XGuard: Detecting Inconsistency Behaviors of Crosschain Bridges

doi:10.1145/3663529.3663809

科研成果详情

题名	XGuard: Detecting Inconsistency Behaviors of Crosschain Bridges
作者	Wang，Ke 1; Li，Yue 2; Wang，Che 3; Gao，Jianbo 3; Guan，Zhi 4; Chen，Zhong 3
发表日期	2024-07-10
会议名称	32nd ACM International Conference on the Foundations of Software Engineering, FSE Companion
会议录名称	FSE Companion - Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering
页码	612-616
会议日期	2024-07-15——2024-07-15
会议地点	bra,Porto de Galinhas
摘要	Crosschain bridges have become a key solution for connecting independent blockchains and enabling the transfer of assets and information between them. However, recent bridge hacks have exposed severe security issues, and these bridges provide new strategic weapons for malicious activities. Thus, it is crucial to fully understand and identify the security issues of crosschain bridges in the real world. To address this, we define a novel abstraction called inconsistency behavior to comprehensively summarize the crosschain security issues. Then, we further develop XGuard, a static analyzer to find the inconsistency behavior of cross-chain bridges in the real world. Specifically, XGuard first extracts the crosschain semantic information in the bridge contract on both the source chain and destination chain, and then identifies inconsistency behaviors that occur on multiple blockchains. Our results show that XGuard can successfully identify vulnerable crosschain bridges in the real world. The demonstration of the tool is available at https://youtu.be/UMASWldZHgg, the online service is available at https://xguard.sh/, and the related code is available at https://github.com/seccross/xguard.
关键词	Crosschain Bridge Inconsistency Behavior Smart Contract
DOI	10.1145/3663529.3663809
URL	查看来源
语种	英语English
Scopus入藏号	2-s2.0-85199077430
引用统计
文献类型	会议论文
条目标识符	https://repository.uic.edu.cn/handle/39GCC9TT/13443
专题	个人在本单位外知识产出
作者单位	1.School of Computer Science,Peking University,China 2.College of Computer Science and Technology,Taiyuan University of Technology,Taiyuan,China 3.School of Computer Science,Peking University,Beijing,China 4.National Engineering Research Center For Software Engineering,Peking University,Beijing,China
推荐引用方式 GB/T 7714	Wang，Ke,Li，Yue,Wang，Cheet al. XGuard: Detecting Inconsistency Behaviors of Crosschain Bridges[C], 2024: 612-616.