{"id":"https://openalex.org/W4385080392","doi":"https://doi.org/10.1109/sp46215.2023.10179435","title":"SoK: Decentralized Finance (DeFi) Attacks","display_name":"SoK: Decentralized Finance (DeFi) Attacks","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4385080392","doi":"https://doi.org/10.1109/sp46215.2023.10179435"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179435","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179435","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058141712","display_name":"Liyi Zhou","orcid":"https://orcid.org/0000-0001-7181-9353"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Liyi Zhou","raw_affiliation_strings":["Imperial College London","Berkeley Center for Responsible, Decentralized Intelligence (RDI)"],"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]},{"raw_affiliation_string":"Berkeley Center for Responsible, Decentralized Intelligence (RDI)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071714089","display_name":"Xihan Xiong","orcid":null},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Xihan Xiong","raw_affiliation_strings":["Imperial College London"],"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091632041","display_name":"Jens Ernstberger","orcid":"https://orcid.org/0000-0003-1422-9247"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jens Ernstberger","raw_affiliation_strings":["Technical University of Munich","Berkeley Center for Responsible, Decentralized Intelligence (RDI)"],"affiliations":[{"raw_affiliation_string":"Technical University of Munich","institution_ids":["https://openalex.org/I62916508"]},{"raw_affiliation_string":"Berkeley Center for Responsible, Decentralized Intelligence (RDI)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028030636","display_name":"Stefanos Chaliasos","orcid":"https://orcid.org/0000-0001-5414-4120"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Stefanos Chaliasos","raw_affiliation_strings":["Imperial College London"],"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100424172","display_name":"Zhipeng Wang","orcid":"https://orcid.org/0000-0003-1089-1583"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Zhipeng Wang","raw_affiliation_strings":["Imperial College London"],"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100423421","display_name":"Yu Wang","orcid":"https://orcid.org/0000-0001-7288-9150"},"institutions":[{"id":"https://openalex.org/I204512498","display_name":"University of Macau","ror":"https://ror.org/01r4q9n85","country_code":"MO","type":"education","lineage":["https://openalex.org/I204512498"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Ye Wang","raw_affiliation_strings":["University of Macau"],"affiliations":[{"raw_affiliation_string":"University of Macau","institution_ids":["https://openalex.org/I204512498"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047509636","display_name":"Kaihua Qin","orcid":"https://orcid.org/0000-0003-2190-3623"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Kaihua Qin","raw_affiliation_strings":["Imperial College London","Berkeley Center for Responsible, Decentralized Intelligence (RDI)"],"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]},{"raw_affiliation_string":"Berkeley Center for Responsible, Decentralized Intelligence (RDI)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078339613","display_name":"Roger Wattenhofer","orcid":"https://orcid.org/0000-0002-6339-3134"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Roger Wattenhofer","raw_affiliation_strings":["ETH Zurich"],"affiliations":[{"raw_affiliation_string":"ETH Zurich","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019426968","display_name":"Dawn Song","orcid":"https://orcid.org/0000-0001-9745-6802"},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dawn Song","raw_affiliation_strings":["University of California,Berkeley","Berkeley Center for Responsible, Decentralized Intelligence (RDI)","University of California, Berkeley"],"affiliations":[{"raw_affiliation_string":"University of California,Berkeley","institution_ids":["https://openalex.org/I95457486"]},{"raw_affiliation_string":"Berkeley Center for Responsible, Decentralized Intelligence (RDI)","institution_ids":[]},{"raw_affiliation_string":"University of