Abstract interpretation of Michelson smart-contracts - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

Abstract interpretation of Michelson smart-contracts

Résumé

Static analysis of smart-contracts is becoming more widespread on blockchain platforms. Analyzers rely on techniques like symbolic execution or model checking, but few of them can provide strong soundness properties and guarantee the analysis termination at the same time. As smart-contracts often manipulate economic assets, proving numerical properties beyond the absence of runtime errors is also desirable. Smart-contract execution models differ considerably from mainstream programming languages and vary from one blockchain to another, making state-of-the-art analyses hard to adapt. For instance, smart-contract calls may modify a persistent storage impacting subsequent calls. This makes it difficult for tools to infer invariants required to formally ensure the absence of exploitable vulnerabilities. The Michelson smart-contract language, used in the Tezos blockchain, is strongly typed, stack-based, and has a strict execution model leaving few opportunities for implicit runtime errors. We present a work in progress static analyzer for Michelson based on Abstract Interpretation and implemented within MOPSA, a modular static analyzer. Our tool supports the Michelson semantic features, including inner calls to external contracts. It can prove the absence of runtime errors and infer invariants on the persistent storage over an unbounded number of calls. It is also being extended to prove high-level numerical and security properties. CCS Concepts: • Security and privacy → Logic and verification; • Software and its engineering → Automated static analysis.
Fichier principal
Vignette du fichier
article.pdf (200.07 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03808802 , version 1 (10-10-2022)

Identifiants

Citer

Guillaume Bau, Antoine Miné, Vincent Botbol, Mehdi Bouaziz. Abstract interpretation of Michelson smart-contracts. SOAP '22: 11th ACM SIGPLAN International Workshop on the State Of the Art in Program Analysis, Jun 2022, San Diego, CA, United States. pp.36-43, ⟨10.1145/3520313.3534660⟩. ⟨hal-03808802⟩
55 Consultations
59 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More