English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Smart contracts play a vital role in the Ethereum ecosystem. Due to theprevalence of kinds of security issues in smart contracts, the smart contractverification is urgently needed, which is the process of matching a smartcontract's source code to its on-chain bytecode for gaining mutual trustbetween smart contract developers and users. Although smart contractverification services are embedded in both popular Ethereum browsers (e.g.,Etherscan and Blockscout) and official platforms (i.e., Sourcify), and gaingreat popularity in the ecosystem, their security and trustworthiness remainunclear. To fill the void, we present the first comprehensive security analysisof smart contract verification services in the wild. By diving into thedetailed workflow of existing verifiers, we have summarized the key securityproperties that should be met, and observed eight types of vulnerabilities thatcan break the verification. Further, we propose a series of detection andexploitation methods to reveal the presence of vulnerabilities in the mostpopular services, and uncover 19 exploitable vulnerabilities in total. All thestudied smart contract verification services can be abused to help spreadmalicious smart contracts, and we have already observed the presence of usingthis kind of tricks for scamming by attackers. It is hence urgent for ourcommunity to take actions to detect and mitigate security issues related tosmart contract verification, a key component of the Ethereum smart contractecosystem.

Abusing the Ethereum Smart Contract Verification Services for Fun and Profit