DappGuard : Active Monitoring and Defense for Solidity Smart Contracts

Ethereum’s smart contracts present an attractive incentive toward participating in the network. Deploying a smart contract allows a user to run a distributed application (Dapp) that includes storage, payment features, and cryptographic services all within the context of just a contract script and its layout. However, recently exploited vulnerabilities in the Solidity smart contract language have undermined the integrity of Ethereum’s smart contract implementations. After some discussion of previous work, we examine whether known vulnerabilities can be detected as attacks post factum from information available on the Ethereum blockchain. Then, we present findings on what information is available for a few selected contracts. Finally, we propose our design for a live monitoring and protection system based on our research findings, the prototypes we developed to gather data, and documented plans for extension.