一句话：提出 FORKY，通过分叉感知变异与分叉多样化反馈的差分模糊测试，检测区块链共识客户端在分叉处理上的实现差异。
区块链网络允许多个由不同团队开发的客户端实现同一共识算法，实现之间的细微语义差异可能导致安全性失效。现有模糊测试框架在测试由冲突区块序列（即分叉）构成的场景时存在不足：传统代码覆盖率反馈缺乏足够粒度，难以引导测试进入多样且复杂的分叉处理路径，因而无法充分评估客户端的叉处理流程。本文提出 FORKY，一个叉状态感知的差分模糊测试框架，核心是新颖的叉感知变异（fork-aware mutation）与分叉多样化反馈（fork-diversifying feedback）机制，从而系统性地探索分叉处理过程并暴露实现间的不一致。作者在两个最具影响力的区块链项目 Bitcoin 与 Ethereum 上测试 FORKY，二者分别代表工作量证明（PoW）与权益证明（PoS）两大共识算法家族。
Blockchain networks allow multiple client implementations of the same consensus algorithm by different developers to coexist in the same system. Ensuring correct implementations among these heterogeneous clients is crucial, as even slight semantic discrepancies in their implementations can lead to safety failures. While existing fuzzing frameworks have discovered implementation flaws in blockchain, they suffer from several challenges in testing them with sequences of conflicting blocks, called forks. Existing tools fail to adequately assess the forkhandling processes in blockchain implementations when relying on traditional code coverage feedback, which lacks the granularity needed to navigate the diverse and complex fork-handling scenarios. This paper introduces FORKY, a fork state-aware differential fuzzing framework designed to detect implementation discrepancies within the critical fork-handling process with its novel fork-aware mutation and fork-diversifying feedback mechanisms. We test FORKY on the two most influential blockchain projects: Bitcoin and Ethereum, which are the representatives of the two major blockchain consensus algorithm families, Proof-of-Work (PoW) and Proof-of-Stake (PoS) consensus algorithms.
DOI 原文 ·
@inproceedings{paperbot8805,
title = {Fork State-Aware Differential Fuzzing for Blockchain Consensus Implementations},
author = {Wonhoi Kim and Hocheol Nam and Muoi Tran and Amin Jalilov and Zhenkai Liang and Sang Kil Cha and Min Suk Kang},
booktitle = {ICSE},
year = {2025},
doi = {10.1109/icse55347.2025.00085}
}