HighGuard: Cross-Chain Business Logic Monitoring of Smart Contracts
Abstract
Logical flaws in smart contracts are often exploited, leading to significant financial losses. Our tool, HighGuard, detects transactions that violate business logic specifications of smart contracts. HighGuard employs dynamic condition response (DCR) graph models as formal specifications to verify contract execution against these models. It is capable of operating in a cross-chain environment for detecting business logic flaws across different blockchain platforms. We demonstrate HighGuard's effectiveness in identifying deviations from specified behaviors in smart contracts without requiring code instrumentation or incurring additional gas costs. By using precise specifications in the monitor, HighGuard achieves detection without false positives. Our evaluation, involving 54 exploits, confirms HighGuard's effectiveness in detecting business logic vulnerabilities.
BibTeX
@inproceedings{Eshghie-al:ASE24,
author = {Mojtaba Eshghie and
Cyrille Artho and
Hans Stammler and
Wolfgang Ahrendt and
Thomas T. Hildebrandt and
Gerardo Schneider},
title = {{HighGuard:} {Cross-Chain} Business Logic Monitoring of Smart Contracts},
booktitle = {ASE},
pages = {2378--2381},
publisher = {{ACM}},
year = {2024},
}