Skip to main content
SpringerLink
Log in

Severity Analysis of Web3 Security Vulnerabilities Based on Publicly Bug Reports

  • Conference paper
  • First Online:
Blockchain and Applications, 5th International Congress (BLOCKCHAIN 2023)

Part of the book series: Lecture Notes in Networks and Systems ((LNNS,volume 778))

Included in the following conference series:

  • 215 Accesses

Abstract

Web3 has its basis in blockchain and smart contract technologies, supporting secure, distributed, and decentralized applications. Nonetheless, Web3 is still in the process of evolution, and, as with any other software-based product, software bugs, security flaws, and other vulnerabilities are expected to appear. This paper performs a severity analysis of Web3 security vulnerabilities based on publicly available bug reports. Through this analysis, it is feasible to obtain an overview of the evolution and trends regarding the number of reports delivered, growth by platform, severity classification, and the amounts paid for discovering and reporting vulnerabilities.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 149.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 199.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Alchemy: Web3 Developer Report Q4 2022 (2022). https://www.alchemy.com/blog/web3-developer-report-q4-2022

  2. Cao, L.: Decentralized AI: edge intelligence and smart blockchain, metaverse, Web3, and DeSci. IEEE Intell. Syst. 37(3), 6–19 (2022). https://doi.org/10.1109/MIS.2022.3181504

    Article  MathSciNet  Google Scholar 

  3. Connelly, D.S.: Smart contract vulnerabilities on the ethereum blockchain: a current perspective. Ph.D. thesis, Portland State University (2020)

    Google Scholar 

  4. Gupta, R.: Hands-On Cybersecurity with Blockchain: Implement DDoS Protection, PKI-Based Identity, 2FA, and DNS Security Using Blockchain. Packt Publishing (2018). https://books.google.pt/books?id=upBiDwAAQBAJ

  5. Marchesi, L., Marchesi, M., Pompianu, L., Tonelli, R.: Security checklists for ethereum smart contract development: patterns and best practices (2020). https://arxiv.org/pdf/2008.04761.pdf

  6. Lucas, G.: Poly Network attack: here’s what happened to biggest DeFi hack in history. CoinGeek (2021). https://coingeek.com/poly-network-attack-heres-what-happened-to-biggest-defi-hack-in-history/

  7. Malwa, S.: DeFi protocol qubit finance exploited for \$80M. CoinDesk (2022). https://www.coindesk.com/markets/2022/01/28/defi-protocol-qubit-finance-exploited-for-80m/

  8. Matulevicius, N., Cordeiro, L.C.: Verifying security vulnerabilities for blockchain-based smart contracts. In: 2021 XI Brazilian Symposium on Computing Systems Engineering (SBESC), pp. 1–8 (2021). https://doi.org/10.1109/SBESC53686.2021.9628229

  9. Park, A., Wilson, M., Robson, K., Demetis, D., Kietzmann, J.: Interoperability: our exciting and terrifying Web3 future. Bus. Horiz. 66(4), 529–541 (2022). https://doi.org/10.1016/j.bushor.2022.10.005. https://www.sciencedirect.com/science/article/pii/S0007681322001318

  10. Pise, R., Patil, S.: A deep dive into blockchain-based smart contract-specific security vulnerabilities. In: 2022 IEEE International Conference on Blockchain and Distributed Systems Security (ICBDS), pp. 1–6 (2022). https://doi.org/10.1109/ICBDS53701.2022.9935949

  11. Sapna, Prashar, D.: Analysis on blockchain vulnerabilities & attacks on wallet. In: 2021 3rd International Conference on Advances in Computing, Communication Control and Networking (ICAC3N), pp. 1515–1521 (2021). https://doi.org/10.1109/ICAC3N53548.2021.9725403

  12. Snegireva, D.A.: Review of modern vulnerabilities in blockchain systems. In: 2021 International Conference on Quality Management, Transport and Information Security, Information Technologies (IT &QM &IS), pp. 117–121 (2021). https://doi.org/10.1109/ITQMIS53292.2021.9642862

  13. William, J.: Blockchain: The Simple Guide to Everything You Need to Know. CreateSpace Independent Publishing Platform (2016). https://books.google.pt/books?id=xYauDAEACAAJ

Download references

Acknowledgements

This work was partially supported by the Norte Portugal Regional Operational Programme (NORTE 2020), under the PORTUGAL 2020 Partnership Agreement, through the European Regional Development Fund (ERDF), within the project “Cybers SeC IP” (NORTE-01-0145-FEDER-000044).

Author information

Authors and Affiliations

  1. Instituto Politécnico de Viana do Castelo, Viana do Castelo, Portugal

    Rita Melo & Pedro Pinto

  2. INESC TEC, Porto, Portugal

    Pedro Pinto & António Pinto

  3. CIICESI, ESTG, Instituto Politécnico do Porto, Porto, Portugal

    António Pinto

Authors
  1. Rita Melo
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Pedro Pinto
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. António Pinto
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Rita Melo .

Editor information

Editors and Affiliations

  1. Universidade do Minho, Braga, Portugal

    José Manuel Machado

  2. BISITE research group, University of Salamanca, Salamanca, Spain

    Javier Prieto

  3. Guarda Polytechnic Institute, Guarda, Portugal

    Paulo Vieira

  4. Universidade do Minho, Braga, Portugal

    Hugo Peixoto

  5. Universidade do Minho, Braga, Portugal

    António Abelha

  6. Científicas, ITEFI, Instituto de Física Aplicada, Consejo Superior de Investigaciones, Madrid, Spain

    David Arroyo

  7. Pappelallee, IOTA Foundation, Berlin, Germany

    Luigi Vigneri

Rights and permissions

Reprints and permissions

Copyright information

© 2023 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Melo, R., Pinto, P., Pinto, A. (2023). Severity Analysis of Web3 Security Vulnerabilities Based on Publicly Bug Reports. In: Machado, J.M., et al. Blockchain and Applications, 5th International Congress. BLOCKCHAIN 2023. Lecture Notes in Networks and Systems, vol 778. Springer, Cham. https://doi.org/10.1007/978-3-031-45155-3_16

Download citation

Publish with us

Policies and ethics

Search

Navigation