• 강사 : 강민석 교수 (KAIST 전산학부)
• 일시 : 2024. 11. 25. (월) 16:00~17:30

In this talk, I will discuss our latest research on uncovering security vulnerabilities within modern blockchain systems. First, I will introduce Forky, a novel fuzzing framework tailored for proof-of-work (PoW) and proof-of-stake (PoS) blockchains. Forky is engineered to automatically generate and execute adversarial block inputs, creating varied fork scenarios that expose consensus vulnerabilities. Through Forky, we identified seven previously unknown consensus bugs affecting major blockchains, including Bitcoin and Ethereum. Next, I will explore the rise of Layer-2 blockchains, which aim to enhance transaction throughput for Layer-1 blockchains. Our new attack, the Ambush attack, enables frontrunning on Layer-2 rollup blockchains by manipulating transaction ordering, even in advanced fair-ordering systems. I will conclude the talk with a discussion on potential defenses and directions for future research.