Cornell University
Library
Cornell UniversityLibrary

eCommons

Help
Log In(current)
  1. Home
  2. Cornell University Graduate School
  3. Cornell Theses and Dissertations
  4. ECONOMIC SECURITY OF SMART CONTRACTS AND BLOCKCHAINS

ECONOMIC SECURITY OF SMART CONTRACTS AND BLOCKCHAINS

File(s)
Babel_cornellgrad_0058F_14678.pdf (3.51 MB)
Permanent Link(s)
http://doi.org/10.7298/hz24-m286
https://hdl.handle.net/1813/117185
Collections
Cornell Theses and Dissertations
Author
Babel, Kushal
Abstract

Blockchains and Smart Contracts have ushered in a new era of decentralized applications, most prominently the ecosystem of Decentralized Finance (DeFi). The ideals of permissionless participation, open-source execution, and decentralization bring formidable security challenges. Due to the inherent financial nature of these systems, there is a need to study the security of these systems with an economic perspective. In this thesis, I build three systems to study and ensure the economic security of smart contracts and blockchains. The first system is Clockwork Finance Framework (CFF): CFF automatically reasons about the extent of economic security of composed smart contracts using formal methods, and proves bounds on economic security. The second one is Lanturn, which scales up the analysis of economic security in CFF by forgoing program analysis and treating economic security as an optimization problem. As a result, Lanturn automatically discovers novel attack strategies without encoding any contract-specific heuristics. The third system is PROF (PRotected Order Flow), which protects ordinary users from economic exploitation while accounting for the rational behaviour of blockchain validators. PROF bridges two parallel strands in the community, which were earlier believed to be incompatible with each other: protecting users and maximizing value for rational validators. The results from this thesis show that there is an urgent need to address economic security challenges. CFF and Lanturn have uncovered more than $50 million of extractable value per month in the recent past. The community is looking to productionize PROF in order to mitigate some of the most pernicious forms of value extraction.

Description
239 pages
Date Issued
2024-12
Keywords
Blockchain
•
DeFi Security
•
Formal Verification
•
Machine Learning
•
MEV
•
Smart Contracts
Committee Chair
Juels, Ari
Committee Member
Myers, Andrew
Ristenpart, Thomas
Degree Discipline
Computer Science
Degree Name
Ph. D., Computer Science
Degree Level
Doctor of Philosophy
Rights
Attribution 4.0 International
Rights URI
https://creativecommons.org/licenses/by/4.0/
Type
dissertation or thesis
Link(s) to Catalog Record
https://newcatalog.library.cornell.edu/catalog/16921897

Site Statistics | Help

About eCommons | Policies | Terms of use | Contact Us

copyright © 2002-2026 Cornell University Library | Privacy | Web Accessibility Assistance