Skip to main content
Top

2020 | OriginalPaper | Chapter

Manual Audit for BitUnits Contracts

Authors : Siqi Lu, Haopeng Fan, Yongjuan Wang, Huizhe Mi, Ling Qin

Published in: Blockchain and Trustworthy Systems

Publisher: Springer Singapore

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

In the blockchain 2.0 era, smart contracts based on blockchain technology have been widely used in many fields such as sharing economy, digital payment, and financial asset disposal because of its dispersion, observability, verifiability and automatic execution. With the widespread application of smart contracts, the researchers gradually found many types of security problems, so the audit of smart contracts has become the vital way to ensure its security. This paper introduces the implementation mechanism of smart contract model, and summarizes 11 kinds of high frequency smart contract vulnerabilities, such as transaction order dependence, constructor out of control, denial of service, etc. Then, this paper selects the newly released BitUnits contract for auditing, find out its security hole and give the solution.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literature
1.
go back to reference He, H., Yan, A., Chen, Z.: Overview of intelligent contract technology and application based on blockchain. J. Comput. Res. Dev. 55(11), 112–126 (2018) He, H., Yan, A., Chen, Z.: Overview of intelligent contract technology and application based on blockchain. J. Comput. Res. Dev. 55(11), 112–126 (2018)
2.
go back to reference Li, H., Sun, J., Yang, Y., et al.: A preliminary study on Ethereum based on blockchain 2.0. China Financ. Comput. 6, 57–60 (2017) Li, H., Sun, J., Yang, Y., et al.: A preliminary study on Ethereum based on blockchain 2.0. China Financ. Comput. 6, 57–60 (2017)
3.
go back to reference Nakamoto, S.: Bitcoin: a peer-to-peer electronic cash system. Manubot (2019) Nakamoto, S.: Bitcoin: a peer-to-peer electronic cash system. Manubot (2019)
4.
go back to reference Fu, M., Wu, L., Hong, Z., Feng, W.: Research on intelligent contract security vulnerability mining technology [J/OL]. Comput. Appl. 1–8 (2019) Fu, M., Wu, L., Hong, Z., Feng, W.: Research on intelligent contract security vulnerability mining technology [J/OL]. Comput. Appl. 1–8 (2019)
5.
go back to reference Huang, K., Zhang, S., Jin, S.: Research on block contract intelligent contract security. Inf. Secur. Res. 3, 192–206 (2019) Huang, K., Zhang, S., Jin, S.: Research on block contract intelligent contract security. Inf. Secur. Res. 3, 192–206 (2019)
6.
go back to reference Tikhomirov, S., Voskresenskaya, E., Ivanitskiy, I.: SmartCheck: static analysis of ethereum smart contracts. In: 2018 IEEE ACM 1st International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB) (2018) Tikhomirov, S., Voskresenskaya, E., Ivanitskiy, I.: SmartCheck: static analysis of ethereum smart contracts. In: 2018 IEEE ACM 1st International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB) (2018)
8.
go back to reference Jiang, B., Liu, Y., Chan, W.K.: ContractFuzzer: fuzzing smart contracts for vulnerability detection. In: Proceedings of the 33rd ACM/IEEE International Conference on Automated Software Engineering. ACM (2018) Jiang, B., Liu, Y., Chan, W.K.: ContractFuzzer: fuzzing smart contracts for vulnerability detection. In: Proceedings of the 33rd ACM/IEEE International Conference on Automated Software Engineering. ACM (2018)
9.
go back to reference Sergey, I., Hobor, A.: A concurrent perspective on smart contracts (2017) Sergey, I., Hobor, A.: A concurrent perspective on smart contracts (2017)
Metadata
Title
Manual Audit for BitUnits Contracts
Authors
Siqi Lu
Haopeng Fan
Yongjuan Wang
Huizhe Mi
Ling Qin
Copyright Year
2020
Publisher
Springer Singapore
DOI
https://doi.org/10.1007/978-981-15-2777-7_38

Premium Partner