Abstract:With the increasing popularity of blockchain, different blockchain platforms coexist in the ecosystem (e.g., Ethereum, BNB, EOSIO, etc.), which prompts the high demand for cross-chain communication. Cross-chain bridge is a specific type of decentralized application for asset exchange across different blockchain platforms. Securing the smart contracts of cross-chain bridges is in urgent need, as there are a number of recent security incidents with heavy financial losses caused by vulnerabilities in bridge smart contracts, as we call them Cross-Chain Vulnerabilities (CCVs). However, automatically identifying CCVs in smart contracts poses several unique challenges. Particularly, it is non-trivial to (1) identify application-specific access control constraints needed for cross-bridge asset exchange, and (2) identify inconsistent cross-chain semantics between the two sides of the bridge. In this paper, we propose SmartAxe, a new framework to identify vulnerabilities in cross-chain bridge smart contracts. Particularly, to locate vulnerable functions that have access control incompleteness, SmartAxe models the heterogeneous implementations of access control and finds necessary security checks in smart contracts through probabilistic pattern inference. Besides, SmartAxe constructs cross-chain control-flow graph (xCFG) and data-flow graph (xDFG), which help to find semantic inconsistency during cross-chain data communication. To evaluate SmartAxe, we collect and label a dataset of 88 CCVs from real-attacks cross-chain bridge contracts. Evaluation results show that SmartAxe achieves a precision of 84.95% and a recall of 89.77%. In addition, SmartAxe successfully identifies 232 new/unknown CCVs from 129 real-world cross-chain bridge applications (i.e., from 1,703 smart contracts). These identified CCVs affect a total amount of digital assets worth 1,885,250 USD.

XChainWatcher: Monitoring and Identifying Attacks in Cross-Chain Bridges

Safeguarding Blockchain Ecosystem: Understanding and Detecting Attack Transactions on Cross-chain Bridges

Xscope: Hunting for Cross-Chain Bridge Attacks

Count of Monte Crypto: Accounting-based Defenses for Cross-Chain Bridges

SoK: Security of Cross-chain Bridges: Attack Surfaces, Defenses, and Open Problems

XGuard: Detecting Inconsistency Behaviors of Crosschain Bridges

SmartAxe: Detecting Cross-Chain Vulnerabilities in Bridge Smart Contracts via Fine-Grained Static Analysis

A Comprehensive Overview of Security Vulnerability Penetration Methods in Blockchain Cross-Chain Bridges

DeFiRanger: Detecting DeFi Price Manipulation Attacks

SoK: Cross-Chain Bridging Architectural Design Flaws and Mitigations

Intelligent blockchain based attack detection framework for cross-chain transaction

CONNECTOR: Enhancing the Traceability of Decentralized Bridge Applications via Automatic Cross-chain Transaction Association

zkBridge: Trustless Cross-chain Bridges Made Practical

Arguably Adequate Aqueduct Algorithm: Crossing A Bridge-Less Block-Chain Chasm

CoinWatch: A Clone-Based Approach For Detecting Vulnerabilities in Cryptocurrencies

EthScope: A Transaction-centric Security Analytics Framework to Detect Malicious Smart Contracts on Ethereum.

BACKRUNNER: Mitigating Smart Contract Attacks in the Real World

A study of blockchain-based liquidity cross-chain model

Blockchain-oriented Approach for Detecting Cyber-Attack Transactions

A General Quantitative Analysis Framework for Attacks in Blockchain