Verifying Data Integrity in Smart Contracts
摘要
This paper introduces a framework for detecting the potential security spots which may be malicious or benign that leads to integrity breaches in smart contracts on blockchain platforms. This approach works by parsing Solidity smart contracts into tokens. Given the critical role of smart contracts in executing and enforcing agreements autonomously, ensuring their security is important. Our approach categorizes potential integrity breaches in smart contracts based on variable modifications and function invocations within smart contracts. Each function in the smart contract is evaluated against predefined Integrity Breach Conditions (IBCs). Functions that satisfy any of the IBCs are marked as security spots which may lead to data integrity breaches. We have developed a prototype tool to analyze smart contracts with respect to these IBCs, identifying the potential security spots. The effectiveness of the prototype tool has been validated through testing on a custom-developed banking application smart contract as well as various open-source smart contracts available on GitHub.