2026-08-07T04:46:26Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:17184 2024-03-06T10:31:50Z ddc:004 open_access

Automatic Generation of Attacker Contracts in Solidity Ballesteros, Ignacio Benac-Earle, Clara de Barrio, Luis Eduardo Bueso Fredlund, Lars-Åke Herranz, Ángel Mariño, Julio Property-Based Testing Smart Contracts Reentrancy Attack Smart contracts on the Ethereum blockchain continue to suffer from well-published problems. A particular example is the well-known smart contract reentrancy vulnerability, which continues to be exploited. In this article, we present preliminary work on a method which, given a smart contract that may be vulnerable to such a reentrancy attack, proceeds to attempt to automatically derive an "attacker" contract which can be used to successfully attack the vulnerable contract. The method uses property-based testing to generate, semi-randomly, large numbers of potential attacker contracts, and then proceeds to check whether any of them is a successful attacker. The method is illustrated using a case study where an attack is derived for a vulnerable contract. Schloss Dagstuhl – Leibniz-Zentrum für Informatik Ignacio Ballesteros and Clara Benac-Earle and Luis Eduardo Bueso de Barrio and Lars-Åke Fredlund and Ángel Herranz and Julio Mariño 2022 Is Part Of OASIcs, Volume 105, 4th International Workshop on Formal Methods for Blockchains (FMBC 2022) InProceedings Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/OASIcs.FMBC.2022.3 urn:nbn:de:0030-drops-171840 https://drops.dagstuhl.de/entities/document/10.4230/OASIcs.FMBC.2022.3 eng https://creativecommons.org/licenses/by/4.0/legalcode