HighGuard: Cross-Chain Business Logic Monitoring of Smart Contracts
Logical flaws in smart contracts are often exploited, leading to significant financial losses. Our tool, HighGuard, detects transactions that violate business logic specifications of smart contracts. HighGuard employs dynamic condition response (DCR) graph models as formal specifications to verify contract execution against these models. It is capable of operating in a cross-chain environment for detecting business logic flaws across different blockchain platforms. We demonstrate HighGuard's effectiveness in identifying deviations from specified behaviors in smart contracts without requiring code instrumentation or incurring additional gas costs. By using precise specifications in the monitor, HighGuard achieves detection without false positives. Our evaluation, involving 54 exploits, confirms HighGuard's effectiveness in detecting business logic vulnerabilities.
Authors
- Gerardo Schneider (ORCID: https://orcid.org/0000-0003-0629-6853)
- Cyrille Artho (ORCID: https://orcid.org/0000-0002-3656-1614)
- Mojtaba Eshghie (ORCID: https://orcid.org/0000-0002-0069-0588)
- Thomas Hildebrandt (ORCID: https://orcid.org/0000-0002-7435-5563)
- Wolfgang Ahrendt (ORCID: https://orcid.org/0000-0002-5671-2555)
- Hans Stammler
Institutions
- Stockholm University (SE)
- Chalmers University of Technology (SE)
- KTH Royal Institute of Technology (SE)
- University of Gothenburg (SE)
Publication Details
- Published
- 2024-10-18
- DOI
- https://doi.org/10.1145/3691620.3695356
- Citations
- 3
- Primary Topic
- Blockchain Technology Applications and Security
- Type
- article
- Field-Weighted Citation Impact
- 2.34