Blockchain 2.0 led to the spread of smart contracts. In such a context, Ethereum is the framework with the highest diffusion in terms of smart contract's development, with a consequent rise of exploitation of code vulnerabilities, some of which causing bad financial losses. For this reason, this paper focuses on the issues of Ethereum smart contracts implementation (made with the Turing-complete language Solidity), providing a comprehensive systematization of such vulnerabilities basing on a slice of the Common Weakness Enumeration (CWE). Moreover, some relevant propagation cases among different vulnerabilities and CWE groups, observed in exploited contracts, are highlighted.

Topics & Concepts

SolidityComputer securityBlockchainContext (archaeology)Smart contractComputer scienceCode (set theory)Domain (mathematical analysis)TuringProgramming languageMathematicsMathematical analysisSet (abstract data type)BiologyPaleontologyBlockchain Technology Applications and SecurityCryptography and Data SecurityAdvanced Malware Detection Techniques