Abstract:Sharding is a prominent technique for scaling blockchains. By dividing the network into smaller components known as shards, a sharded blockchain can process transactions in parallel without introducing inconsistencies through the coordination of intra-shard and cross-shard consensus protocols. However, we observe a critical security issue with sharded systems: transaction ordering manipulations can occur when coordinating intra-shard and cross-shard consensus protocols, leaving the system vulnerable to attack. Specifically, we identify a novel security issue known as finalization fairness, which can be exploited through a front-running attack. This attack allows an attacker to manipulate the execution order of transactions, even if the victim's transaction has already been processed and added to the blockchain by a fair intra-shard consensus. To address the issue, we offer Haechi, a novel cross-shard protocol that is immune to front-running attacks. Haechi introduces an ordering phase between transaction processing and execution, ensuring that the execution order of transactions is the same as the processing order and achieving finalization fairness. To accommodate different consensus speeds among shards, Haechi incorporates a finalization fairness algorithm to achieve a globally fair order with minimal performance loss. By providing a global order, Haechi ensures strong consistency among shards, enabling better parallelism in handling conflicting transactions across shards. These features make Haechi a promising solution for supporting popular smart contracts in the real world. To evaluate Haechi's performance, we implemented the protocol using Tendermint and conducted extensive experiments on a geo-distributed AWS environment. Our results demonstrate that Haechi achieves finalization fairness with little performance sacrifice compared to existing cross-shard consensus protocols.

SoK: Transparent Dishonesty: front-running attacks on Blockchain

Iquery: A Trustworthy and Scalable Blockchain Analytics Platform

Uncontrolled Randomness in Blockchains: Covert Bulletin Board for Illicit Activity

SoK: Oracles from the Ground Truth to Market Manipulation

Commitment Against Front Running Attacks

The Potential of Self-Regulation for Front-Running Prevention on DEXes

A Solomonic Solution to Ownership Disputes: An Application to Blockchain Front-Running

Towards Stronger Blockchains: Security Against Front-Running Attacks

Selfish & Opaque Transaction Ordering in the Bitcoin Blockchain: The Case for Chain Neutrality

BACKRUNNER: Mitigating Smart Contract Attacks in the Real World

Exploiting Unfair Advantages: Investigating Opportunistic Trading in the NFT Market

We might walk together, but I run faster: Network Fairness and Scalability in Blockchains

FIRST: FrontrunnIng Resilient Smart ConTracts

Front-running Attack in Sharded Blockchains and Fair Cross-shard Consensus

Incentive Mechanism Design for Mitigating Frontrunning and Transaction Reordering in Decentralized Exchanges

Delayed Packing Attack and Countermeasure Against Transaction Information Based Applications

Code is the (f)law: Demystifying and Mitigating Blockchain Inconsistency Attacks Caused by Software Bugs.

Dissecting Bitcoin and Ethereum Transactions: On the Lack of Transaction Contention and Prioritization Transparency in Blockchains

FRAD: Front-Running Attacks Detection on Ethereum using Ternary Classification Model

Examining Attacks on Consensus and Incentive Systems in Proof-of-Work Blockchains: A Systematic Literature Review