A Survey of Attacks on Ethereum Smart Contracts (SoK)

By Nicola Atzei, Massimo Bartoletti, Tiziana Cimoli. The post, 2017

1,571 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems

View Paper: https://www.semanticscholar.org/paper/aec843c0f38aff6c7901391a75ec10114a3d60f8

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Information Systems

Citations in the corpus

A Survey on Consensus Mechanisms and Mining Strategy Management in Blockchain Networks (2018, background): “However, due to the recent market frenzy about cryptocurrencies, most of the existing general reviews and surveys on blockchains emphasize narrowly the scenarios of using blockchain networks as the backbone technologies for cryptocurrencies, especially the market-dominant ones such as Bitcoin and Et”
Under-optimized smart contracts devour your money (2017, background): “Atzei et al. survey a series of attacks which exploit the vulnerabilities of contracts to steal or tamper the assets [13].”
A Survey on Blockchain Interoperability: Past, Present, and Future Trends (2020, background): “r, each blockchain has its security risks, as the technology is still maturing, the user base is limited (e.g., in comparison to the web or databases), and there are uncovered bugs and security flaws [11]. Developers and researchers have, therefore, to choose between novelty and stability, leading t”
Smart contracts: security patterns in the ethereum ecosystem and solidity (2018, background): “[10] and lists 12 vulnerabilities that are assigned by context to Solidity, the EVM, and blockchain peculiarities itself.”
Securify: Practical Security Analysis of Smart Contracts (2018, background): “Smart contracts have been shown to be exposed to severe vulnerabilities [20, 27].”
KEVM: A Complete Formal Semantics of the Ethereum Virtual Machine (2018, background): “Worse still, the DAO is one of many smart contracts which did not execute as expected, inducing costly losses [14], [15], [16], [17].”
Erays: Reverse Engineering Ethereum's Opaque Smart Contracts (2018, background): “provide a survey of known smart contract vulnerabilities [11].”
Blockchain and Smart Contracts for Insurance: Is the Technology Mature Enough? (2018, background): “Smart contracts frequently experience attacks, in some cases with disastrous consequences [70].”
sFuzz: An Efficient Adaptive Fuzzer for Solidity Smart Contracts (2020, methodology): “the Deed contract using Isabelle/HOL [26]. sFuzz is broadly related to work on analyzing smart contracts. In [13], Delmolino et al. showed that writing a safe smart contract is not a trivial task. In [8], Atzei et al. provided a taxonomy for common vulnerabilities in smart contracts with real-world ”
Dissecting Ponzi schemes on Ethereum: identification, analysis, and impact (2017, background): “As already noted in [2, 7], if the send primitive (used in Solidity to transfer ether) fails, it returns an error code: if a contract does not check this error, it cannot acknowledge that there has been a problem.”
Smart contract applications within blockchain technology: A systematic mapping study (2018, methodology): “The fact that there was no trivial way for the compiler to check whether type assertions were valid or not deceives the programmers (Atzei et al., 2017) because they assumed that: 1) it would also check the correctness of the arguments, and 2) it would check whether the sent argument was the…”
Combining Graph Neural Networks With Expert Knowledge for Smart Contract Vulnerability Detection (2021, background): “The fallback function is a special function with no name and no argument,which can be arbitrarily programmed [31].”
Proofs-of-delay and randomness beacons in Ethereum (2017, background): “Indeed, many Ethereum-based contracts, in particular gambling contracts, already apply this approach to generate randomness [4].”
Who Are the Phishers? Phishing Scam Detection on Ethereum via Network Embedding (2019, background): “Network heterogeneity of the Ethereum transaction network refers to the fact that many transactions are related to some public or popular addresses, such as wallet, exchanges, and famous ICOs while the majority of addresses including both normal and phishing addresses may have a relatively small num”
An Overview on Smart Contracts: Challenges, Advances and Platforms (2019, neutral): “Rising challenges Applications [12], [13], [14] [15], [16] [17] [18] [19], [20], [21] This paper • A detailed comparison of typical smart contract platforms is made.”
A Survey on the Security of Blockchain Systems (2017, background): “Although a series of related attacks on smart contracts are listed in [20], there lacks a discussion on security enhancement.”
Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks (2018, background): “For example, Figure 2 shows a simpliﬁed version of a contract (inspired by [10]), called Victim , which suffers from a re-entrancy vulnerability.”
SoK: Decentralized Finance (DeFi) (2021, neutral): “Smart contract vulnerabilities have been extensively discussed in the literature [8,111,146] and we will therefore not give an extensive list of all the known vulnerabilities but rather focus on the one which have already been exploited in the DeFi context.”
Blockchain smart contracts: Applications, challenges, and future trends (2021, background): “Indeed, several studies systematically summarized the contract vulnerabilities and analyzed the security risks [8, 77, 81].”