Essential Innovations in Blockchain Smart Contract Security

Our paper, *Smart Contracts Massive Hunting for Vulnerabilities*, at JD-HITB Security Conference Beijing 2018 shows a new approach to finding security bugs in smart contracts using symbolic execution that is not pattern-based. Early results are promising: the tool managed to accurately detect most smart contract security bugs reported in 2018 and has helped us find many unpublished ones.

Nguyen Anh Quynh, *Monocerus: Dynamic Analysis for Smart Contract*, BlackHat Asia 2019.

Blockchain has gradually been popularized by its transparency, fairness, and democracy. This technology has opened the door to the development of Ethereum, a blockchain platform with smart contracts that can hold and automatically transfer tokens. Like a legacy computer program, smart contracts are vulnerable to security bugs. In recent years, many successful attacks on Ethereum network have been recorded, costing victims millions of dollars. In this paper, we classify attack vectors of Ethereum smart contracts, then propose some behaviour-based methods to detect them. To realize the ideas, we implement Abbe, a tool that can not only discover known attacks but also detect zero-day vulnerabilities.