Yi Li bio photo

Yi Li

Associate Professor

College of Computing and Data Science (CCDS)
Nanyang Technological University (NTU)

Address: Block N4-02b-63
50 Nanyang Avenue, Singapore 639798
Phone: +65 6790 4287

Email Twitter LinkedIn GitHub Bitbucket Google Scholar ORCID

VULTRON: CATCHING VULNERABLE SMART CONTRACTS ONCE AND FOR ALL

Haijun Wang, Yi Li, Shang-Wei Lin, Lei Ma, and Yang Liu

In Proceedings of the 41st International Conference on Software Engineering, ICSE 2019

Abstract: Despite the high stakes involved, smart contracts are often written in an undisciplined way thus far. The existence of vulnerabilities compromises the security and reliability of smart contracts, and endangers the trust of participants in their ongoing businesses. Existing vulnerability detection techniques are often designed case-by-case, making them difficult to generalize. In this paper, we design general principles for detecting vulnerable smart contracts. Our insight is that almost all the existing transaction related vulnerabilities are due to the mismatch between the actual transferred value and the amount reflected on the contract’s internal bookkeeping. Based on this, we propose a precise and generally applicable technique, VULTRON, which can detect irregular transactions due to various types of adversarial exploits. We also report on preliminary results applying our technique in real-world case studies.

Paper