Submitted Abstract
Under the FinTech initiative of Luxembourg and new financial regulations, banks in Luxembourg and worldwide, are getting more and more interested in blockchain technology and its use cases. With the collaboration of the Banque et Caisse d’Epargne de l’Etat (BCEE), the objective of this project is to focus on secure blockchain technologies for financial applications. More precisely, within the field of blockchain security, this work will be focusing on the security analysis of smart contracts and privacy of blockchain transactions.The subject will be targeted on methods to improve current state-of-the-art static analysis tools for the security assessment of smart contracts. Different tools have been proposed for the security assessment of smart contracts, but most of them solely focus on symbolic execution. Our objective will be to extend current state-of-the-art static analysis tools for smart contracts using techniques such as taint-analysis and fuzzing. Furthermore, the project will also focus on the development of efficient and scalable dynamic analysis tools for run-time detection of malicious transactions. On top of that, the project aims to propose a framework that permits to compare different blockchain technologies in terms of their privacy properties.To conclude, our innovative research in the field of blockchain security will promote research of combined algorithms between static analysis and dynamic analysis for vulnerability identification in smart contracts and fraud detection in blockchain transactions. The tools and algorithms developed during this project will find direct implementation within our industry partner BCEE.