Rich specifications for Ethereum smart contract verification

Smart contracts are programs that execute in blockchains such as Ethereum to manipulate digital assets. Since bugs smart may lead substantial financial losses, there is considerable interest formally proving their correctness. However, the specification and verification of faces challenges rarely arise other application domains. frequently interact with unverified, potentially adversarial outside code, which substantially weakens assumptions formal analyses can (soundly) make. Moreover, core functionality transfer resources; describing this concisely requires dedicated support. Current reasoning techniques do not fully address these challenges, being restricted scope or expressiveness (in particular, presence re-entrant calls), offering limited means expressing resource transfers a contract performs. In paper, we present novel methodology tailored domain contracts. Our specifications associated technique first enable: (1) sound precise unverified code arbitrary re-entrancy, (2) modular about collaborating contracts, (3) domain-specific for resources transfers, contract's behaviour intuitive concise ways excluding typical errors by default. We have implemented our approach 2vyper, an SMT-based automated tool written Vyper, demonstrated its effectiveness verifying strong correctness guarantees real-world