Ethainter: A Smart Contract Security Analyzer for Composite Vulnerabilities
summary
Ethainter implements Datalog taint analysis and models cross-transaction taint with sanitizers, not just single-call bugs, and runs on bytecode at blockchain scale (≈262,000 contracts analyzed). The authors report 82.5% precision for end-to-end vulnerabilities, use an automatic exploit generation harness (destroying 800+ vulnerable contracts on Ropsten as a sanity check), and claim better tradeoffs versus Securify, Securify2 and teEther.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:39The Dawn Of Smart Contract Vulnerabilities (2016)
- 2:13Tools Used To Find "Single Transaction Issues" (2017)
- 4:08First Composite Vulnerabilities (2017)
- 6:08Ethainter Finds Composite Vulnerabilities (2018-2020)
- 7:44Tainting Through Storage
- 15:38Good Results, Thorough Evaluation
- 17:40Substantial Precision Increase
- 21:40Better Than Symbolic Execution
- 22:03Symbolic Execution Insights
related talks
24mteEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts
13mAdvances in Automated Smart Contract Vulnerability
23mThanks for all the bugs!
25mSecurity & Smart Contract Ⅱ
48mD1T2 - Smashing Ethereum Smart Contracts for Fun and ACTUAL Profit
12mSmart Contract Security
25mCommSec D2 - Smart Contract (In)Security
22mHow Decompilation Uncovers Smart Contract Vulnerabilities