Systematic Review of Security Vulnerabilities in Ethereum Blockchain Smart Contract

被引:87
|
作者
Kushwaha, Satpal Singh [1 ]
Joshi, Sandeep [1 ]
Singh, Dilbag [2 ]
Kaur, Manjit [2 ]
Lee, Heung-No [2 ]
机构
[1] Manipal Univ Jaipur, Dept Comp Sci & Engn, Jaipur 303007, Rajasthan, India
[2] Gwangju Inst Sci & Technol, Sch Elect Engn & Comp Sci, Gwangju 61005, South Korea
基金
新加坡国家研究基金会;
关键词
Smart contracts; Blockchains; Security; Codes; Libraries; Systematics; Programming; Blockchain; smart contract; decentralized; ethereum; vulnerabilities; security analysis tool; VERIFICATION; CHALLENGES;
D O I
10.1109/ACCESS.2021.3140091
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Blockchain is a revolutionary technology that enables users to communicate in a trust-less manner. It revolutionizes the modes of business between organizations without the need for a trusted third party. It is a distributed ledger technology based on a decentralized peer-to-peer (P2P) network. It enables users to store data globally on thousands of computers in an immutable format and empowers users to deploy small pieces of programs known as smart contracts. The blockchain-based smart contract enables auto enforcement of the agreed terms between two untrusted parties. There are several security vulnerabilities in Ethereum blockchain-based smart contracts, due to which sometimes it does not behave as intended. Because a smart contract can hold millions of dollars as cryptocurrency, so these security vulnerabilities can lead to disastrous losses. In this paper, a systematic review of the security vulnerabilities in the Ethereum blockchain is presented. The main objective is to discuss Ethereum smart contract security vulnerabilities, detection tools, real life attacks and preventive mechanisms. Comparisons are drawn among the Ethereum smart contract analysis tools by considering various features. From the extensive depth review, various issues associated with the Ethereum blockchain-based smart contract are highlighted. Finally, various future directions are also discussed in the field of the Ethereum blockchain-based smart contract that can help the researchers to set the directions for future research in this domain.
引用
收藏
页码:6605 / 6621
页数:17
相关论文
共 50 条
  • [1] Security Vulnerabilities in Ethereum Smart Contracts
    Dika, Ardit
    Nowostawski, Mariusz
    [J]. IEEE 2018 INTERNATIONAL CONGRESS ON CYBERMATICS / 2018 IEEE CONFERENCES ON INTERNET OF THINGS, GREEN COMPUTING AND COMMUNICATIONS, CYBER, PHYSICAL AND SOCIAL COMPUTING, SMART DATA, BLOCKCHAIN, COMPUTER AND INFORMATION TECHNOLOGY, 2018, : 955 - 962
  • [2] Security Vulnerabilities in Ethereum Smart Contracts
    Mense, Alexander
    Flatscher, Markus
    [J]. IIWAS2018: THE 20TH INTERNATIONAL CONFERENCE ON INFORMATION INTEGRATION AND WEB-BASED APPLICATIONS & SERVICES, 2014, : 375 - 380
  • [3] Ethereum Smart Contract Analysis Tools: A Systematic Review
    Kushwaha, Satpal Singh
    Joshi, Sandeep
    Singh, Dilbag
    Kaur, Manjit
    Lee, Heung-No
    [J]. IEEE ACCESS, 2022, 10 : 57037 - 57062
  • [4] Machine learning methods for detecting smart contracts vulnerabilities within Ethereum blockchain − A review
    Crisostomo, Joao
    Bacao, Fernando
    Lobo, Victor
    [J]. Expert Systems with Applications, 2025, 268
  • [5] Smart-Graph: Graphical Representations for Smart Contract on the Ethereum Blockchain
    Pierro, Giuseppe Antonio
    [J]. 2021 IEEE INTERNATIONAL CONFERENCE ON SOFTWARE ANALYSIS, EVOLUTION AND REENGINEERING (SANER 2021), 2021, : 708 - 714
  • [6] An efficient approach to secure smart contract of Ethereum blockchain using hybrid security analysis approach
    Kushwaha, Satpal Singh
    Joshi, Sandeep
    Gupta, Amit Kumar
    [J]. JOURNAL OF DISCRETE MATHEMATICAL SCIENCES & CRYPTOGRAPHY, 2023, 26 (05): : 1499 - 1517
  • [7] GasFuzzer: Fuzzing Ethereum Smart Contract Binaries to Expose Gas-Oriented Exception Security Vulnerabilities
    Ashraf, Imran
    Ma, Xiaoxue
    Jiang, Bo
    Chan, W. K.
    [J]. IEEE ACCESS, 2020, 8 (08): : 99552 - 99564
  • [8] Analyzing Ethereum Smart Contract Vulnerabilities at Scale Based on Inter-Contract Dependency
    Lyu, Qiuyun
    Ma, Chenhao
    Shen, Yanzhao
    Jiao, Shaopeng
    Sun, Yipeng
    Hu, Liqin
    [J]. CMES-COMPUTER MODELING IN ENGINEERING & SCIENCES, 2023, 135 (02): : 1625 - 1647
  • [9] SSHCEth: Secure Smart Home Communications based on Ethereum Blockchain and Smart Contract
    Bourian, Imad
    Sebbar, Anass
    Chougdali, Khalid
    Amhoud, El Mehdi
    [J]. IEEE CONFERENCE ON GLOBAL COMMUNICATIONS, GLOBECOM, 2023, : 2674 - 2679
  • [10] A systematic literature review of undiscovered vulnerabilities and tools in smart contract technology
    Zaazaa, Oualid
    El Bakkali, Hanan
    [J]. JOURNAL OF INTELLIGENT SYSTEMS, 2023, 32 (01)