Blockchain technology is believed by many to be a game changer in many application domains. While the first generation of blockchain technology (i.e., Blockchain 1.0) is almost exclusively used for cryptocurrency, the second generation (i.e., Blockchain 2.0), as represented by Ethereum, is an open and decentralized platform enabling a new paradigm of computing—Decentralized Applications (DApps) running on top of blockchains. The rich applications and semantics of DApps inevitably introduce many security vulnerabilities, which have no counterparts in pure cryptocurrency systems like Bitcoin. Since Ethereum is a new, yet complex, system, it is imperative to have a systematic and comprehensive understanding on its security from a holistic perspective, which was previously unavailable in the literature. To the best of our knowledge, the present survey, which can also be used as a tutorial, fills this void. We systematize three aspects of Ethereum systems security: vulnerabilities, attacks, and defenses. We draw insights into vulnerability root causes, attack consequences, and defense capabilities, which shed light on future research directions.

A Survey on Ethereum Systems Security: Vulnerabilities, Attacks, and Defenses

Over the last few years, there has been substantial research on automated analysis, testing, and debugging of Ethereum smart contracts. However, it is not trivial to compare and reproduce that research. To address this, we present an empirical evaluation of 9 state-of-the-art automated analysis tools using two new datasets: i) a dataset of 69 annotated vulnerable smart contracts that can be used to evaluate the precision of analysis tools; and ii) a dataset with all the smart contracts in the Ethereum Blockchain that have Solidity source code available on Etherscan (a total of 47,518 contracts). The datasets are part of SmartBugs, a new extendable execution framework that we created to facilitate the integration and comparison between multiple analysis tools and the analysis of Ethereum smart contracts. We used SmartBugs to execute the 9 automated analysis tools on the two datasets. In total, we ran 428,337 analyses that took approximately 564 days and 3 hours, being the largest experimental setup to date both in the number of tools and in execution time. We found that only 42% of the vulnerabilities from our annotated dataset are detected by all the tools, with the tool Mythril having the higher accuracy (27%). When considering the largest dataset, we observed that 97% of contracts are tagged as vulnerable, thus suggesting a considerable number of false positives. Indeed, only a small number of vulnerabilities (and of only two categories) were detected simultaneously by four or more tools.

Empirical Review of Automated Analysis Tools on 47,587 Ethereum Smart Contracts

Lithium-ion batteries are promising energy storage devices for electric vehicles and renewable energy systems. However, due to complex electrochemical processes, potential safety issues, and inherent poor durability of lithium-ion batteries, it is essential to monitor and manage batteries safely and efficiently. This study reviews the development of battery management systems during the past periods and introduces a multilayer design architecture for advanced battery management, which consists of three progressive layers. The foundation layer focuses on the system physical basis and theoretical principle, the algorithm layer aims at providing a comprehensive understanding of battery, and the application layer ensures a safe and efficient battery system through sufficient management. A comprehensive overview of each layer is presented from both academic and engineering perspectives. Future trends in research and development of next-generation battery management are discussed. Based on data and intelligence, the next-generation battery management will achieve better safety, performance, and interconnectivity.

Advanced battery management strategies for a sustainable energy future: Multilayer design concepts and research trends

Blockchain for Internet of Energy management: Review, solutions, and challenges

The essence of blockchain smart contracts lies in the execution of business logic code in a decentralized architecture in which the execution outcomes are trusted and agreed upon by all the executing nodes. Despite the decentralized and trustless architectures of the blockchain systems, smart contracts on their own cannot access data from the external world. Instead, smart contracts interact with off-chain external data sources, called oracles, whose primary job is to collect and provide data feeds and input to smart contracts. However, there is always risk of oracles providing corrupt, malicious, or inaccurate data. In this paper, we analyze and present the notion of trust in the oracles used in blockchain ecosystems. We analyze and compare trust-enabling features of the leading blockchain oracle approaches, techniques, and platforms. Moreover, we discuss open research challenges that should be addressed to ensure secure and trustworthy blockchain oracles.

/pdf/trustworthy-blockchain-oracles-review-comparison-and-open-1wlfkrkh5a.pdf

Trustworthy Blockchain Oracles: Review, Comparison, and Open Research Challenges

Currently, Bitcoin and Ethereum are the two most popular cryptocurrency systems, especially Ethereum. It permits complex financial transactions or rules through scripts, which is called smart contracts. Since Ethereum smart contracts hold millions of dollars, their execution correctness is crucial against attacks which aim at stealing the assets. In this paper, we proposed a security assurance method for smart contract source code to find potential security risks. It contains two main functions, the first is syntax topological analysis of smart contract invocation relationship, to help developers to understand their code structure clearly; the second is logic risk (which may lead to vulnerabilities) detection and location, and label results on topology diagram. For developers' convenience, we have built a static analysis tool called SASC to generate topology diagram of invocation relationship and to find potential logic risks. We have made an evaluation on 2,952 smart contracts, experiment results proved that our method is intuitive and effective.

Security Assurance for Smart Contract

Battery swapping is a solution of electric vehicle (EV) battery refueling. For EV owners, the battery information and transaction’s correctness, openness, traceability and immutability is difficult to get guarantee in traditional centralized system. The trust lacking between EV owners and swapping station is caused, and becomes a big challenge to EV’s rapid development. An objective mechanism based on decentralized blockchain system is proposed to manage battery swapping and solve the trust lacking issue. With this solution, both battery’s life-cycle information and all operations histories are permanently saved in blockchain network. All key logics are driven by smart contracts, the battery price calculation and the digital currency exchange between EV owners and station are realized by smart contracts automatically and accurately. A primary prototype based on Ethereum is analyzed and implemented to illustrate the feasibility of managing battery swapping and refueling based on blockchain system to solve the trust lacking issue.