California, Berkeley","institution_ids":["https://openalex.org/I95457486"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063253761","display_name":"Arthur Gervais","orcid":"https://orcid.org/0000-0002-3565-3410"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Arthur Gervais","raw_affiliation_strings":["University College London","Berkeley Center for Responsible, Decentralized Intelligence (RDI)"],"affiliations":[{"raw_affiliation_string":"University College London","institution_ids":["https://openalex.org/I45129253"]},{"raw_affiliation_string":"Berkeley Center for Responsible, Decentralized Intelligence (RDI)","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":5,"institutions_distinct_count":10,"corresponding_author_ids":["https://openalex.org/A5058141712"],"corresponding_institution_ids":["https://openalex.org/I47508984"],"apc_list":null,"apc_paid":null,"fwci":71.3822,"has_fulltext":false,"cited_by_count":157,"citation_normalized_percentile":{"value":0.99957241,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"2444","last_page":"2461"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11838","display_name":"Crime, Illicit Activities, and Governance","score":0.9850000143051147,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11995","display_name":"FinTech, Crowdfunding, Digital Finance","score":0.9764000177383423,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.46183347702026367},{"id":"https://openalex.org/keywords/finance","display_name":"Finance","score":0.42049431800842285},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.37378138303756714},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3319835662841797}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.46183347702026367},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.42049431800842285},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.37378138303756714},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3319835662841797}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sp46215.2023.10179435","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179435","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:publications/f8c1251c-8207-444b-8a8c-c47d02e20739","is_oa":false,"landing_page_url":"https://research.manchester.ac.uk/en/publications/f8c1251c-8207-444b-8a8c-c47d02e20739","pdf_url":null,"source":{"id":"https://openalex.org/S4306400662","display_name":"Research Explorer (The University of Manchester)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I28407311","host_organization_name":"University of Manchester","host_organization_lineage":["https://openalex.org/I28407311"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Zhou, L, Xiong, X, Ernstberger, J, Chaliasos, S, Wang, Z, Wang, Y, Qin, K, Wattenhofer, R, Song, D & Gervais, A 2023, SoK: Decentralized Finance (DeFi) Attacks. in 2023 IEEE Symposium on Security and Privacy (SP). pp. 2444-2461. https://doi.org/10.1109/sp46215.2023.10179435","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":196,"referenced_works":["https://openalex.org/W1454642304","https://openalex.org/W1590810061","https://openalex.org/W1593203335","https://openalex.org/W1608836379","https://openalex.org/W1815596065","https://openalex.org/W1912065300","https://openalex.org/W1987445317","https://openalex.org/W2006982448","https://openalex.org/W2022932831","https://openalex.org/W2024650319","https://openalex.org/W2030076260","https://openalex.org/W2033082111","https://openalex.org/W2040046350","https://openalex.org/W2058897176","https://openalex.org/W2067554274","https://openalex.org/W2092373714","https://openalex.org/W2101832700","https://openalex.org/W2109943392","https://openalex.org/W2111742571","https://openalex.org/W2118338381","https://openalex.org/W2121805588","https://openalex.org/W2128698639","https://openalex.org/W2135655476","https://openalex.org/W2149608872","https://openalex.org/W2157532207","https://openalex.org/W2298313545","https://openalex.org/W2528982141","https://openalex.org/W2535104337","https://openalex.org/W2536325433","https://openalex.org/W2539190473","https://openalex.org/W2598139937","https://openalex.org/W2604844934","https://openalex.org/W2743496573","https://openalex.org/W2743811297","https://openalex.org/W2771228761","https://openalex.org/W2784954700","https://openalex.org/W2790202156","https://