Blockchain has recently emerged as a research trend,with potential applications in a broad range of industries and context.One particular successful Blockchain technology is smart contract,which is widely used in comm...Blockchain has recently emerged as a research trend,with potential applications in a broad range of industries and context.One particular successful Blockchain technology is smart contract,which is widely used in commercial settings(e.g.,high value financial transactions).This,however,has security implications due to the potential to financially benefit from a security incident(e.g.,identification and exploitation of a vulnerability in the smart contract or its implementation).Among,Ethereum is the most active and arresting.Hence,in this paper,we systematically review existing research efforts on Ethereum smart contract security,published between 2015 and 2019.Specifically,we focus on how smart contracts can be maliciously exploited and targeted,such as security issues of contract program model,vulnerabilities in the program and safety consideration introduced by program execution environment.We also identify potential research opportunities and future research agenda.展开更多
基金This work was supported by the National Key Research and Development(R&D)Plan of China(2019YFB2101700)the Science and Technology Program of Guangzhou(201902020016)+2 种基金the Shenzhen Fundamental Research Program(JCYJ20170413114215614)the Guangdong Provincial Science and Technology Plan Project(2017B010124001)the Guangdong Provincial Key R&D Plan Project(2019B010139001).
文摘Blockchain has recently emerged as a research trend,with potential applications in a broad range of industries and context.One particular successful Blockchain technology is smart contract,which is widely used in commercial settings(e.g.,high value financial transactions).This,however,has security implications due to the potential to financially benefit from a security incident(e.g.,identification and exploitation of a vulnerability in the smart contract or its implementation).Among,Ethereum is the most active and arresting.Hence,in this paper,we systematically review existing research efforts on Ethereum smart contract security,published between 2015 and 2019.Specifically,we focus on how smart contracts can be maliciously exploited and targeted,such as security issues of contract program model,vulnerabilities in the program and safety consideration introduced by program execution environment.We also identify potential research opportunities and future research agenda.
