You May Have Paid more than you imagine: Replay Attacks on Ethereum Smart Contracts
1 like456 views
The document discusses replay attacks on Ethereum smart contracts, outlining how transactions deemed valid on one blockchain can also be valid on another, leading to potential fraud. It highlights the analysis of vulnerabilities in smart contracts, revealing that 52 contracts are susceptible to such attacks, and provides insight into the mechanics of these vulnerabilities. Recommendations for improving security include conducting thorough audits, incorporating unique identifiers in signatures, and raising awareness among smart contract users about potential risks.
![Step three: Bob take out the input data of this transaction on the
blockchain. The parameters “from, to, value, fee, v, r, s” were extracted
from [0]- [6] in step two. The following is the implementation of the
transfer function.
Verification of the replay attack process](https://image.slidesharecdn.com/defcon-26-bai-zheng-chai-wang-you-may-have-paid-more-than-you-imagine-180924064513/85/You-May-Have-Paid-more-than-you-imagine-Replay-Attacks-on-Ethereum-Smart-Contracts-34-320.jpg)
You May Have Paid more than you imagine: Replay Attacks on Ethereum Smart Contracts
- 2. About us • 360 Technology is a leading Internet security company in China. Our core products are anti-virus security software for PC and cellphones. • UnicornTeam (https://unicorn.360.com/) was built in 2014. This is a group that focuses on the security issues in many kinds of wireless telecommunication systems. The team also encourage members to do other research that they are interested in. • Highlighted works of UnicornTeam include: – Low-cost GPS spoofing research (DEFCON 23) – LTE redirection attack (DEFCON 24) – Attack on power line communication (Black Hat USA 2016)
- 3. PPT www.1ppt.com/moban/ PPT www.1ppt.com/sucai/ PPT www.1ppt.com/beijing/ PPT www.1ppt.com/tubiao/ PPT www.1ppt.com/xiazai/ PPT www.1ppt.com/powerpoint/ www.1ppt.com/ziliao/ www.1ppt.com/fanwen/ www.1ppt.com/shiti/ www.1ppt.com/jiaoan/ PPT www.1ppt.cn PPT www.1ppt.com/kejian/ www.1ppt.com/kejian/yuwen/ www.1ppt.com/kejian/shuxue/ www.1ppt.com/kejian/yingyu/ www.1ppt.com/kejian/meishu/ www.1ppt.com/kejian/kexue/ www.1ppt.com/kejian/wuli/ www.1ppt.com/kejian/huaxue/ www.1ppt.com/kejian/shengwu/ www.1ppt.com/kejian/dili/ www.1ppt.com/kejian/lishi/ Part 1 Part 2 Part 3 Part 4 The Main Idea Back Ground DemonstrationSafety Problem Replay Attack
- 4. Part 1 Back Ground （Blockchain & smart contract & Ethereum）
- 5. What is Blockchain? Blockchain is: A Large-scale globally decentralized computer network A system that users can interact with by sending transactions — Transactions are guaranteed by Consensus Mechanism
- 6. Advantages of Blockchain • having the unified database with rapid consensus • With large-scale fault-tolerant mechanism • Not relying on trust, not controlled by any single administrator or organization (not for private/consortium blockchain) • Audit-able: external observers can verify transaction history. • Automation: operating without human involvement.
- 7. What on-earth can Blockchain do? Cryptocurrency: digital assets on the Blockchain There are tokens in the public blockchains used to limit the rates of updating transactions & power the maintenance of Blockchain. Record Registration (such as the Domain Name System based on Blockchain. Timestamp to track high value data Financial Contracts General Computation Non-monetary Characteristics Support Functionalities
- 8. Ethereum About 2013, the public realized that Blockchain can be used in hundreds of applications besides cryptocurrency, such as asset issuance, crowdfunding, domain-name registration, ownership registration, market forecasting, Internet of things, voting and so on.
