vix.ing · top · new · best · stats · spec

WANA: Symbolic Execution of Wasm Bytecode for Cross-Platform Smart Contract Vulnerability Detection

2020/07/30 by Dong Wang, Bo Jiang, Wang, Dong +3
Computer Science · #Advanced Malware Detection Techniques #Blockchain Technology Applications and Security #D.2.5 #FOS: Computer and information sciences #Software Engineering (cs.SE) #Spam and Phishing Detection

paper · pdf · doi:10.48550/arxiv.2007.15510

openalex publication_date 2020/07/30 · openalex created_date 2020/08/03 · openalex updated_date 2026/07/28

Abstract

Many popular blockchain platforms are supporting smart contracts for building decentralized applications. However, the vulnerabilities within smart contracts have led to serious financial loss to their end users. For the EOSIO blockchain platform, effective vulnerability detectors are still limited. Furthermore, existing vulnerability detection tools can only support one blockchain platform. In this work, we present WANA, a cross-platform smart contract vulnerability detection tool based on the symbolic execution of WebAssembly bytecode. Furthermore, WANA proposes a set of test oracles to detect the vulnerabilities in EOSIO and Ethereum smart contracts based on WebAssembly bytecode analysis. Our experimental analysis shows that WANA can effectively detect vulnerabilities in both EOSIO and Ethereum smart contracts with high efficiency.

Related