Understanding Verification Vulnerabilities in Cross-chain Bridges: An Empirical Study
Study of 36 cross-chain bridges finds 830 verification-vulnerability instances across 11 patterns.
Researchers present the first systematic study of Cross-chain Verification Vulnerabilities in bridge smart contracts that validate external-chain state proofs, senders, and signatures. From 588 audit reports covering 36 real-world bridge projects, they derive 11 CVV patterns in five categories and build a dataset of 830 instances across 786 contract files, mapped to audited source versions. Existing detection tools document limited CVV coverage. Only two of four evaluated LLMs beat a 29.3% Macro-F1 all-pattern baseline, and the best reaches 51.2%.
- Eleven CVV patterns are grouped into five verification-property categories.
- The dataset has 830 instances from 588 audits of 36 bridge projects.
- Labels map audit reports, source versions, files, and CVV patterns.
- The best of four LLMs reaches 51.2% Macro-F1 versus a 29.3% baseline.
From the original article
1 min read at arxiv.orgWith the rapid development of blockchain technology, numerous heterogeneous blockchains have emerged, each featuring distinct architectures, consensus mechanisms, and application ecosystems. Cross-chain bridges have consequently become a critical infrastructure component, typically relying on smart contracts to facilitate message passing and asset transfers across heterogeneous blockchains.
By Yuying Wang · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.