This research aims to explore the security risks posed by compatibility and protocol differences in smart contract migration, using the migration of smart contracts from Ethereum to Arbitrum as a case study. Through literature review, online data collection, expert participation, and analysis of smart contract vulnerability cases, this paper conducts an in-depth research of the differences between Ethereum and Arbitrum in areas such as Messaging, Block Properties, Contract Address Alias, and Gas Fees. The research findings indicate the presence of certain security issues during the migration process from Ethereum to Arbitrum, such as abnormal operation of the sequencer resulting in outdated off-chain data retrieval, time-based logical errors, failed permission checks, DOS attacks, and gas loss due to L1-to-L2 transaction failures. To address these security issues, this paper proposes corresponding solutions and recommendations to ensure the security and meet the requirements of the migration process. Additionally, this research emphasizes the continued attention and support for the security issues of smart contract migration through the case of smart contract migration from Ethereum to Arbitrum. It is worth noting that this research is the first in-depth research of smart contract security migration from Ethereum to Arbitrum.
翻译:本研究旨在以智能合约从以太坊迁移至Arbitrum为案例,探讨兼容性与协议差异在智能合约迁移过程中引发的安全风险。通过文献综述、在线数据收集、专家参与以及智能合约漏洞案例分析,本文深入研究了以太坊与Arbitrum在消息传递(Messaging)、区块属性(Block Properties)、合约地址别名(Contract Address Alias)及Gas费用(Gas Fees)等方面的差异。研究结果表明,从以太坊迁移至Arbitrum的过程中存在若干安全问题,例如排序器异常运行导致链下数据检索过时、基于时间的逻辑错误、权限检查失败、拒绝服务(DOS)攻击以及L1到L2交易失败导致的Gas损失。针对这些安全问题,本文提出了相应的解决方案与建议,以确保迁移过程的安全性与需求满足。此外,本研究通过以太坊至Arbitrum智能合约迁移的案例,强调了对智能合约迁移安全问题持续关注与支持的重要性。值得注意的是,本研究首次对从以太坊到Arbitrum的智能合约安全迁移进行了深入探讨。