Design and Implementation of Static Analyses for Tezos Smart Contracts-Reference-Cited by-同舟云学术

Design and Implementation of Static Analyses for Tezos Smart Contracts

Published:2024-01-29 Issue: Volume: Page:
ISSN:2769-6480
Container-title:Distributed Ledger Technologies: Research and Practice
language:en
Short-container-title:Distrib. Ledger Technol.

Author:

Olivieri Luca¹,Negrini Luca¹,Arceri Vincenzo²,Jensen Thomas³,Spoto Fausto⁴

Affiliation:

1. Ca’ Foscari University of Venice, Venice, Italy

2. University of Parma, Parma, Italy

3. INRIA, Rennes, France and University of Copenhagen, Denmark

4. University of Verona, Verona, Italy

Abstract

Once deployed in blockchain, smart contracts become immutable: attackers can exploit bugs and vulnerabilities in their code, that cannot be replaced with a bug-free version. For this reason, the verification of smart contracts before they are deployed in blockchain is important. However, the development of verification tools is not easy, especially if one wants to obtain guarantees by using formal methods. This paper describes the development, from scratch, of a static analyzer based on abstract interpretation for the verification of real-world Tezos smart contracts. The analyzer is generic with respect to the property under analysis. This paper shows taint analysis as a concrete instantiation of the analyzer, at different levels of precision, to detect untrusted cross-contract invocations.

Publisher

Association for Computing Machinery (ACM)

Link

https://dl.acm.org/doi/pdf/10.1145/3643567

Reference62 articles.

1. Control flow analysis

2. A. M. Antonopoulos and G. Wood. 2018. Mastering Ethereum: Building Smart Contracts and Dapps. O’Reilly.

3. ArcheType. 2023. https://archetype-lang.org/ Accessed 04/2023.

4. Luís Pedro Arrojado da Horta, João Santos Reis, Mário Pereira, and Simão Melo de Sousa. 2020. WhylSon: Proving your Michelson Smart Contracts in Why3. arXiv e-prints (2020), arXiv–2005.

5. G. Bau, A. Miné, V. Botbol, and M. Bouaziz. 2022. Abstract interpretation of Michelson smart-contracts. In 11th ACM SIGPLAN International Workshop on the State Of the Art in Program Analysis. 36–43.

Cited by 2 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Software verification challenges in the blockchain ecosystem;International Journal on Software Tools for Technology Transfer;2024-07-12

2. Detection of Phantom Reads in Hyperledger Fabric;IEEE Access;2024