5 papers
SseRex: Practical Symbolic Execution of Solana Smart Contracts
Tobias Cloosters, Pascal Winkler, Jens-Rene Giesen +2
Solana is rapidly gaining traction among smart contract developers and users. However, its growing adoption has been accompanied by a series of major security incidents, which have…
Targeted Fuzzing for Unsafe Rust Code: Leveraging Selective Instrumentation
David PaaÃen, Jens-Rene Giesen, Lucas Davi
Rust is a promising programming language that focuses on concurrency, usability, and security. It is used in production code by major industry players and got recommended by govern…
Fuzz on the Beach: Fuzzing Solana Smart Contracts
Sven Smolka, Jens-Rene Giesen, Pascal Winkler +4
Solana has quickly emerged as a popular platform for building decentralized applications (DApps), such as marketplaces for non-fungible tokens (NFTs). A key reason for its success…
HCC: A Language-Independent Hardening Contract Compiler for Smart Contracts
Jens-Rene Giesen, Sebastien Andreina, Michael Rodler +2
Developing secure smart contracts remains a challenging task. Existing approaches are either impractical or leave the burden to developers for fixing bugs. In this paper, we propos…
Defying the Odds: Solana's Unexpected Resilience in Spite of the Security Challenges Faced by Developers
Sébastien Andreina, Tobias Cloosters, Lucas Davi +5
Solana gained considerable attention as one of the most popular blockchain platforms for deploying decentralized applications. Compared to Ethereum, however, we observe a lack of r…