In this work, we explore the class of Ethereum smart contracts called the administrated ERC20 tokens. We demonstrate that these contracts are more owner-controlled and less safe than the services they try to disrupt, such as banks and centralized online payment systems. We develop a binary classifier for identification of administrated ERC20 tokens, and conduct extensive data analysis, which reveals that nearly 9 out of 10 ERC20 tokens on Ethereum are administrated, and thereby unsafe to engage with even under the assumption of trust towards their owners. We design and implement SafelyAdministrated - a Solidity abstract class that safeguards users of administrated ERC20 tokens from adversarial attacks or frivolous behavior of the tokens' owners.
翻译:在这项工作中,我们探索了Etheum智能合同的类别,称为经管的EMRC20标志。我们证明这些合同比它们试图破坏的服务,如银行和中央在线支付系统,更由所有人控制,更不安全。我们开发了一个二进制分类器,用于识别经管的EMRC20标志,并进行广泛的数据分析,其中显示Ethereum的10个ECRC20标志中,有近9个是经管的,因此即使假定对其所有人的信任,也不安全地与之接触。我们设计和实施安全管理——一个可靠抽象的类别,保护经管的EC20标志的使用者免受对抗性攻击或象征所有人轻率行为的影响。