Specification is Law: Safe Creation and Upgrade of Ethereum Smart Contracts
Pedro Antonino, Juliandson Ferreira, Augusto Sampaio, A. W., Roscoe

TL;DR
This paper proposes a formal framework that enforces contract specifications for creating and upgrading Ethereum smart contracts, enhancing security and reliability beyond the traditional immutable 'code is law' approach.
Contribution
It introduces a systematic framework combining formal verification and upgrade mechanisms, centered on a trusted deployer, to enforce specifications for smart contract creation and upgrades.
Findings
Prototype implementation demonstrates practical applicability.
Framework successfully enforces specifications for ERC20 and ERC1155 standards.
Promising results indicate improved security and flexibility.
Abstract
Smart contracts are the building blocks of the "code is law" paradigm: the smart contract's code indisputably describes how its assets are to be managed - once it is created, its code is typically immutable. Faulty smart contracts present the most significant evidence against the practicality of this paradigm; they are well-documented and resulted in assets worth vast sums of money being compromised. To address this issue, the Ethereum community proposed (i) tools and processes to audit/analyse smart contracts, and (ii) design patterns implementing a mechanism to make contract code mutable. Individually, (i) and (ii) only partially address the challenges raised by the "code is law" paradigm. In this paper, we combine elements from (i) and (ii) to create a systematic framework that moves away from "code is law" and gives rise to a new "specification is law" paradigm. It allows contracts…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsBlockchain Technology Applications and Security · Cryptography and Data Security · Digital Rights Management and Security
