HighGuard: Cross-Chain Business Logic Monitoring of Smart Contracts
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2023
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866916614426853376 |
|---|---|
| author | Eshghie, Mojtaba Ahrendt, Wolfgang Artho, Cyrille Hildebrandt, Thomas Troels Schneider, Gerardo |
| author_facet | Eshghie, Mojtaba Ahrendt, Wolfgang Artho, Cyrille Hildebrandt, Thomas Troels Schneider, Gerardo |
| contents | Logical flaws in smart contracts are often exploited, leading to significant financial losses. Our tool, HighGuard, detects transactions that violate business logic specifications of smart contracts. HighGuard employs dynamic condition response (DCR) graph models as formal specifications to verify contract execution against these models. It is capable of operating in a cross-chain environment for detecting business logic flaws across different blockchain platforms. We demonstrate HighGuard's effectiveness in identifying deviations from specified behaviors in smart contracts without requiring code instrumentation or incurring additional gas costs. By using precise specifications in the monitor, HighGuard achieves detection without false positives. Our evaluation, involving 54 exploits, confirms HighGuard's effectiveness in detecting business logic vulnerabilities.
Our open-source implementation of HighGuard and a screencast of its usage are available at: https://github.com/mojtaba-eshghie/HighGuard https://www.youtube.com/watch?v=sZYVV-slDaY |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2305_08254 |
| institution | arXiv |
| publishDate | 2023 |
| record_format | arxiv |
| spellingShingle | HighGuard: Cross-Chain Business Logic Monitoring of Smart Contracts Eshghie, Mojtaba Ahrendt, Wolfgang Artho, Cyrille Hildebrandt, Thomas Troels Schneider, Gerardo Cryptography and Security Software Engineering Logical flaws in smart contracts are often exploited, leading to significant financial losses. Our tool, HighGuard, detects transactions that violate business logic specifications of smart contracts. HighGuard employs dynamic condition response (DCR) graph models as formal specifications to verify contract execution against these models. It is capable of operating in a cross-chain environment for detecting business logic flaws across different blockchain platforms. We demonstrate HighGuard's effectiveness in identifying deviations from specified behaviors in smart contracts without requiring code instrumentation or incurring additional gas costs. By using precise specifications in the monitor, HighGuard achieves detection without false positives. Our evaluation, involving 54 exploits, confirms HighGuard's effectiveness in detecting business logic vulnerabilities. Our open-source implementation of HighGuard and a screencast of its usage are available at: https://github.com/mojtaba-eshghie/HighGuard https://www.youtube.com/watch?v=sZYVV-slDaY |
| title | HighGuard: Cross-Chain Business Logic Monitoring of Smart Contracts |
| topic | Cryptography and Security Software Engineering |
| url | https://arxiv.org/abs/2305.08254 |