/pdf/apply-blockchain-technology-to-electric-vehicle-battery-53whxlujqi.pdf

Apply blockchain technology to electric vehicle battery refueling.

Blockchain, as a distributed ledger technology, becomes more and more popular in both industry and academia. Hyperledger Fabric is permissioned blockchain platform hosted by Linux foundation. Fabric has various components such as peer, ordering service, chaincode and state database. The structure of Fabric network is very complicated to provide reliable permissioned blockchain service. Generally, developers must deal with hundreds of parameters to configure a network. That will cause many reasonableness problems in configurations. In this paper, we focus on how to detect reasonableness problems in Fabric configurations. Firstly, we discuss and provide a reasonableness problem knowledge database based on the perspectives of functionality, security and performance. Secondly, we implemented a detect tool for reasonableness check to Fabric. Finally, we collect 108 sample networks as the testing dataset in the experiment. The result shows our tool can help developers to locate reasonableness problems and understand their network better.

Reasonableness discussion and analysis for Hyperledger Fabric configuration

Hyperledger Fabric is a permissioned blockchain platform which can solve the trustless problems among enterprises. However, the limited transaction throughput prevents the further use of Fabric platform. The performance of Fabric network depends on many factors, such as network parameters, node numbers and hardware limitations. In order to improve the performance of runtime Fabric network, this paper proposed a solution for performance diagnosis and optimization. We conduct lots of performance testing and collect the analysis rules of performance bottleneck. For runtime network, we monitor the performance data, node resources and network parameters in real time. Then we diagnose the performance health and analyze the reasons which cause the bottleneck. Finally, we dynamically tune the network parameters to adapt the network environment. Besides, we provide some suggestions for network maintainer to improve the performance.

Performance Diagnosis and Optimization for Hyperledger Fabric

Bitcoin’s slow finality is an important factor preventing it from being widely used in real life. And other public single-chain blockchains have the same problem. In this paper, we propose a practical new protocol called Plume to achieve consensus with fast finality by utilizing a (slow) traditional blockchain. Plume combines the DAG structure and traditional blockchain to increase throughput and speed up confirmation. DAG structure is proposed to increase throughput, but how to construct a secure consensus protocol based on DAG is pretty hard. In Plume, we use the traditional blockchain to generate a randomness which is used to generate fast blocks in DAG. And the order of fast blocks in DAG is dependent on a global clock and a hash function. Same as bitcoin, Plume is a probabilistic protocol. However, due to DAG structure, the creation rate of blocks in Plume can be higher without reducing security. Thus the confirmation time of blocks can be accelerated. This paper also analyzes the probability of confirmation in different conditions and also proves that Plume is secure no matter the randomness from traditional single chain is unbiased or not. At last, this paper simulates performance with 1000 nodes using NS-3. The throughput can be improved to 400 Tps in the case that block size is 100K bytes and time interval of fast block is 1 second. Also the confirmation time can be reduced to within 2 minutes in the case that block size is 10K bytes and time interval is 1 second.

Plume: Fast Finality Blockchain without Single Failure Point

Handle everyday research tasks with reliable, citation-backed results

Your personal Research Agent to handle research tasks with citation-backed results

Popular Tasks used by Researchers

How can I help with your research?

Meet SciSpace

Get more enhanced response by uploading the PDFs you want me to reference.

No relevant PDFs in your library

SciSpace is the AI research assistant for academics. Run systematic literature reviews on 280M+ papers, and write papers with cited sources. Trusted by 1M+ students, PhDs & researchers.

SciSpace | AI for Research

Analyze PDFs

Code & Manuscripts

Funding & Grants

Literature & Patents

Medical & Clinical Data

Systematic Review

Visualize & Present

Web & Data

Build a Google Scholar-like website for your research.

Build a website

Create charts and images for your research

Create a Chart

Write a paper for submission to a journal

Draft a manuscript

Patent Search

Design eye-catching scientific posters in minutes.

Scientific Poster Generation

Systematic Literature Review

One task is running at the moment. Your messages will be shown right after.

Drag and drop or click here to browse

Loved by <highlight>1 million+</highlight> researchers

Extract a list of specific topics and their sources from unstructured text

Topics

Compare and analyze relevant papers that matches with your search

Papers

Get insights from PDFs and bookmarked papers from your library

My library

Recent searches

Try searching for:

Catch AI-generated content in scholarly and non-scholarly content

{ai} Detector

Ai Writer

Get PDF Summaries, highlighted text explanations 

Chat with PDF

Effortlessly create in-text citations and bibliographies in APA and 2,500 other formats

Citation generator

Get explanations, summaries, and answers on academic papers

Ease up your research workflow with {scispace}'s cohort of exciting AI tools

Elevate your academic writing skills and convey your ideas the way you want

Paraphraser

Explore our range of reading and writing tools

Your file is being prepared and should be ready in a few minutes. If it's a large file, it might take a bit longer. You can close this window, and we'll email you the file when it's done.

You have reached a maximum limit of <strong>{limit}</strong> columns in the table. Remove at least <strong>1</strong> column to add or create another one.

Bingfeng Pi

Author Tools

Chat about Author