Cybersecurity Test Bed for Smart Contracts

Author:

DeCusatis Casimer1,Gormanly Brian1ORCID,Iacino John1,Percelay Reed1,Pingue Alex1,Valdez Justin1

Affiliation:

1. School of Computer Science and Mathematics, Marist College, Poughkeepsie, NY 12601, USA

Abstract

Blockchain, smart contracts, and related concepts have emerged in recent years as a promising technology for cryptocurrency, NFTs, and other areas. However, there are still many security issues that must be addressed as these technologies evolve. This paper reviews some of the leading social engineering attacks on smart contracts, as well as several vulnerabilities which result from insecure code development. A smart contract test bed is constructed using Solidity and a Metamask wallet to evaluate vulnerabilities such as insecure arithmetic, denial of service, and re-entrancy attacks. Cross-chain vulnerabilities and potential vulnerabilities resulting from layer 2 side-chain processing were also investigated. Mitigation best practices are proposed based on the experimental results.

Publisher

MDPI AG

Subject

Applied Mathematics,Computational Theory and Mathematics,Computer Networks and Communications,Computer Science Applications,Software

Reference30 articles.

1. Gaur, N. (2021, December 08). “The Rising NFT Tide Lifts All Tokens”, Including IBM’s Definition of the Permissioned Blockchain Paradigm, April 2021. Available online: https://www.ibm.com/blogs/blockchain/2021/04/the-rising-nft-tide-lifts-all-tokens-so-what-is-an-nft/.

2. Dixon, C. (2021, December 08). Why Web3 Matters. Available online: https://future.a16z.com/why-web3-matters/.

3. Marlinspike, M. (2021, December 08). First Impressions of Web3. January 2022. Available online: https://moxie.org/2022/01/07/web3-first-impressions.html.

4. Jain, M., Oliveria, M., Shin, A., Apostolu, D., Wackerow, P., Zhu, R., Awosika, E., Richards, S., Zhang, L., and Cook, J. (2022, December 22). “Zero Knowledge Rollups”, Etherium Documentation. Available online: https://ethereum.org/en/developers/docs/scaling/zk-rollups/.

5. Kalodner, H., Goldfeder, S., Chen, X., Weinberg, S., and Felten, E. (2018, January 15–17). Arbitrum: Scalable, Private Smart Contracts. Proceedings of the 27th USENIX Security Symposium, Baltimore, MD, USA. Available online: https://www.usenix.org/conference/usenixsecurity18/presentation/kalodner.

Cited by 2 articles. 订阅此论文施引文献 订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献

同舟云学术

1.学者识别学者识别

2.学术分析学术分析

3.人才评估人才评估

"同舟云学术"是以全球学者为主线,采集、加工和组织学术论文而形成的新型学术文献查询和分析系统,可以对全球学者进行文献检索和人才价值评估。用户可以通过关注某些学科领域的顶尖人物而持续追踪该领域的学科进展和研究前沿。经过近期的数据扩容,当前同舟云学术共收录了国内外主流学术期刊6万余种,收集的期刊论文及会议论文总量共计约1.5亿篇,并以每天添加12000余篇中外论文的速度递增。我们也可以为用户提供个性化、定制化的学者数据。欢迎来电咨询!咨询电话:010-8811{复制后删除}0370

www.globalauthorid.com

TOP

Copyright © 2019-2024 北京同舟云网络信息技术有限公司
京公网安备11010802033243号  京ICP备18003416号-3