Write a Blog >>
PLDI 2020
Mon 15 - Fri 19 June 2020
Fri 19 Jun 2020 09:40 - 10:00 at PLDI Research Papers live stream - Smart Contracts Chair(s): Ilya Sergey

Smart contracts on permissionless blockchains are exposed to inherent security risks due to interactions with untrusted entities. Static analyzers are essential for identifying security risks and avoiding millions of dollars worth of damage.

We introduce Ethainter, a security analyzer checking information flow with data sanitization in smart contracts. Ethainter identifies composite attacks that involve an escalation of tainted information, through multiple transactions, leading to severe violations. The analysis scales to the entire blockchain, consisting of hundreds of thousands of unique smart contracts, deployed over millions of accounts. Ethainter is more precise than previous approaches, as we confirm by automatic exploit generation (e.g., destroying over 800 contracts on the Ropsten network) and by manual inspection, showing a very high
precision of 82.5% valid warnings for end-to-end vulnerabilities. Ethainter's balance of precision and completeness offers significant advantages over other tools such as Securify, Securify2, and teEther.

Fri 19 Jun

Displayed time zone: Pacific Time (US & Canada) change

09:20 - 10:20
Smart ContractsPLDI Research Papers at PLDI Research Papers live stream
Chair(s): Ilya Sergey Yale-NUS College and National University of Singapore

YouTube lightning session video

Securing Smart Contract with Runtime Validation
PLDI Research Papers
Ao Li University of Toronto, Canada, Jemin Andrew Choi University of Toronto, Canada, Fan Long University of Toronto, Canada
Ethainter: A Smart Contract Security Analyzer for Composite Vulnerabilities
PLDI Research Papers
Lexi Brent International Computer Science Institute, USA / University of Sydney, Australia, Neville Grech University of Athens, Greece, Sifis Lagouvardos University of Athens, Greece, Bernhard Scholz University of Sydney, Australia, Yannis Smaragdakis University of Athens, Greece
Behavioral Simulation for Smart Contracts
PLDI Research Papers
Sidi Mohamed Beillahi IRIF - Université de Paris, Gabriela Ciocarlie SRI International, Michael Emmi Amazon Web Services, Constantin Enea University of Paris Diderot, France