Teether: Gnawing At Ethereum To Automatically Exploit Smart Contracts
PROCEEDINGS OF THE 27TH USENIX SECURITY SYMPOSIUM(2018)
摘要
Cryptocurrencies like Bitcoin not only provide a decentralized currency, but also provide a programmatic way to process transactions. Ethereum, the second largest cryptocurrency next to Bitcoin, is the first to provide a Turing-complete language to specify transaction processing, thereby enabling so-called smart contracts. This provides an opportune setting for attackers, as security vulnerabilities are tightly intertwined with financial gain. In this paper, we consider the problem of automatic vulnerability identification and exploit generation for smart contracts. We develop a generic definition of vulnerable contracts and use this to build TEETHER, a tool that allows creating an exploit for a contract given only its binary bytecode. We perform a large-scale analysis of all 38,757 unique Ethereum contracts, 815 out of which our tool finds working exploits for-completely automated.
更多查看译文
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络