SolRaceFuzz: Solana链上程序并发缺陷检测
作者:
作者单位:

作者简介:

通讯作者:

中图分类号:

基金项目:

国家自然科学基金(62472221)


SolRaceFuzz: Concurrency Defects Detection in Solana On-chain Programs
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    随着Solana区块链应用日益广泛, 虽有工作针对其安全弱点、生态系统、商业应用等方面进行了研究, 但Solana区块链的并发缺陷问题尚未得到足够重视. 研究发现Solana链上程序中存在两类特殊的并发缺陷类型, 分别称为交易顺序依赖缺陷与时钟控制依赖缺陷. 这些缺陷允许区块链网络中的恶意节点合法地针对并发交易交换它们之间的执行顺序, 或推迟特定交易执行到特定时间, 以干涉这些并发交易执行结果. 因此, 具有这些缺陷的Solana链上程序的并发交易可能遭受攻击者的人为控制. 针对上述问题, 分别定义Solana链上程序的交易顺序依赖缺陷和时钟控制依赖缺陷, 并提出一种基于模糊测试与符号执行的检测方法. 该方法包含这两种缺陷的检测准则, 以及针对Solana区块链特点的账本模拟方法与交易生成方法. 基于该方法实现了原型工具SolRaceFuzz, 并在3组数据集上对缺陷发现能力、效率和探索策略这3个方面进行实验, 验证所提方法的有效性.

    Abstract:

    With the rapid adoption of the Solana blockchain, prior research has examined its security vulnerabilities, ecosystem, and commercial applications. However, concurrency defects in Solana on-chain programs have not received sufficient attention. This study identifies two special types of concurrency defects in Solana on-chain programs: transaction-order dependency defects and clock-control dependency defects. These defects allow malicious nodes in the blockchain network to legitimately reorder concurrent transactions or delay specific transactions until a specific time, thus affecting the execution outcomes of these concurrent transactions. As a result, concurrent transactions in Solana on-chain programs containing these defects may be vulnerable to adversarial control. To address this problem, this study defines transaction-order dependency defects and clock-control dependency defects in Solana on-chain programs and proposes a detection method based on fuzz testing and symbolic execution. The method includes detection criteria for both defect types, as well as a ledger simulation method and a transaction generation method tailored to the characteristics of the Solana blockchain. Based on this method, a prototype tool, SolRaceFuzz, is implemented, and experiments are conducted on three datasets to evaluate defect discovery capability, efficiency, and exploration strategy, verifying the effectiveness of the proposed method.

    参考文献
    相似文献
    引证文献
引用本文

高旭,马辰阳,叶盛,李晅松,宋巍. SolRaceFuzz: Solana链上程序并发缺陷检测.软件学报,,():1-24

复制
相关视频

分享
文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:2025-09-03
  • 最后修改日期:2026-02-07
  • 录用日期:
  • 在线发布日期: 2026-07-01
  • 出版日期:
文章二维码
您是第位访问者
版权所有:中国科学院软件研究所 京ICP备05046678号-3
地址:北京市海淀区中关村南四街4号,邮政编码:100190
电话:010-62562563 传真:010-62562533 Email:jos@iscas.ac.cn
技术支持:北京勤云科技发展有限公司

京公网安备 11040202500063号