openalex.org/W2794533297","https://openalex.org/W2794657757","https://openalex.org/W2794929715","https://openalex.org/W2804390587","https://openalex.org/W2805052744","https://openalex.org/W2846896781","https://openalex.org/W2886706106","https://openalex.org/W2888393465","https://openalex.org/W2890364458","https://openalex.org/W2890849264","https://openalex.org/W2897676665","https://openalex.org/W2902373132","https://openalex.org/W2902629989","https://openalex.org/W2944812228","https://openalex.org/W2945055388","https://openalex.org/W2945111072","https://openalex.org/W2954845633","https://openalex.org/W2955447707","https://openalex.org/W2955838977","https://openalex.org/W2963465913","https://openalex.org/W2963610883","https://openalex.org/W2964144608","https://openalex.org/W2974835633","https://openalex.org/W2978032083","https://openalex.org/W2981495462","https://openalex.org/W2985495886","https://openalex.org/W2987160260","https://openalex.org/W2990403016","https://openalex.org/W3001458527","https://openalex.org/W3007129533","https://openalex.org/W3007951509","https://openalex.org/W3008357810","https://openalex.org/W3009153228","https://openalex.org/W3015325345","https://openalex.org/W3015405072","https://openalex.org/W3016124762","https://openalex.org/W3016155638","https://openalex.org/W3021730278","https://openalex.org/W3033309818","https://openalex.org/W3033535371","https://openalex.org/W3034136313","https://openalex.org/W3034459010","https://openalex.org/W3042795469","https://openalex.org/W3043060424","https://openalex.org/W3043572547","https://openalex.org/W3046493130","https://openalex.org/W3084421431","https://openalex.org/W3095431539","https://openalex.org/W3095660977","https://openalex.org/W3095983164","https://openalex.org/W3100733828","https://openalex.org/W3109716606","https://openalex.org/W3120405143","https://openalex.org/W3129190210","https://openalex.org/W3134196592","https://openalex.org/W3137707325","https://openalex.org/W3138939503","https://openalex.org/W3139010521","https://openalex.org/W3144928030","https://openalex.org/W3151748982","https://openalex.org/W3152829963","https://openalex.org/W3153398259","https://openalex.org/W3155016995","https://openalex.org/W3155602733","https://openalex.org/W3155854917","https://openalex.org/W3156428445","https://openalex.org/W3156588337","https://openalex.org/W3159942444","https://openalex.org/W3160913616","https://openalex.org/W3162904859","https://openalex.org/W3163257481","https://openalex.org/W3163329073","https://openalex.org/W3168476303","https://openalex.org/W3176389077","https://openalex.org/W3177814352","https://openalex.org/W3194076087","https://openalex.org/W3196161392","https://openalex.org/W3199416722","https://openalex.org/W3211314335","https://openalex.org/W3211992711","https://openalex.org/W3212407868","https://openalex.org/W3213512407","https://openalex.org/W3214441905","https://openalex.org/W3214460869","https://openalex.org/W3215947504","https://openalex.org/W4205553605","https://openalex.org/W4205596332","https://openalex.org/W4205689130","https://openalex.org/W4212781601","https://openalex.org/W4214591981","https://openalex.org/W4220884837","https://openalex.org/W4221162551","https://openalex.org/W4225117271","https://openalex.org/W4230637740","https://openalex.org/W4231373507","https://openalex.org/W4233276628","https://openalex.org/W4234806525","https://openalex.org/W4237121782","https://openalex.org/W4249128071","https://openalex.org/W4249282491","https://openalex.org/W4251709753","https://openalex.org/W4252501693","https://openalex.org/W4280596911","https://openalex.org/W4283733641","https://openalex.org/W4287203512","https://openalex.org/W4288057718","https://openalex.org/W4288079492","https://openalex.org/W4288257480","https://openalex.org/W4289548059","https://openalex.org/W4301352023","https://openalex.org/W4311777171","https://openalex.org/W4312037473","https://openalex.org/W4318570447","https://openalex.org/W4321473396","https://openalex.org/W4367047212","https://openalex.org/W4385008969","https://openalex.org/W4388858825","https://openalex.org/W4389199614","https://openalex.org/W4389312529","https://openalex.org/W6635775228","https://openalex.org/W6697318023","https://openalex.org/W6725533135","https://openalex.org/W6746022775","https://openalex