- 9. How to realize? Smart contracts are pieces of code that live on the Blockchain and execute commands exactly how the were told to. “smart contract" - a computer program running in a secure environment that automatically transfers digital assets according to previously arbitrary rules. business people Developer Smart Contract
- 10. How to build one? ■ Blockchain with built-in programming language ■ maximum abstraction and versatility ■ it is very ideal to process smart contracts Ethereum
- 11. Ethereum EVM: It is the operating environment for smart contract in the Ethereum. It is not only encapsulated by a sandbox, but in fact it is completely isolated, that is, the code that runs inside the EVM does not have access to the network, file system, or other processes. Even smart contracts have limited contact with other smart contracts. Operating System
- 12. Contract usage scenario Hedging contracts, Savings Purse, Testamentary contract Financial scenario Online voting, De-centralized governance , Domain name registration Non-financial scenario
- 14. The Ecology of the Ethereum On average, there are 100 thousand of new users join the Ethereum ecosystem every day. The users are very active, with an average daily transactions of more than 1 million times on Ethereum.
- 15. The safety issue of the Ethereum attack and token steal exchange probable to be hijacked wallet overflow attack smart contract main parts
- 16. The security problem of smart contract April 2018, BEC contract May 2018, EDU contract June 2018, SNC contract Directly affects the major exchanges, including the issue, recharge or cash withdrawal of the tokens.
- 17. Vulnerability in Smart Contracts According to < Finding The Greedy , Prodigal , and Suicidal Contracts at Scale>, In March 2018, nearly 1 million smart contracts were analyzed , among which there are 34200 smart contracts can be easily attacked by hackers.
- 18. How to lower the probability of loss ? A complete and objective audit is required for smart contracts. The emergency response can be made when the vulnerability was found in Smart Contracts Reward can be provided when someone detect any bug .
- 19. Replay attack on smart contractPart 3
- 20. What are we care about - Replay attack Replay attack: If a transaction is legitimate on one Blockchain, it is also legitimate on another block chain. When you transfer BTC1, your BTC2/BTC3 may be transferred at the same time.
- 23. we found the replay attack problem exists in 52 smart contracts. We analyzed the smart contract example to verify the replay attack. We analyzed the source and process of replay attack to expound the feasibility of replay attack in principle. We verified the replay attack based on the signature vulnerability. We proposed defense strategy to prevent this problem. Our Contribution
- 24. • Judging whether the contract is accord with the ERC20 standard. we set three scanning standards to discovery the smart contracts which have the VULNERABILITY. require ( totalsupply>0) Vulnerability Scanning
- 25. • Get the name of the contract to determine whether the name is valid. Vulnerability Scanning
- 28. ● It has been confirmed(proved) that there are two smart contracts allow proxy transactions.. ● If the two smart contracts use a similar mechanism and share the same transaction format. ● When a transaction happens in one contract, this transaction will be also legal in another contract, and the replay attack will be successfully executed. Why does the replay attack occur?
