一句话：提出 HighGuard，用 DCR 图作为形式规约，跨链动态监控智能合约交易，检测业务逻辑违规且无误报。
智能合约中的逻辑缺陷常被利用，造成重大经济损失。现有检测多关注代码级漏洞，难以捕捉跨链业务逻辑违规。HighGuard 以动态条件响应（DCR）图作为形式规约，对合约执行过程中的交易进行运行时监控，验证其是否符合业务逻辑模型；工具无需插桩，也不增加 gas 开销，并支持跨区块链平台检测。评估使用 54 个真实攻击案例，表明 HighGuard 能有效识别偏离规约的行为，且由于采用精确规约，检测无误报。
Logical flaws in smart contracts are often exploited, leading to significant financial losses. Our tool, HighGuard, detects transactions that violate business logic specifications of smart contracts. HighGuard employs dynamic condition response (DCR) graph models as formal specifications to verify contract execution against these models. It is capable of operating in a cross-chain environment for detecting business logic flaws across different blockchain platforms. We demonstrate HighGuard's effectiveness in identifying deviations from specified behaviors in smart contracts without requiring code instrumentation or incurring additional gas costs. By using precise specifications in the monitor, HighGuard achieves detection without false positives. Our evaluation, involving 54 exploits, confirms HighGuard's effectiveness in detecting business logic vulnerabilities.
@inproceedings{paperbot8434,
title = {HighGuard: Cross-Chain Business Logic Monitoring of Smart Contracts},
author = {Mojtaba Eshghie and Cyrille Artho and Hans Stammler and Wolfgang Ahrendt and Thomas Hildebrandt and Gerardo Schneider},
booktitle = {ASE},
year = {2024},
doi = {10.1145/3691620.3695356}
}