File(s) under permanent embargo
SolGuard: Preventing External Call Issues in Smart Contract-based Multi-Agent Robotic Systems
journal contribution
posted on 2021-11-01, 00:00 authored by Purathani Praitheeshan, Lei PanLei Pan, Xi Zheng, Alireza Jolfaei, Robin Ram Mohan DossRobin Ram Mohan DossIn the new era of blockchain-based multi-agent robotic systems, smart contract programs perform an influential role in implementing decentralized applications with required task allocations. Smart contract programs are developed using script-type of programming languages, and they have already deployed several vulnerable patterns without proper testing and audit. We studied Solidity smart contracts running on the Ethereum platform and identified that they had been exploited because of several programming issues, especially using low-level external calls to malicious sources. Since smart contracts are immutable after their deployment to autonomous multi-robot systems, they should be tested to fix possible development phase issues. We implemented a prototype plugin called SolGuard by extending the solhint linter to prevent three critical issues related to Solidity smart contract programs’ usage of external calls. The SolGuard plugin checks state variable order in the smart contracts, participation of delegatecall invocations, address type parameters in the smart contract’s constructor, and denial of service patterns. We empirically evaluate the SolGuard plugin with existing popular static analysis tools. Our results indicate that SolGuard outperformed the baseline tools in terms of efficiency and accuracy.
History
Journal
Information SciencesVolume
579Pagination
150 - 166Publisher
ElsevierLocation
Amsterdam, The NetherlandsPublisher DOI
ISSN
0020-0255Language
engPublication classification
C1 Refereed article in a scholarly journalUsage metrics
Categories
No categories selectedKeywords
Licence
Exports
RefWorks
BibTeX
Ref. manager
Endnote
DataCite
NLM
DC