论文标题
权力下放悖论:霸权和风险ERC-20代币的研究
Decentralization Paradox: A Study of Hegemonic and Risky ERC-20 Tokens
论文作者
论文摘要
在这项工作中,我们探讨了称为管理ERC20代币的以太坊智能合约。我们证明,这些合同比他们试图破坏的服务(例如银行和集中的在线支付系统)更具控制权和安全性。我们开发了一个二进制分类器,用于识别管理的ERC20令牌,并进行广泛的数据分析,该数据表明,在以太坊上的10个ERC20令牌中,有近9个是管理的,因此即使在对其所有者的信任假设下,也无法与之互动。我们设计并实施了安全的管理 - 坚固的抽象类,该类别保护了管理的ERC20代币用户免受代币所有者的对抗性攻击或轻率行为。
In this work, we explore the class of Ethereum smart contracts called the administrated ERC20 tokens. We demonstrate that these contracts are more owner-controlled and less safe than the services they try to disrupt, such as banks and centralized online payment systems. We develop a binary classifier for identification of administrated ERC20 tokens, and conduct extensive data analysis, which reveals that nearly 9 out of 10 ERC20 tokens on Ethereum are administrated, and thereby unsafe to engage with even under the assumption of trust towards their owners. We design and implement SafelyAdministrated - a Solidity abstract class that safeguards users of administrated ERC20 tokens from adversarial attacks or frivolous behavior of the tokens' owners.