一句话:通过对近1亿笔交易的大规模实证研究,揭示了NFT生态中智能合约的语义多样性、交互模式及其与诈骗代币风险交易的关系。
NFT生态中诈骗代币给用户带来严重金融风险,但现有研究缺乏对交易过程中智能合约语义与交互的理解。本文基于以太坊上约1亿笔交易、2000万个区块的数据集,开展大规模实证研究。研究发现:NFT生态中智能合约语义多样性有限,以代理、代币和DeFi合约为主;市场和代理注册合约在交易交互中最活跃;代币合约字节码呈现多样性,而诈骗代币字节码则趋于收敛;某些合约间交互模式同时出现在风险与非风险交易中,另一些则主要与风险交易相关。基于这些发现,作者为区块链生态风险缓解提出建议并展望未来研究方向。
The NFT ecosystem represents an interconnected, decentralized environment that encompasses the creation, distribution, and trading of Non-Fungible Tokens (NFTs), where key actors, such as marketplaces, sellers, and buyers, utilize smart contracts to facilitate secure, transparent, and trustless transactions. Scam tokens are deliberately created to mislead users and facilitate financial exploitation, posing significant risks in the NFT ecosystem. Prior work has explored the NFT ecosystem from various perspectives, including security challenges, actor behaviors, and risks from scams and wash trading, leaving a gap in understanding the semantics and interactions of smart contracts during transactions, and how the risks associated with scam tokens manifest in relation to the semantics and interactions of contracts. To bridge this gap, we conducted a large-scale empirical study on smart contract semantics and interactions in the NFT ecosystem, using a curated dataset of nearly 100 million transactions across 20 million blocks on Ethereum. We observe a limited semantic diversity among smart contracts in the NFT ecosystem, dominated by proxy, token, and DeFi contracts. Marketplace and proxy registry contracts are the most frequently involved in smart contract interactions during transactions, engaging with a broad spectrum of contracts in the ecosystem. Token contracts exhibit bytecode-level diversity, whereas scam tokens exhibit bytecode convergence. Certain interaction patterns between smart contracts are common to both risky and non-risky transactions, while others are predominantly associated with risky transactions. Based on our findings, we provide recommendations to mitigate risks in the blockchain ecosystem, and outline future research directions.
DOI 原文 ·
@inproceedings{paperbot9557,
title = {Why Is My Transaction Risky? Understanding Smart Contract Semantics and Interactions in the NFT Ecosystem},
author = {Yujing Chen and Xuanming Liu and Zhiyuan Wan and Zuobin Wang and David Lo and Difan Xie and Xiaohu Yang},
booktitle = {ASE},
year = {2025},
doi = {10.1109/ase63991.2025.00172}
}