AntFuzzer: A Grey-Box Fuzzing Framework for EOSIO Smart Contracts
Jianfei Zhou, Tianxing Jiang, Shuwei Song, Ting Chen

TL;DR
AntFuzzer is an extensible grey-box fuzzing framework for EOSIO smart contracts that improves vulnerability detection and code coverage, addressing the limitations of black-box fuzzers.
Contribution
We introduce AntFuzzer, the first highly extensible grey-box fuzzing framework for EOSIO smart contracts, integrating AFL-style fuzzing to enhance vulnerability detection.
Findings
Achieved 37.5% code coverage improvement on benchmark contracts.
Detected 741 vulnerabilities in 4,616 real-world contracts.
Implemented 6 detection plugins for major EOSIO smart contract vulnerabilities.
Abstract
In the past few years, several attacks against the vulnerabilities of EOSIO smart contracts have caused severe financial losses to this prevalent blockchain platform. As a lightweight test-generation approach, grey-box fuzzing can open up the possibility of improving the security of EOSIO smart contracts. However, developing a practical grey-box fuzzer for EOSIO smart contracts from scratch is time-consuming and requires a deep understanding of EOSIO internals. In this work, we proposed AntFuzzer, the first highly extensible grey-box fuzzing framework for EOSIO smart contracts. AntFuzzer implements a novel approach that interfaces AFL to conduct AFL-style grey-box fuzzing on EOSIO smart contracts. Compared to black-box fuzzing tools, AntFuzzer can effectively trigger those hard-to-cover branches. It achieved an improvement in code coverage on 37.5% of smart contracts in our benchmark…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Advanced Malware Detection Techniques · Security and Verification in Computing
