Skip to main navigation Skip to search Skip to main content

EOSFuzzer: Fuzzing EOSIO Smart Contracts for Vulnerability Detection

  • Beihang University
  • City University of Hong Kong

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

EOSIO is one typical public blockchain platform. It is scalable in terms of transaction speeds and has a growing ecosystem supporting smart contracts and decentralized applications. However, the vulnerabilities within the EOSIO smart contracts have led to serious attacks, which caused serious financial loss to its end users. In this work, we systematically analyzed three typical EOSIO smart contract vulnerabilities and their related attacks. Then we presented EOSFuzzer, a general black-box fuzzing framework to detect vulnerabilities within EOSIO smart contracts. In particular, EOSFuzzer proposed effective attacking scenarios and test oracles for EOSIO smart contract fuzzing. Our fuzzing experiment on 3963 EOSIO smart contracts shows that EOSFuzzer is both effective and efficient to detect EOSIO smart contract vulnerabilities with high accuracy.

Original languageEnglish
Title of host publication12th Asia-Pacific Symposium on Internetware, Internetware''2020
PublisherAssociation for Computing Machinery
Pages99-109
Number of pages11
ISBN (Electronic)9781450388191
DOIs
StatePublished - 1 Nov 2020
Event12th Asia-Pacific Symposium on Internetware, Internetware''2020 - Virtual, Online, Singapore
Duration: 12 May 202114 May 2021

Publication series

NameACM International Conference Proceeding Series

Conference

Conference12th Asia-Pacific Symposium on Internetware, Internetware''2020
Country/TerritorySingapore
CityVirtual, Online
Period12/05/2114/05/21

Keywords

  • Blockchain
  • Fuzzing
  • Smart contract
  • Vulnerability detection

Fingerprint

Dive into the research topics of 'EOSFuzzer: Fuzzing EOSIO Smart Contracts for Vulnerability Detection'. Together they form a unique fingerprint.

Cite this