denispaluca / msc-thesis

Master's Thesis: Fuzzing Algorand Smart Contracts. This thesis introduces AlgoFuzz, a fuzzing tool specifically designed for Algorand smart contracts.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Master's Thesis: Fuzzing Algorand Smart Contracts

This repository contains all the LaTeX files used to write the master's thesis.

Background

Smart contracts are crucial for many blockchain networks, especially for sensitive financial transactions. Traditional testing methods, such as unit testing, are not fully effective for ensuring smart contract security because they do not consider the unique interactions between the contracts and the blockchain. A software testing technique called fuzzing, where random inputs are used to discover bugs, is emerging as a potent method for smart contract security. Tools like Echidna have applied fuzzing to Ethereum contracts with success. However, with the rise of newer blockchain platforms like Algorand, there's a need for dedicated security tooling.

Contribution

This paper introduces AlgoFuzz, a fuzzing tool specifically designed for Algorand smart contracts. The tool uses greybox fuzzing to enhance code coverage and understand the possible states a contract can reach. The effectiveness of AlgoFuzz was tested using contracts from Echidna benchmarks and two larger Algorand contracts. In tests, AlgoFuzz achieved a code coverage of 64.04% on the Echidna benchmarks and 72.56% on the larger contracts, showcasing its potential to improve smart contract security on the Algorand platform.

License

Creative Commons License

This template is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License, meaning that:

  • You can share (copy, redistribute) and adapt (remix, transform, build upon) this template for any purpose, even commercially.
  • If you share the template or a modified (derived) version of it, you must attribute the template to the original authors (Florian Walch and contributors) by providing a link to the original template and indicate if changes were made.
  • Any derived template has to use the same or a compatible license.

The license applies only to the template; there are no restrictions on the resulting PDF file or the contents of your thesis.

About

Master's Thesis: Fuzzing Algorand Smart Contracts. This thesis introduces AlgoFuzz, a fuzzing tool specifically designed for Algorand smart contracts.


Languages

Language:TeX 99.4%Language:Makefile 0.2%Language:Perl 0.1%Language:Shell 0.1%Language:Batchfile 0.1%