Work

WANA: Symbolic Execution of Wasm Bytecode for Cross-Platform Smart Contract Vulnerability Detection

Year: 2020

Type: preprint

Abstract: Many popular blockchain platforms are supporting smart contracts for building decentralized applications. However, the vulnerabilities within smart contracts have led to serious financial loss to their end users. For the EOSIO blockchain platform, effective vulnerability detectors are still limited. Furthermore, existing vulnerability detection tools can only support one blockchain platform. In this work, we present WANA, a cross-platform smart contract vulnerability detection tool based on the symbolic execution of WebAssembly bytecode. Furthermore, WANA proposes a set of test oracles to detect the vulnerabilities in EOSIO and Ethereum smart contracts based on WebAssembly bytecode analysis. Our experimental analysis shows that WANA can effectively detect vulnerabilities in both EOSIO and Ethereum smart contracts with high efficiency.

Source: arXiv (Cornell University)

DOI: 10.48550/arxiv.2007.15510

Authors: Wang, Dong, Jiang, Bo, Chan, W. K.

Institutions: Beihang University, City University of Hong Kong

Language: English

Topic: Blockchain Technology Applications and Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

Funder: National Natural Science Foundation of China

Award: Android应用的模糊测试关键技术研究

OpenAlex ID: W3045708674

Cites: 15

Cited by: 14

Related to: 10