Detecting State Inconsistency Bugs in DApps via On-Chain Transaction Replay and Fuzzing
Mingxi Ye, Yuhong Nan, Zibin Zheng, Dongpeng Wu, Huizhong Li
Abstract
Decentralized applications (DApps) consist of multiple smart contracts running on Blockchain. With the increasing popularity of the DApp ecosystem, vulnerabilities in DApps could bring significant impacts such as financial losses. Identifying vulnerabilities in DApps is by no means trivial, as modern DApps consist of complex interactions across multiple contracts. Previous research suffers from either high false positives or false negatives, due to the lack of precise contextual information which is mandatory for confirming smart contract vulnerabilities when analyzing smart contracts.
Topics & Concepts
Fuzz testingDatabase transactionComputer scienceComputer securitySmart contractFalse positive paradoxPopularityFalse positives and false negativesState (computer science)BlockchainDatabaseArtificial intelligenceProgramming languageSoftwarePsychologySocial psychologyBlockchain Technology Applications and SecurityAdvanced Malware Detection TechniquesSecurity and Verification in Computing