SMT-Friendly Formalization of the Solidity Memory Model
arXiv:2001.03256 · doi:10.1007/978-3-030-44914-8_9
Abstract
Solidity is the dominant programming language for Ethereum smart contracts. This paper presents a high-level formalization of the Solidity language with a focus on the memory model. The presented formalization covers all features of the language related to managing state and memory. In addition, the formalization we provide is effective: all but few features can be encoded in the quantifier-free fragment of standard SMT theories. This enables precise and efficient reasoning about the state of smart contracts written in Solidity. The formalization is implemented in the solc-verify verifier and we provide an extensive set of tests that covers the breadth of the required semantics. We also provide an evaluation on the test set that validates the semantics and shows the novelty of the approach compared to other Solidity-level contract analysis tools.
arXiv commentAuthors' manuscript. Published in P. Müller (Ed.): ESOP 2020, LNCS 12075, 2020. The final publication is available at Springer via https://doi.org/10.1007/978-3-030-44914-8_9
References in corpus (5)
- A Semantic Framework for the Security Analysis of Ethereum smart contracts
- A Survey on Ethereum Systems Security: Vulnerabilities, Attacks and Defenses
- solc-verify: A Modular Verifier for Solidity Smart Contracts
- Formal Specification and Verification of Smart Contracts for Azure Blockchain
- Executable Operational Semantics of Solidity