Classification of Ethereum Vulnerabilities and their Propagations

Research Area: Uncategorized Year: 2020
Type of Publication: In Proceedings Keywords: smart contracts , Ethereum , Solidity , vulnerabilities , classification , relations
Authors: Mirko Staderini; Caterina Palli; Andrea Bondavalli
Book title: 2020 Second International Conference on Blockchain Computing and Applications (BCCA)
Pages: pp. 44-51
Month: December
ISBN: 978-1-7281-8370-1
Blockchain technology is having an ever-increasing impact on distributed applications domain, since the adoption of Blockchain 2.0 led to the spread of smart contracts. In such a context, Ethereum is the framework with the highest diffusion in terms of smart contract’s development, with a consequent rise of exploitation of code vulnerabilities, some of which causing bad financial losses. For this reason, this paper focuses on the issues of Ethereum smart contracts implementation (made with the Turing-complete language Solidity), providing a comprehensive systematization of such vulnerabilities basing on a slice of the Common Weakness Enumeration (CWE). Moreover, some relevant propagation cases among different vulnerabilities and CWE groups, observed in exploited contracts, are highlighted.

Resilient Computing Lab, 2011

Joomla - Realizzazione siti web