Blockchain and decentralized finance security: incentives, attacks, and mitigations
File(s)
Author(s)
Qin, Kaihua
Type
Thesis
Abstract
The financial domain has experienced transformative changes with the transition from traditional centralized systems to the innovations brought by blockchain technology. Decentralized finance (DeFi), rooted in blockchain, promises to redefine financial interactions but also introduces unique vulnerabilities. This thesis delves into the security landscape of blockchain and DeFi, examining it through the lenses of incentives, attacks, and mitigations.
Within this thesis, we study the lending and borrowing platforms within the Ethereum DeFi ecosystem. Our investigation uncovers inefficiencies in prevalent liquidation mechanisms, highlighting the potential risks they pose to borrowers and the broader ecosystem. We also delve into the practical implications of miner extractable value (MEV) on blockchain consensus security, shedding light on how these activities can potentially compromise the stability of the network. Delving further, we assess the implications of transaction atomicity and flash loans. These mechanisms, while innovative, can be especially perilous when leveraged to exploit system vulnerabilities. The inherent transparency of blockchain, a feature that fosters trust and openness, paradoxically also paves the way for adversarial strategies. One such strategy we investigate in depth is the blockchain imitation attack. This strategy, while primarily malicious in intent, offers a silver lining: it can be repurposed as a defensive solution to prevent DeFi intrusions, safeguarding users and their assets. Additionally, we propose an innovative approach designed to mitigate the adverse effects of traditional DeFi liquidations.
In conclusion, as DeFi continues to gain momentum and reshape the financial landscape, understanding and addressing its unique challenges is paramount. This thesis provides a holistic view of the DeFi ecosystem's intricacies, aiming to chart a path towards the creation of more secure, transparent, and stable decentralized financial systems.
Within this thesis, we study the lending and borrowing platforms within the Ethereum DeFi ecosystem. Our investigation uncovers inefficiencies in prevalent liquidation mechanisms, highlighting the potential risks they pose to borrowers and the broader ecosystem. We also delve into the practical implications of miner extractable value (MEV) on blockchain consensus security, shedding light on how these activities can potentially compromise the stability of the network. Delving further, we assess the implications of transaction atomicity and flash loans. These mechanisms, while innovative, can be especially perilous when leveraged to exploit system vulnerabilities. The inherent transparency of blockchain, a feature that fosters trust and openness, paradoxically also paves the way for adversarial strategies. One such strategy we investigate in depth is the blockchain imitation attack. This strategy, while primarily malicious in intent, offers a silver lining: it can be repurposed as a defensive solution to prevent DeFi intrusions, safeguarding users and their assets. Additionally, we propose an innovative approach designed to mitigate the adverse effects of traditional DeFi liquidations.
In conclusion, as DeFi continues to gain momentum and reshape the financial landscape, understanding and addressing its unique challenges is paramount. This thesis provides a holistic view of the DeFi ecosystem's intricacies, aiming to chart a path towards the creation of more secure, transparent, and stable decentralized financial systems.
Version
Open Access
Date Issued
2023-09
Date Awarded
2024-03
Copyright Statement
Creative Commons Attribution NonCommercial NoDerivatives Licence
Advisor
Gervais, Arthur
Wu, Nicolas
Publisher Department
Department of Computing
Publisher Institution
Imperial College London
Qualification Level
Doctoral
Qualification Name
Doctor of Philosophy (PhD)