Abstract:Decentralized Finance (DeFi) incidents stemming from the exploitation of smart contract vulnerabilities have culminated in financial damages exceeding 3 billion US dollars. Existing defense mechanisms typically focus on detecting and reacting to malicious transactions executed by attackers that target victim contracts. However, with the emergence of private transaction pools where transactions are sent directly to miners without first appearing in public mempools, current detection tools face significant challenges in identifying attack activities effectively. Based on the fact that most attack logic rely on deploying one or more intermediate smart contracts as supporting components to the exploitation of victim contracts, in this paper, we propose a new direction for detecting DeFi attacks that focuses on identifying adversarial contracts instead of adversarial transactions. Our approach allows us to leverage common attack patterns, code semantics and intrinsic characteristics found in malicious smart contracts to build the LookAhead system based on Machine Learning (ML) classifiers and a transformer model that is able to effectively distinguish adversarial contracts from benign ones, and make just-in-time predictions of potential zero-day attacks. Our contributions are three-fold: First, we construct a comprehensive dataset consisting of features extracted and constructed from recent contracts deployed on the Ethereum and BSC blockchains. Secondly, we design a condensed representation of smart contract programs called Pruned Semantic-Control Flow Tokenization (PSCFT) and use it to train a combination of ML models that understand the behaviour of malicious codes based on function calls, control flows and other pattern-conforming features. Lastly, we provide the complete implementation of LookAhead and the evaluation of its performance metrics for detecting adversarial contracts.

N-Mvtl Attack: Optimal Transaction Reordering Attack on DeFi.

DeFiRanger: Detecting DeFi Price Manipulation Attacks

Unmasking Role-Play Attack Strategies in Exploiting Decentralized Finance (DeFi) Systems

Decentralized Exchange Transaction Analysis and Maximal Extractable Value Attack Identification: Focusing on Uniswap USDC3

Eating sandwiches: Modular and lightweight elimination of transaction reordering attacks

Q-RTOP: Quantum-Secure Random Transaction Ordering Protocol for Mitigating Maximal Extractable Value Attacks in Blockchains With a Priority Gas-Fee Policy

Blockchain Amplification Attack

On the Just-In-Time Discovery of Profit-Generating Transactions in DeFi Protocols

Attacking the DeFi Ecosystem with Flash Loans for Fun and Profit

LookAhead: Preventing DeFi Attacks via Unveiling Adversarial Contracts

Eliminating Sandwich Attacks with the Help of Game Theory

Rolling in the Shadows: Analyzing the Extraction of MEV Across Layer-2 Rollups

Maximal Extractable Value in Decentralized Finance: Taxonomy, Detection, and Mitigation

CoMMA Protocol: Towards Complete Mitigation of Maximal Extractable Value (MEV) Attacks

Remeasuring the Arbitrage and Sandwich Attacks of Maximal Extractable Value in Ethereum

Optimal MEV Extraction Using Absolute Commitments

Nurgle: Exacerbating Resource Consumption in Blockchain State Storage via MPT Manipulation

Profitable Double-Spending Attacks

Security Analysis of DeFi: Vulnerabilities, Attacks and Advances

A2MM: Mitigating Frontrunning, Transaction Reordering and Consensus Instability in Decentralized Exchanges

An Empirical Study on Ethereum Private Transactions and the Security Implications