HighGuard: Cross-Chain Business Logic Monitoring of Smart Contracts
arXiv:2305.08254 · doi:10.1145/3691620.3695356
Abstract
Logical flaws in smart contracts are often exploited, leading to significant financial losses. Our tool, HighGuard, detects transactions that violate business logic specifications of smart contracts. HighGuard employs dynamic condition response (DCR) graph models as formal specifications to verify contract execution against these models. It is capable of operating in a cross-chain environment for detecting business logic flaws across different blockchain platforms. We demonstrate HighGuard's effectiveness in identifying deviations from specified behaviors in smart contracts without requiring code instrumentation or incurring additional gas costs. By using precise specifications in the monitor, HighGuard achieves detection without false positives. Our evaluation, involving 54 exploits, confirms HighGuard's effectiveness in detecting business logic vulnerabilities. Our open-source implementation of HighGuard and a screencast of its usage are available at: https://github.com/mojtaba-eshghie/HighGuard https://www.youtube.com/watch?v=sZYVV-slDaY
The most version of the paper was accepted and presented at ASE 2024 conference: https://conf.researchr.org/details/ase-2024/ase-2024-tool-demonstrations/12/HighGuard-Cross-Chain-Business-Logic-Monitoring-of-Smart-Contracts