all InfoSec news
Understanding Ethereum Mempool Security under Asymmetric DoS by Symbolic Fuzzing. (arXiv:2312.02642v2 [cs.CR] UPDATED)
cs.CR updates on arXiv.org arxiv.org
In blockchains, mempool controls transaction flow before consensus, denial of
whose service hurts the health and security of blockchain networks. This paper
presents MPFUZZ, the first mempool fuzzer to find asymmetric DoS bugs by
symbolically exploring mempool state space and optimistically estimating the
promisingness an intermediate state is in reaching bug oracles. Compared to the
baseline blockchain fuzzers, MPFUZZ achieves a > 100x speedup in finding known
DETER exploits. Running MPFUZZ on six major Ethereum clients leads to the
discovering …
blockchain blockchains bugs controls dos ethereum find flow fuzzer fuzzing health networks security service space state transaction under understanding