With the rapid development of blockchain technology, smart contracts based on blockchain have also advanced swiftly. Hyperledger Fabric, as a distributed trusted ledger among trusted organizations, has gained increasing support in fields such as supply chain finance and government platforms. Compared to domain-specific languages for public blockchains, Hyperledger Fabric recommends using general purpose languages in the industry to develop its smart contracts, known as chaincode. Golang language is the recommended language for Hyperledger Fabric and is widely used in its various transaction scenarios. For Hyperledger Fabric chaincode, developers might introduce read-write logic vulnerabilities due to differences from traditional development read-write logic. Current research does not deeply understand these vulnerabilities, and detection methods are relatively simple, leading to a high false positive rate. Based on this, this paper proposes a static analysis method based on the SSA form of Go’s intermediate representation, analyzing read-write control flow and introducing data flow features. This approach improves the detection accuracy of mainstream tools like Chaincode Analyzer, validating the method’s value in practical applications.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Static Analysis Detection of Hyperledger Fabric Read-Write Logic Vulnerability

  • Donghan Chen,
  • Junxiong Lin,
  • Zhihui Lu

摘要

With the rapid development of blockchain technology, smart contracts based on blockchain have also advanced swiftly. Hyperledger Fabric, as a distributed trusted ledger among trusted organizations, has gained increasing support in fields such as supply chain finance and government platforms. Compared to domain-specific languages for public blockchains, Hyperledger Fabric recommends using general purpose languages in the industry to develop its smart contracts, known as chaincode. Golang language is the recommended language for Hyperledger Fabric and is widely used in its various transaction scenarios. For Hyperledger Fabric chaincode, developers might introduce read-write logic vulnerabilities due to differences from traditional development read-write logic. Current research does not deeply understand these vulnerabilities, and detection methods are relatively simple, leading to a high false positive rate. Based on this, this paper proposes a static analysis method based on the SSA form of Go’s intermediate representation, analyzing read-write control flow and introducing data flow features. This approach improves the detection accuracy of mainstream tools like Chaincode Analyzer, validating the method’s value in practical applications.