Evolution of Automated Weakness Detection in Ethereum Bytecode: a Comprehensive Study

Classés selon la proximité de leur titre et de leur résumé avec ceux de cet article. Sélectionnez-en pour les lire ensemble.

Les articles les plus proches

1. Proche Pas pertinent

   Smart Contract and DeFi Security: Insights from Tool Evaluations and Practitioner Surveys

   Stefanos Chaliasos, Marcos Antonios Charalambous, Liyi Zhou et al. · 2023 · Cryptographie et sécurité · Résumé IA disponible

   Résumé scientifique

   The growth of the decentralized finance (DeFi) ecosystem built on blockchain technology and smart contracts has led to an increased demand for secure and reliable smart contract development. However, attacks targeting smart contracts are increasing, causing an estimated \$6.45 billion in financial losses. Researchers have proposed various automated security tools to detect vulnerabilities, but their real-world impact remains uncertain. In this paper, we aim to shed light on the effectiveness of automated security tools in identifying vulnerabilities that can lead to high-profile attacks, and their overall usage within the industry. Our comprehensive study encompasses an evaluation of five So…

2. Apparenté Pas pertinent

   A Survey of DeFi Security: Challenges and Opportunities

   Wenkai Li, Jiuyang Bu, Xiaoqi Li et al. · 2022 · Journal of King Saud University - Computer and Information Sciences, 2022 · Résumé IA disponible

   Résumé scientifique

   DeFi, or Decentralized Finance, is based on a distributed ledger called blockchain technology. Using blockchain, DeFi may customize the execution of predetermined operations between parties. The DeFi system use blockchain technology to execute user transactions, such as lending and exchanging. The total value locked in DeFi decreased from \$200 billion in April 2022 to \$80 billion in July 2022, indicating that security in this area remained problematic. In this paper, we address the deficiency in DeFi security studies. To our best knowledge, our paper is the first to make a systematic analysis of DeFi security. First, we summarize the DeFi-related vulnerabilities in each blockchain layer. A…

3. Apparenté Pas pertinent

   Loki: Hardening Code Obfuscation Against Automated Attacks

   Moritz Schloegel, Tim Blazytko, Moritz Contag et al. · 2021 · Cryptographie et sécurité · Résumé IA disponible

   Résumé scientifique

   Software obfuscation is a crucial technology to protect intellectual property. Despite its importance, commercial and academic state-of-the-art obfuscation approaches are vulnerable to a plethora of automated deobfuscation attacks, such as symbolic execution, taint analysis, or program synthesis. While several enhanced techniques were proposed to thwart taint analysis or symbolic execution, they either impose a prohibitive runtime overhead or can be removed by compiler optimizations. In general, they suffer from focusing on a single attack vector, allowing an attacker to switch to other more effective techniques, such as program synthesis. In this work, we present Loki, an approach for code …

4. Apparenté Pas pertinent

   Do you still need a manual smart contract audit?

   Isaac David, Liyi Zhou, Kaihua Qin et al. · 2023 · Cryptographie et sécurité · Résumé IA disponible

   Résumé scientifique

   We investigate the feasibility of employing large language models (LLMs) for conducting the security audit of smart contracts, a traditionally time-consuming and costly process. Our research focuses on the optimization of prompt engineering for enhanced security analysis, and we evaluate the performance and accuracy of LLMs using a benchmark dataset comprising 52 Decentralized Finance (DeFi) smart contracts that have previously been compromised. Our findings reveal that, when applied to vulnerable contracts, both GPT-4 and Claude models correctly identify the vulnerability type in 40% of the cases. However, these models also demonstrate a high false positive rate, necessitating continued inv…

5. Apparenté Pas pertinent

   VulDeePecker: A Deep Learning-Based System for Vulnerability Detection

   Zhen Li, Deqing Zou, Shouhuai Xu et al. · 2018 · Cryptographie et sécurité · Résumé IA disponible

   Résumé scientifique

   The automatic detection of software vulnerabilities is an important research problem. However, existing solutions to this problem rely on human experts to define features and often miss many vulnerabilities (i.e., incurring high false negative rate). In this paper, we initiate the study of using deep learning-based vulnerability detection to relieve human experts from the tedious and subjective task of manually defining features. Since deep learning is motivated to deal with problems that are very different from the problem of vulnerability detection, we need some guiding principles for applying deep learning to vulnerability detection. In particular, we need to find representations of softw…

6. Apparenté Pas pertinent

   HackerScope: The Dynamics of a Massive Hacker Online Ecosystem

   Risul Islam, Md Omar Faruk Rokon, Ahmad Darki et al. · 2020 · Cryptographie et sécurité · Résumé IA disponible

   Résumé scientifique

   Authors of malicious software are not hiding as much as one would assume: they have a visible online footprint. Apart from online forums, this footprint appears in software development platforms, where authors create publicly-accessible malware repositories to share and collaborate. With the exception of a few recent efforts, the existence and the dynamics of this community has received surprisingly limited attention. The goal of our work is to analyze this ecosystem of hackers in order to: (a) understand their collaborative patterns, and (b) identify and profile its most influential authors. We develop HackerScope, a systematic approach for analyzing the dynamics of this hacker ecosystem. L…

7. Apparenté Pas pertinent

   Of Degens and Defrauders: Using Open-Source Investigative Tools to Investigate Decentralized Finance Frauds and Money Laundering

   Arianna Trozze, Toby Davies, Bennett Kleinberg · 2023 · Cryptographie et sécurité · Résumé IA disponible

   Résumé scientifique

   Fraud across the decentralized finance (DeFi) ecosystem is growing, with victims losing billions to DeFi scams every year. However, there is a disconnect between the reported value of these scams and associated legal prosecutions. We use open-source investigative tools to (1) triage Ethereum tokens extracted from the Ethereum blockchain for further investigation, (2) investigate potential frauds involving these tokens using on-chain data and token smart contract analysis, and (3) investigate the ways proceeds from these scams were subsequently laundered. The analysis enabled us to (1) identify a set of tokens meriting further investigation, (2) uncover transaction-based evidence of several r…

8. Apparenté Pas pertinent

   ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?

   Zhun Wang, Nico Schiller, Hongwei Li et al. · 2026 · Cryptographie et sécurité · Résumé IA disponible

   Résumé scientifique

   AI agents are rapidly gaining capabilities that could significantly reshape cybersecurity, making rigorous evaluation urgent. A critical capability is exploitation: turning a vulnerability, which is not yet an attack, into a concrete security impact, such as unauthorized file access or code execution. Exploitation is a particularly challenging task because it requires low-level program reasoning (e.g., about memory layout), runtime adaptation, and sustained progress over long horizons. Meanwhile, it is inherently dual-use, supporting defensive workflows while lowering the barrier for offense. Despite its importance and diagnostic value, exploitation remains under-evaluated. To address this g…