128 citations · 417 across the 26 of their papers we have counts for
22 papers · 1 filter
Blockchain Amplification Attack
Taro Tsuchiya, Liyi Zhou, Kaihua Qin +2
Strategies related to the blockchain concept of Extractable Value (MEV/BEV), such as arbitrage, front-, or back-running create strong economic incentives for network nodes to reduc…
Do you still need a manual smart contract audit?
Isaac David, Liyi Zhou, Kaihua Qin +3
We investigate the feasibility of employing large language models (LLMs) for conducting the security audit of smart contracts, a traditionally time-consuming and costly process. Ou…
Blockchain Censorship
Anton Wahrstätter, Jens Ernstberger, Aviv Yaish +8
Permissionless blockchains promise to be resilient against censorship by a single entity. This suggests that deterministic rules, and not third-party actors, are responsible for de…
Enhancing Smart Contract Security Analysis with Execution Property Graphs
Kaihua Qin, Zhe Ye, Zhun Wang +5
Smart contract vulnerabilities have led to significant financial losses, with their increasing complexity rendering outright prevention of hacks increasingly challenging. This tren…
Blockchain Large Language Models
Yu Gai, Liyi Zhou, Kaihua Qin +2
This paper presents a dynamic, real-time approach to detecting anomalous blockchain transactions. The proposed tool, BlockGPT, generates tracing representations of blockchain activ…
Smart Contract and DeFi Security Tools: Do They Meet the Needs of Practitioners?
Stefanos Chaliasos, Marcos Antonios Charalambous, Liyi Zhou +4
The growth of the decentralized finance (DeFi) ecosystem built on blockchain technology and smart contracts has led to an increased demand for secure and reliable smart contract de…
SoK: Decentralized Finance (DeFi) Attacks
Liyi Zhou, Xihan Xiong, Jens Ernstberger +7
Within just four years, the blockchain-based Decentralized Finance (DeFi) ecosystem has accumulated a peak total value locked (TVL) of more than 253 billion USD. This surge in DeFi…
On How Zero-Knowledge Proof Blockchain Mixers Improve, and Worsen User Privacy
Zhipeng Wang, Stefanos Chaliasos, Kaihua Qin +5
Zero-knowledge proof (ZKP) mixers are one of the most widely-used blockchain privacy solutions, operating on top of smart contract-enabled blockchains. We find that ZKP mixers are…
Proof of Steak
Jon Crowcroft, Hamed Haddadi, Arthur Gervais +1
We introduce Proof-of-Steak (PoS) as a fundamental net-zero block generation technique, often accompanied by Non-Frangipane Tokens. Genesis cut is gradually heated and minted (usin…
Towards Private On-Chain Algorithmic Trading
Ceren Kocaoğullar, Arthur Gervais, Benjamin Livshits
While quantitative automation related to trading crypto-assets such as ERC-20 tokens has become relatively commonplace, with services such as 3Commas and Shrimpy offering user-frie…
A2MM: Mitigating Frontrunning, Transaction Reordering and Consensus Instability in Decentralized Exchanges
Liyi Zhou, Kaihua Qin, Arthur Gervais
The asset trading volume on blockchain-based exchanges (DEX) increased substantially since the advent of Automated Market Makers (AMM). Yet, AMMs and their forks compete on the sam…
On the Just-In-Time Discovery of Profit-Generating Transactions in DeFi Protocols
Liyi Zhou, Kaihua Qin, Antoine Cully +2
In this paper, we investigate two methods that allow us to automatically create profitable DeFi trades, one well-suited to arbitrage and the other applicable to more complicated se…
The Eye of Horus: Spotting and Analyzing Attacks on Ethereum Smart Contracts
Christof Ferreira Torres, Antonio Ken Iannillo, Arthur Gervais +1
In recent years, Ethereum gained tremendously in popularity, growing from a daily transaction average of 10K in January 2016 to an average of 500K in January 2020. Similarly, smart…
Quantifying Blockchain Extractable Value: How dark is the forest?
Kaihua Qin, Liyi Zhou, Arthur Gervais
Permissionless blockchains such as Bitcoin have excelled at financial services. Yet, opportunistic traders extract monetary value from the mesh of decentralized finance (DeFi) smar…
AMR:Autonomous Coin Mixer with Privacy Preserving Reward Distribution
Duc V. Le, Arthur Gervais
It is well known that users on open blockchains are tracked by an industry providing services to governments, law enforcement, secret services, and alike. While most blockchains do…
High-Frequency Trading on Decentralized On-Chain Exchanges
Liyi Zhou, Kaihua Qin, Christof Ferreira Torres +2
Decentralized exchanges (DEXs) allow parties to participate in financial markets while retaining full custody of their funds. However, the transparency of blockchain-based DEX in c…
Applying Private Information Retrieval to Lightweight Bitcoin Clients
Kaihua Qin, Henryk Hadass, Arthur Gervais +1
Lightweight Bitcoin clients execute a Simple Payment Verification (SPV) protocol to verify the validity of transactions related to a particular user. Currently, lightweight clients…
FileBounty: Fair Data Exchange
Simon Janin, Kaihua Qin, Akaki Mamageishvili +1
Digital contents are typically sold online through centralized and custodian marketplaces, which requires the trading partners to trust a central entity. We present FileBounty, a f…
ConFuzzius: A Data Dependency-Aware Hybrid Fuzzer for Smart Contracts
Christof Ferreira Torres, Antonio Ken Iannillo, Arthur Gervais +1
Smart contracts are Turing-complete programs that are executed across a blockchain. Unlike traditional programs, once deployed, they cannot be modified. As smart contracts carry mo…
Attacking the DeFi Ecosystem with Flash Loans for Fun and Profit
Kaihua Qin, Liyi Zhou, Benjamin Livshits +1
Credit allows a lender to loan out surplus capital to a borrower. In the traditional economy, credit bears the risk that the borrower may default on its debt, the lender hence requ…
The Decentralized Financial Crisis
Lewis Gudgeon, Daniel Perez, Dominik Harz +2
The Global Financial Crisis of 2008, caused by the accumulation of excessive financial risk, inspired Satoshi Nakamoto to create Bitcoin. Now, more than ten years later, Decentrali…
Securify: Practical Security Analysis of Smart Contracts
Petar Tsankov, Andrei Dan, Dana Drachsler Cohen +3
Permissionless blockchains allow the execution of arbitrary programs (called smart contracts), enabling mutually untrusted entities to interact without relying on trusted third par…