- 29. The issue lies in this line: bytes32 h = keccak256(_from,_to,_value,_fee,nonce); Example
- 30. Attack Process
- 31. ● we chose two ERC20 smart contracts, the UGT contract and the MTC contract. ● we created two accounts, Alice and Bob ● we deposit some tokens in the two accounts in UGT contracts and MTC contracts. ● at least one Ethereum full node Experiment condition
- 32. Step one: transaction records on the Ethereum were scanned to find out accounts which had both UGT tokens and MTC tokens(we use two accounts, Alice and Bob) . Verification of the replay attack process
- 33. Step two: Bob induced Alice to send him 2 UGT tokens. The transaction input data is shown as below: Function: transferProxy(address _from, address _to, uint256 _value, uint256 _feeUgt, uint8 _v, bytes32 _r, bytes32 _s) MethodID: 0xeb502d45 Verification of the replay attack process
- 34. Step three: Bob take out the input data of this transaction on the blockchain. The parameters “from, to, value, fee, v, r, s” were extracted from [0]- [6] in step two. The following is the implementation of the transfer function. Verification of the replay attack process
- 35. Step four: Bob use the input data in step 2 to execute another transfer in the smart contract of MTC. The result of this transaction is shown as below. Verification of the replay attack process
- 36. Step five: Bob got not only 2 UGT tokens but also 2 MTC tokens from Alice. In this process, the transfer of 2 MTC tokens was not authorized by Alice. Verification of the replay attack process
- 38. Select contract Account setting genesis.json the UGT contract and the MTC contract • Alice and Bob • Alice(the sender): 0x8e65d5349ab0833cd76d336d380144294417249e • Bob(the receiver): 0x5967613d024a1ed052c8f9687dc74897dc7968d6 • Both own some tokens for transferring. UGT Token :0x43eE79e379e7b78D871100ed696e803E7893b644 MTC Token:0xdfdc0D82d96F8fd40ca0CFB4A288955bECEc2088
- 39. Core code
- 40. Demo Demo
- 41. By April 27th, 2018, loophole of this replay attack risk exists in 52 Ethereum smart contracts. according to the vulnerability of the replay attack: l High-risk group (10/52): no specific information is contained in the signature of smart contract, which the signature can be fully reused. l moderate-risk group (37/52): fixed string is contained in the signature of smart contract, which the probability of reusing the signature is still high. l Low -risk group (5/52): the address of the contract (1 in 5) or the address of sender (4 in5) is contained in the signature of smart contract. There are strong restrictions, but there is still own the possibility of replay attacks. Statistics and Analysis
- 42. l Replay in the same contract (5/52) MiracleTele RoyalForkToken FirstBlood KarmaToken KarmaToken2 l Cross-contracts replay (45/52) Besides, we divided these 45 contracts into 3 groups, for the specific prefix data used in the signatures. Cross-contracts replays may happen among any contracts as long as they are in a same group. According to feasible replay attack approaches: Statistics and Analysis
- 43. ü Group 1 the specific prefix data 1 used in the signatures (28/52) ARCCoin,BAF, Claes Cash Claes Cash2 CNF,CWC,DET, Developeo, Envion, FiCoin, GoldCub JaroCoin metax, metax2 NODE, NODE2, NPLAY, SIGMA, solomex, Solomon Exchange, Solomon Exchange2, Trump Full Term Token, Trump Impeachment Token, X, ZEUS TOKEN ZEUS TOKEN2 ,cpay. ü Group2 the specific prefix data 2 used in the signatures (7/52) "x19Ethereum Signed Message:n32" Acore CLC CLOUT CNYToken, CNYTokenPlus, GigBit The 4th Pillar Token, Statistics and Analysis According to feasible replay attack approaches:
- 44. ü Group3 no specific prefix data used in the signatures (10/52) BlockchainCuties First(smt), GG Token M2C Mesh Network M2C Mesh Network2 MJ comeback, MJ comeback2, MTC Mesh Network, SmartMesh Token, UG Token l Replay between test chain and main chain (2/52) MeshBox MeshBox2 l Replay between different main chain (0/52) According to feasible replay attack approaches: Statistics and Analysis
- 46. According to the trading frequency of above-mentioned contracts By 9:00 April 30th, 2018, • 16 contracts were found which have the transaction records beyond one month, The proportion is 30.77% of the total number of contracts. • 3 contracts Only have the records for deployment. The proportion is 5.77% of the total number of contracts. According to the comprehensive analysis, 63.46% of the contract transactions are still active. Statistics and Analysis
- 47. Ø The designers of smart contract should always confirm the suitable range of digital signature when designing smart contracts. Ø The smart contracts deployed on public chain should add in the specific information of the public chain such as the chainID and the name of the public chain. Ø The users of smart contracts need to pay attention to news and reports concerning the loophole disclosures. Countermeasures
- 48. p The security problems of smart contracts have been widely concerned. p As long as the signature was not limited by the smart contracts, there is possibility of replay attack. p We believe that loopholes on the Ethereum smart contracts have not totally come to light. Conclusion