论文标题
WANA：跨平台智能合约漏洞检测的WASM字节码的符号执行
WANA: Symbolic Execution of Wasm Bytecode for Cross-Platform Smart Contract Vulnerability Detection
论文作者
论文摘要
许多受欢迎的区块链平台都支持用于构建分散应用程序的智能合约。但是，智能合约中的脆弱性导致了最终用户的财务损失。对于EOSIO区块链平台，有效的漏洞检测器仍然有限。此外，现有的漏洞检测工具只能支持一个区块链平台。在这项工作中，我们提出了WANA，这是一种基于WebAssembly字节码的符号执行的跨平台智能合约检测工具。此外，WANA提出了一组测试Oracles，以根据WebAssembly字节码分析来检测EOSIO和以太坊智能合约中的漏洞。我们的实验分析表明，WANA可以有效地检测EOSIO和ETHEREUM智能合约中的脆弱性。
Many popular blockchain platforms are supporting smart contracts for building decentralized applications. However, the vulnerabilities within smart contracts have led to serious financial loss to their end users. For the EOSIO blockchain platform, effective vulnerability detectors are still limited. Furthermore, existing vulnerability detection tools can only support one blockchain platform. In this work, we present WANA, a cross-platform smart contract vulnerability detection tool based on the symbolic execution of WebAssembly bytecode. Furthermore, WANA proposes a set of test oracles to detect the vulnerabilities in EOSIO and Ethereum smart contracts based on WebAssembly bytecode analysis. Our experimental analysis shows that WANA can effectively detect vulnerabilities in both EOSIO and Ethereum smart contracts with high efficiency.
