Ethereum smart contracts are distributed programs running on top of the Ethereum blockchain. Since program flaws can cause significant monetary losses and can hardly be fixed due to the immutable nature of the blockchain, there is a strong need of automated analysis tools which provide formal security guarantees. Designing such analyzers, however, proved to be challenging and error-prone. We review the existing approaches to automated, sound, static analysis of Ethereum smart contracts and highlight prevalent issues in the state of the art. Finally, we overview eThor, a recent static analysis tool that we developed following a principled design and implementation approach based on rigorous semantic foundations to overcome the problems of past works.
翻译：Eceenum智能合同分布在Eceenum 块链之上。 由于程序缺陷可能造成巨大的货币损失,并且由于这一块链的不可改变性质,很难固定,因此非常需要提供正式安全保障的自动分析工具。然而,设计这种分析器证明具有挑战性和易出错性。我们审查了目前对Eceenum 智能合同进行自动、稳健和静态分析的方法,并突出强调了当前技术现状中普遍存在的问题。最后,我们概述了EThor,这是我们根据严格的语义基础制定的原则性设计和实施方法,以克服过去工程问题的最新静态分析工具。
相关内容
微信扫码咨询专知VIP会员