Abstract:TEE-based smart contracts are an emerging blockchain architecture, offering fully programmable privacy with better performance than alternatives like secure multiparty computation. They can also support compatibility with existing smart contract languages, such that existing (plaintext) applications can be readily ported, picking up privacy enhancements automatically. While previous analysis of TEE-based smart contracts have focused on failures of TEE itself, we asked whether other aspects might be understudied. We focused on state consistency, a concern area highlighted by Li et al., as well as new concerns including access pattern leakage and software upgrade mechanisms. We carried out a code review of a cohort of four TEE-based smart contract platforms. These include Secret Network, the first to market with in-use applications, as well as Oasis, Phala, and Obscuro, which have at least released public test networks. The first and most broadly applicable result is that access pattern leakage occurs when handling persistent contract storage. On Secret Network, its fine-grained access pattern is catastrophic for the transaction privacy of SNIP-20 tokens. If ERC-20 tokens were naively ported to Oasis they would be similarly vulnerable; the others in the cohort leak coarse-grained information at approximately the page level (4 kilobytes). Improving and characterizing this will require adopting techniques from ORAMs or encrypted databases. Second, the importance of state consistency has been underappreciated, in part because exploiting such vulnerabilities is thought to be impractical. We show they are fully practical by building a proof-of-concept tool that breaks all advertised privacy properties of SNIP-20 tokens, able to query the balance of individual accounts and the token amount of each transfer. We additionally demonstrate MEV attacks against the Sienna Swap application. As a final consequence of lacking state consistency, the developers have inadvertently introduced a decryption backdoor through their software upgrade process. We have helped the Secret developers mitigate this through a coordinated vulnerability disclosure, after which their state consistency should be roughly on par with the rest.

Zether: Towards Privacy in a Smart Contract World

ZeroMT: Towards Multi-Transfer transactions with privacy for account-based blockchain

Z-Channel: Scalable and Efficient Scheme in Zerocash.

Private and Atomic Exchange of Assets over Zero Knowledge Based Payment Ledger

BlockMaze: an Efficient Privacy-Preserving Account-Model Blockchain Based on Zk-Snarks.

Moving Smart Contracts -- A Privacy Preserving Method for Off-Chain Data Trust

RZcoin: Ethereum-Based Decentralized Payment with Optional Privacy Service

SGXonerate:Finding (and Partially Fixing) Privacy Flaws in TEE-based Smart Contract Platforms Without Breaking the TEE

zkChain: A privacy‐preserving model based on zk‐SNARKs and hash chain for efficient transfer of assets

zkFi: Privacy-Preserving and Regulation Compliant Transactions using Zero Knowledge Proofs

On the Practicality of Smart Contract PKI

EtherCloak: Enabling Multi-Level and Customized Privacy on Account-Model Blockchains

zkHawk: Practical Private Smart Contracts from MPC-based Hawk

The cost of privacy on blockchain: A study on sealed-bid auctions

Private Electronic Payments with Self-Custody and Zero-Knowledge Verified Reissuance

Lazy Contracts: Alleviating High Gas Costs by Secure and Trustless Off-chain Execution of Smart Contracts

THEMIS: A Decentralized Privacy-Preserving Ad Platform with Reporting Integrity

zkTax: A pragmatic way to support zero-knowledge tax disclosures

Blockchain-based Transparency Framework for Privacy Preserving Third-party Services

Towards a Privacy-Preserving Dispute Resolution Protocol on Ethereum

THEMIS: Decentralized and Trustless Ad Platform with Reporting Integrity