IMDEA Software

IMDEA initiative

Home > Events > Invited Talks > 2023 > Sound Security Analysis of Smart Contracts

Sebastian Holler

Tuesday, November 21, 2023

11:00am Lecture Hall B01, level B and Zoom4 (https://zoom.us/j/4911012202, password:@s3)

Sebastian Holler, PhD Student, Max Planck Institute for Security and Privacy

Sound Security Analysis of Smart Contracts

Abstract:

Smart contracts are distributed applications on blockchains that implement advanced financial instruments, such as decentralized exchanges or autonomous organizations (DAOs). Their financial nature makes smart contracts an attractive attack target, as demonstrated by numerous exploits on popular contracts resulting in economic damage of millions of dollars. Unfortunately, vulnerability assessment that is sound and insightful for smart contracts is a formidable challenge because contracts execute low-level bytecode in a largely unknown and potentially hostile execution environment. This talk offers an introduction to smart contract verification. To this end, I present HoRStify, the first automated analyzer for dependency properties of Ethereum smart contracts based on sound static analysis. Afterward, I introduce the blockchain-specific security risk of frontrunning and discuss ideas on how to verify its absence.