Write a Blog >>
PLDI 2020
Mon 15 - Fri 19 June 2020
Fri 19 Jun 2020 09:40 - 10:00 at PLDI Research Papers live stream - Smart Contracts Chair(s): Ilya Sergey

Smart contracts on permissionless blockchains are exposed to inherent security risks due to interactions with untrusted entities. Static analyzers are essential for identifying security risks and avoiding millions of dollars worth of damage.

We introduce Ethainter, a security analyzer checking information flow with data sanitization in smart contracts. Ethainter identifies composite attacks that involve an escalation of tainted information, through multiple transactions, leading to severe violations. The analysis scales to the entire blockchain, consisting of hundreds of thousands of unique smart contracts, deployed over millions of accounts. Ethainter is more precise than previous approaches, as we confirm by automatic exploit generation (e.g., destroying over 800 contracts on the Ropsten network) and by manual inspection, showing a very high
precision of 82.5% valid warnings for end-to-end vulnerabilities. Ethainter's balance of precision and completeness offers significant advantages over other tools such as Securify, Securify2, and teEther.

Fri 19 Jun
Times are displayed in time zone: Pacific Time (US & Canada) change

09:20 - 10:20
Smart ContractsPLDI Research Papers at PLDI Research Papers live stream
Chair(s): Ilya SergeyYale-NUS College and National University of Singapore

YouTube lightning session video

Securing Smart Contract with Runtime Validation
PLDI Research Papers
Ao LiUniversity of Toronto, Canada, Jemin Andrew ChoiUniversity of Toronto, Canada, Fan LongUniversity of Toronto, Canada
Ethainter: A Smart Contract Security Analyzer for Composite Vulnerabilities
PLDI Research Papers
Lexi BrentInternational Computer Science Institute, USA / University of Sydney, Australia, Neville GrechUniversity of Athens, Greece, Sifis LagouvardosUniversity of Athens, Greece, Bernhard ScholzUniversity of Sydney, Australia, Yannis SmaragdakisUniversity of Athens, Greece
Behavioral Simulation for Smart Contracts
PLDI Research Papers
Sidi Mohamed BeillahiIRIF - Université de Paris, Gabriela CiocarlieSRI International, Michael EmmiAmazon Web Services, Constantin EneaUniversity of Paris Diderot, France