Aroc: An Automatic Repair Framework for On-Chain Smart Contracts

【Author】 Jin, Hai; Wang, Zeli; Wen, Ming; Dai, Weiqi; Zhu, Yu; Zou, Deqing

【Source】IEEE TRANSACTIONS ON SOFTWARE ENGINEERING

【影响因子】9.322

【Abstract】Ongoing smart contract attack events have seriously impeded the practical application of blockchain. Although lots of researches have been conducted, they mostly focus on off-chain vulnerability detection. However, smart contracts cannot be modified once they have been deployed on-chain, thus existing techniques cannot protect those deployed contracts from being attacked. To mitigate this problem, we propose a general smart contract repairer named Aroc, which can automatically patch vulnerable deployed contracts without changing the contract codes. The core insight of Aroc is to generate patch contracts to abort malicious transactions in advance. Taking the three most serious bug types (i.e., reentrancy, arithmetic bugs, and unchecked low-level checks) as examples, we present how Aroc automatically repairs them on-chain. We conduct abundant evaluations on four kinds of datasets to evaluate the effectiveness and efficiency of Aroc. In particular, Aroc can repair 95.95% of the vulnerable contracts with an average correctness ratio of 93.32%. Meanwhile, Aroc introduces acceptable additional overheads to smart contract users and blockchain miners. When compared with the state-of-the-art techniques, Aroc introduces either fewer execution overheads or contract codes.

【Keywords】Contracts; Smart contracts; Codes; Blockchains; Computer bugs; Maintenance engineering; Task analysis; Smart contract; vulnerability; repair; on-chain protection

【发表时间】2022 NOV 1

【收录时间】2022-11-30

【文献类型】实证数据

【主题类别】

区块链治理-技术治理-智能合约漏洞检测