More about HKUST
Static Analysis of Gas-Related Vulnerabilities in Smart Contracts
PhD Qualifying Examination Title: "Static Analysis of Gas-Related Vulnerabilities in Smart Contracts" by Mr. Soroush FAROKHNIA Abstract: Blockchain functions as a distributed ledger, allowing participants to conduct fund transfers without reliance on a centralized authority. Additionally, the concept of blockchain has been extended to facilitate the execution of decentralized programs known as smart contracts. However, the expressive nature of smart contracts permits programmers to create arbitrary programs, which can be exploited by attackers to initiate denial-of-service (DoS) attacks, such as infinite loops, thereby obstructing the entire network. To address this issue, the concept of gas was introduced to quantify computation, which not only establishes an upper limit on resource usage but also charges users based on the resources they consume. Nonetheless, the implementation of gas has posed challenges for the community, as it has proven to be expensive and has introduced gas-specific vulnerabilities. As a valuable resource, gas can be manipulated by attackers to provoke undesirable behavior in a victim's smart contract, leading to the depletion or blockage of the victim's funds. Research has shown that such oversights have resulted in significant (millions of dollars) financial losses for users. The following survey investigates gas-related vulnerabilities and evaluates the efficacy of existing static analysis tools, including MadMax, eTainter, GASTAP, and Asparagus, in identifying these vulnerabilities. Furthermore, the survey analyzes the methodologies utilized by these tools and assesses their overall effectiveness. Date: Tuesday, 29 October 2024 Time: 4:00pm - 6:00pm Venue: Room 5501 Lifts 25/26 Committee Members: Dr. Amir Goharshady (Supervisor) Prof. Fangzhen Lin (Chairperson) Prof. Andrew Horner Dr. Xiaomin Ouyang