一句话:提出 FlashSyn,通过反例驱动近似自动合成闪电贷攻击,以发现 DeFi 协议漏洞。
在 DeFi 中,闪电贷允许借款人在单笔区块链交易内借入大额资产,且无需预先抵押,但必须在交易结束时连本带息归还。攻击者可利用闪电贷聚集大量资金,进而攻击存在漏洞的 DeFi 协议。论文提出 FlashSyn,面向闪电贷攻击的自动合成问题,采用反例驱动的近似策略来构造攻击交易序列。标题表明其核心是通过迭代近似与反例引导搜索,合成可执行的闪电贷攻击,从而暴露协议中的安全缺陷。给出的摘要仅说明问题背景与攻击动机,未提供具体技术细节、评估基准或实验结论。
In decentralized finance (DeFi), lenders can offer flash loans to borrowers, i.e., loans that are only valid within a blockchain transaction and must be repaid with fees by the end of that transaction. Unlike normal loans, flash loans allow borrowers to borrow large assets without upfront collaterals deposits. Malicious adversaries use flash loans to gather large assets to exploit vulnerable DeFi protocols.
DOI 原文 ·
@inproceedings{paperbot11425,
title = {FlashSyn: Flash Loan Attack Synthesis via Counter Example Driven Approximation},
author = {Zhiyang Chen and Sidi Mohamed Beillahi and Fan Long},
booktitle = {ICSE},
year = {2024},
doi = {10.1145/3597503.3639190}
}