.org/W6747469341","https://openalex.org/W6749683307","https://openalex.org/W6749839489","https://openalex.org/W6751056134","https://openalex.org/W6753628087","https://openalex.org/W6753800069","https://openalex.org/W6754374649","https://openalex.org/W6754519360","https://openalex.org/W6756256420","https://openalex.org/W6757100236","https://openalex.org/W6759458195","https://openalex.org/W6762703636","https://openalex.org/W6762990939","https://openalex.org/W6767115310","https://openalex.org/W6769278921","https://openalex.org/W6775382685","https://openalex.org/W6776775275","https://openalex.org/W6780194882","https://openalex.org/W6781619225","https://openalex.org/W6781985859","https://openalex.org/W6784248342","https://openalex.org/W6788814308","https://openalex.org/W6789159327","https://openalex.org/W6790909028","https://openalex.org/W6793285265","https://openalex.org/W6793954727","https://openalex.org/W6794867450","https://openalex.org/W6794891352","https://openalex.org/W6795453372","https://openalex.org/W6796637867","https://openalex.org/W6796894556","https://openalex.org/W6797908815","https://openalex.org/W6800138018","https://openalex.org/W6809952931","https://openalex.org/W6850034369","https://openalex.org/W6851134957"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Within":[0],"just":[1],"four":[2],"years,":[3],"the":[4,67,138,160,182,212],"blockchain-based":[5],"Decentralized":[6],"Finance":[7],"(DeFi)":[8],"ecosystem":[9],"has":[10],"accumulated":[11],"a":[12,49,102,189],"peak":[13],"total":[14,50],"value":[15],"locked":[16],"(TVL)":[17],"of":[18,52,181,211],"more":[19],"than":[20],"253":[21],"billion":[22,56],"USD.":[23],"This":[24],"surge":[25],"in":[26],"DeFi\u2019s":[27],"popularity":[28],"has,":[29],"unfortunately,":[30],"been":[31],"accompanied":[32],"by":[33,218],"many":[34],"impactful":[35],"incidents.":[36,129],"According":[37],"to":[38,62,94,106],"our":[39,154],"data,":[40],"users,":[41],"liquidity":[42],"providers,":[43],"speculators,":[44],"and":[45,70,83,109,116,126,137,150,167,175,207],"protocol":[46],"operators":[47],"suffered":[48],"loss":[51],"at":[53,200],"least":[54,201],"3.24":[55],"USD":[57],"from":[58,91],"Apr":[59,63],"30,":[60,64],"2018":[61],"2022.":[65],"Given":[66],"blockchain\u2019s":[68],"transparency":[69],"increasing":[71],"incident":[72,164],"frequency,":[73],"two":[74,161],"questions":[75],"arise:":[76],"How":[77,87],"can":[78,88,199],"we":[79,89,100],"systematically":[80,107],"measure,":[81],"evaluate,":[82],"compare":[84,110],"DeFi":[85,96,111],"incidents?":[86],"learn":[90],"past":[92],"attacks":[93,115,183],"strengthen":[95],"security?In":[97],"this":[98],"paper,":[99],"introduce":[101],"common":[103],"reference":[104],"frame":[105,192],"evaluate":[108],"incidents,":[112],"including":[113],"both":[114],"accidents.":[117],"We":[118,170],"investigate":[119,172],"77":[120],"academic":[121,144],"papers,":[122],"30":[123],"audit":[124],"reports,":[125],"181":[127],"real-world":[128],"Our":[130],"data":[131,155],"reveals":[132],"several":[133],"gaps":[134],"between":[135],"academia":[136],"practitioners\u2019":[139],"community.":[140],"For":[141],"example,":[142],"few":[143],"papers":[145],"address":[146],"\"price":[147],"oracle":[148],"attacks\"":[149],"\"permissonless":[151],"interactions\",":[152],"while":[153],"suggests":[156],"that":[157],"they":[158],"are":[159,184],"most":[162],"frequent":[163],"types":[165],"(15%":[166],"10.5%":[168],"correspondingly).":[169],"also":[171],"potential":[173],"defenses,":[174],"find":[176],"that:":[177],"(i)":[178],"103":[179],"(56%)":[180],"not":[185],"executed":[186],"atomically,":[187],"granting":[188],"rescue":[190],"time":[191],"for":[193],"defenders;":[194],"(ii)":[195],"bytecode":[196],"similarity":[197],"analysis":[198],"detect":[202],"31":[203],"vulnerable/23":[204],"adversarial":[205],"contracts;":[206],"(iii)":[208],"33":[209],"(15.3%)":[210],"adversaries":[213],"leak":[214],"potentially":[215],"identifiable":[216],"information":[217],"interacting":[219],"with":[220],"centralized":[221],"exchanges.":[222]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":73},{"year":2024,"cited_by_count":53},{"year":2023,"cited_by_count":24},{"year":2022,"cited_by_count":1}],"updated_date":"2026-03-27T14:29:43.386196","created_date":"2025-10-10T00:00:00"}
