跳到正文
arXiv cs.SE· Yuying Wang (Institute of Computing Technology, Chinese Academy of Sciences, China, University of Chinese Academy of Sciences, China), Yi Guo (Institute of Computing Technology, Chinese Academy of Sciences, China), Jiachi Chen (The State Key Laboratory of Blockchain,Data Security, Zhejiang University, Hangzhou High-Tech Zone), Hanwen Zhang (Institute of Computing Technology, Chinese Academy of Sciences, China, University of Chinese Academy of Sciences, China), Yi Sun (Institute of Computing Technology, Chinese Academy of Sciences, China, University of Chinese Academy of Sciences, China)·· 7 小时前AI 评分22

跨链桥验证漏洞实证研究:11 种 CVV 模式与 830 个漏洞实例

Understanding Verification Vulnerabilities in Cross-chain Bridges: An Empirical Study

AI 导读

中科院计算所等团队首次系统研究跨链验证漏洞(CVV),通过分析 36 个跨链桥项目的 588 份安全审计报告,归纳出 11 种 CVV 模式并划分为 5 大类,构建了覆盖 786 个合约文件、830 个漏洞实例的数据集。现有检测工具对 CVV 模式的覆盖有限,4 个受测 LLM 中仅 2 个超过 29.3% Macro-F1 的全模式基线,最佳仅 51.2%。

来源:arXiv cs.SE · arxiv.org