arXiv subjects

Xiaoqi Li

Publications and source records attributed to Xiaoqi Li.

134 records · Page 8Linked to original sources

arXiv2020

CLUE: Towards Discovering Locked Cryptocurrencies in Ethereum

As the most popular blockchain that supports smart contracts, there are already more than 296 thousand kinds of cryptocurrencies built on Ethereum. However, not all cryptocurrencies can be controlled by users. For example, some money is permanently locked in wallets' accounts due to attacks. In this paper, we conduct the first systematic investigation on locked cryptocurrencies in Ethereum. In particular, we define three categories of accounts with locked cryptocurrencies and develop a novel tool named CLUE to discover them. Results show that there are more than 216 million dollars value of cryptocurrencies locked in Ethereum. We also analyze the reasons (i.e., attacks/behaviors) why cryptocurrencies are locked. Because the locked cryptocurrencies can never be controlled by users, avoid interacting with the accounts discovered by CLUE and repeating the same mistakes again can help users to save money.

cs.CR↗

arXiv2020

Under-Optimized Smart Contracts Devour Your Money

Smart contracts are full-fledged programs that run on blockchains (e.g., Ethereum, one of the most popular blockchains). In Ethereum, gas (in Ether, a cryptographic currency like Bitcoin) is the execution fee compensating the computing resources of miners for running smart contracts. However, we find that under-optimized smart contracts cost more gas than necessary, and therefore the creators or users will be overcharged. In this work, we conduct the first investigation on Solidity, the recommended compiler, and reveal that it fails to optimize gas-costly programming patterns. In particular, we identify 7 gas-costly patterns and group them to 2 categories. Then, we propose and develop GASPER, a new tool for automatically locating gas-costly patterns by analyzing smart contracts' bytecodes. The preliminary results on discovering 3 representative patterns from 4,240 real smart contracts show that 93.5%, 90.1% and 80% contracts suffer from these 3 patterns, respectively.

cs.SE↗

arXiv2020

An Adaptive Gas Cost Mechanism for Ethereum to Defend Against Under-Priced DoS Attacks

The gas mechanism in Ethereum charges the execution of every operation to ensure that smart contracts running in EVM (Ethereum Virtual Machine) will be eventually terminated. Failing to properly set the gas costs of EVM operations allows attackers to launch DoS attacks on Ethereum. Although Ethereum recently adjusted the gas costs of EVM operations to defend against known DoS attacks, it remains unknown whether the new setting is proper and how to configure it to defend against unknown DoS attacks. In this paper, we make the first step to address this challenging issue by first proposing an emulation-based framework to automatically measure the resource consumptions of EVM operations. The results reveal that Ethereum's new setting is still not proper. Moreover, we obtain an insight that there may always exist exploitable under-priced operations if the cost is fixed. Hence, we propose a novel gas cost mechanism, which dynamically adjusts the costs of EVM operations according to the number of executions, to thwart DoS attacks. This method punishes the operations that are executed much more frequently than before and lead to high gas costs. To make our solution flexible and secure and avoid frequent update of Ethereum client, we design a special smart contract that collaborates with the updated EVM for dynamic parameter adjustment. Experimental results demonstrate that our method can effectively thwart both known and unknown DoS attacks with flexible parameter settings. Moreover, our method only introduces negligible additional gas consumption for benign users.

cs.CR↗

arXiv2020

A Survey on the Security of Blockchain Systems

Since its inception, the blockchain technology has shown promising application prospects. From the initial cryptocurrency to the current smart contract, blockchain has been applied to many fields. Although there are some studies on the security and privacy issues of blockchain, there lacks a systematic examination on the security of blockchain systems. In this paper, we conduct a systematic study on the security threats to blockchain and survey the corresponding real attacks by examining popular blockchain systems. We also review the security enhancement solutions for blockchain, which could be used in the development of various blockchain systems, and suggest some future directions to stir research efforts into this area.

cs.CR↗

arXiv2020

Characterizing Erasable Accounts in Ethereum

Being the most popular permissionless blockchain that supports smart contracts, Ethereum allows any user to create accounts on it. However, not all accounts matter. For example, the accounts due to attacks can be removed. In this paper, we conduct the first investigation on erasable accounts that can be removed to save system resources and even users' money (i.e., ETH or gas). In particular, we propose and develop a novel tool named GLASER, which analyzes the State DataBase of Ethereum to discover five kinds of erasable accounts. The experimental results show that GLASER can accurately reveal 508,482 erasable accounts and these accounts lead to users wasting more than 106 million dollars. GLASER can help stop further economic loss caused by these detected accounts. Moreover, GLASER characterizes the attacks/behaviors related to detected erasable accounts through graph analysis.

cs.CR↗

arXiv2020

STAN: Towards Describing Bytecodes of Smart Contract

More than eight million smart contracts have been deployed into Ethereum, which is the most popular blockchain that supports smart contract. However, less than 1% of deployed smart contracts are open-source, and it is difficult for users to understand the functionality and internal mechanism of those closed-source contracts. Although a few decompilers for smart contracts have been recently proposed, it is still not easy for users to grasp the semantic information of the contract, not to mention the potential misleading due to decompilation errors. In this paper, we propose the first system named STAN to generate descriptions for the bytecodes of smart contracts to help users comprehend them. In particular, for each interface in a smart contract, STAN can generate four categories of descriptions, including functionality description, usage description, behavior description, and payment description, by leveraging symbolic execution and NLP (Natural Language Processing) techniques. Extensive experiments show that STAN can generate adequate, accurate, and readable descriptions for contract's bytecodes, which have practical value for users.

cs.SE↗

arXiv2018

Notes on the Onset of Clustering in Gas-Solid HCS

This study contributes to the body of work on instabilities in the homogeneous cooling system focusing on clustering in the multiphase gas-particle system. The critical system size for the onset of instability, $L^*_c$, is studied via three different numerical methods: i) particle resolved direct numerical simulation; ii) computational fluid dynamics-discrete element method; and iii) a two-fluid model derived from kinetic theory. In general, the $L^*_c$ results at several concentrations, inelasticities and initial thermal Reynolds numbers are in good qualitative agreement with one another. Additionally, most of the expected trends (i.e., general $L^*_c (ϕ)$ behavior) are observed. However, there is a larger level of quantitative discrepancy between the continuum and discrete particle methods than observed previous (simpler) granular results. While the level of agreement may be expected to decrease with the increased physical complexity of the gas-solid system, a significant time-dependence is revealed and shown to be responsible for some of the oddities in the numerical data.

physics.flu-dyn↗

arXiv2011

Perpendicular magnetic anisotropy of full-Heusler films in Pt/Co2FeAl/MgO trilayers

We report on perpendicular magnetic anisotropy (PMA) in a Pt/Co2FeAl/MgO sandwiched structure with a thick Co2FeAl layer of 2-2.5 nm. The PMA is thermally stable that the anisotropy energy density Ku is 1.3{\times}106 erg/cm3 for the structure with 2 nm Co2FeAl after annealing at 350 oC. The thicknesses of Co2FeAl and MgO layers greatly affect the PMA. Our results provide an effective way to realize relative thick perpendicularly magnetized Heusler alloy films.

cond-mat.mtrl-sci↗