English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

The out-of-gas error occurs when smart contract programs are provided withinputs that cause excessive gas consumption, and would be easily exploited tomake the DoS attack. Multiple approaches have been proposed to estimate the gaslimit of a function in smart contracts to avoid such error. However, underestimation often happens when the contract is complicated. In this work, wepropose V-Gas, which could automatically generate inputs that maximizes the gascost and reduce the under estimation cases. V-Gas is designed based onfeedback-directed mutational fuzz testing. First, V-Gas builds the gas weightedcontrol flow graph (CFG) of functions in smart contracts. Then, V-Gas developsgas consumption guided selection and mutation strategies to generate the inputthat maximize the gas consumption. For evaluation, we implement V-Gas based onjs-evm, a widely used ethereum virtual machine written in javascript, andconduct experiments on 736 real-world transactions recorded on Ethereum.44.02\% of the transactions would have out-of-gas errors under the estimationresults given by solc, means that the recorded real gas consumption for thoserecorded transactions is larger than the gas limit value estimated by solc.While V-Gas could reduce the under estimation ratio to 13.86\%. Furthermore,V-Gas has exposed 25 previously unknown out-of-gas vulnerabilities in thosewidely-used smart contracts, 5 of which have been assigned unique CVEidentifiers in the US National Vulnerability Database.

V-Gas: Generating High Gas Consumption Inputs to Avoid Out-of-Gas Vulnerability