paperpaperIn , the research team examined more than 62,000 smart contracts and found 411 vulnerable contracts that contained modifiers that could be bypassed. To address these issues, MetaTrust has integrated the newly developed tool SoMo into its well-known smart contract security scanning serviceMetaScanmiddle.
The main purpose of this research is to identify unsafe modifiers, "bypassable modifiers", which can be bypassed in one or more unprotected smart contract functions. For example, the following "onlyOwner" modifier can be bypassed by calling the public function Mining24(). Therefore, an attacker can exploit sensitive functions protected by the onlyOwner modifier.
data setdata set91.2% accuracy for 62464 contracts in .
This research also reveals the main uses of modifiers in real-world scenarios, including access control, finance-related, contract state, and miscellaneous checks, as shown in the table below. These findings suggest that modifiers are often leveraged by developers for security-sensitive operations, but they may not be well protected.
Overall, much work remains to be done to ensure that blockchain technology is safe and secure. By using better programming techniques and testing tools, we can help prevent attacks on smart contracts and secure our digital transactions. As more businesses and organizations adopt blockchain technology for various applications, it is critical to ensure that smart contracts are safe and secure. This study is an important step towards that goal.
While blockchain technology promises to revolutionize many industries, security should always be a top priority. By using tools like MetaScan and following best practices for secure programming, we can help secure our digital transactions on the blockchain.
Follow Us
Twitter: @MetaTrustLabs
IOS
Android