论文标题
一项关于以太坊私人交易及其安全含义的实证研究
An Empirical Study on Ethereum Private Transactions and the Security Implications
论文作者
论文摘要
最近,以太坊上的分散财务(DEFI)平台正在蓬勃发展,许多交易者正试图利用基于公共Mempool信息的信息来发起领先的攻击并提取矿工可提取价值(MEVS),以最大程度地利用其利益。为了保护最终用户免受损害并将交易隐藏到孟买,私人交易,这是一种直接发送给矿工的特殊类型的交易。私人交易很有可能被包装到一个区块的前部位置并被目标矿工添加到区块链的情况下,而无需通过公共Mempool,从而降低了被恶意实体攻击的风险。 尽管有良好的意图发明了私人交易,但由于其隐秘性质,攻击者也使用了私人交易来发动攻击,这对以太坊生态系统产生了负面影响。但是,现有工作仅在研究MEV时涉及私人交易,而对私人交易的系统研究仍然缺失。为了填补这一空白并描绘了私人交易的完整图片,我们朝着调查以太坊的私人交易迈出的第一步。特别是,我们收集大规模的私人交易数据集,并对其特征,交易成本和矿工利润以及安全影响进行分析。这项工作为私人交易的不同方面提供了深入的见解。
Recently, Decentralized Finance (DeFi) platforms on Ethereum are booming, and numerous traders are trying to capitalize on the opportunity for maximizing their benefits by launching front-running attacks and extracting Miner Extractable Values (MEVs) based on information in the public mempool. To protect end users from being harmed and hide transactions from the mempool, private transactions, a special type of transactions that are sent directly to miners, were invented. Private transactions have a high probability of being packed to the front positions of a block and being added to the blockchain by the target miner, without going through the public mempool, thus reducing the risk of being attacked by malicious entities. Despite the good intention of inventing private transactions, due to their stealthy nature, private transactions have also been used by attackers to launch attacks, which has a negative impact on the Ethereum ecosystem. However, existing works only touch upon private transactions as by-products when studying MEV, while a systematic study on private transactions is still missing. To fill this gap and paint a complete picture of private transactions, we take the first step towards investigating the private transactions on Ethereum. In particular, we collect large-scale private transaction datasets and perform analysis on their characteristics, transaction costs and miner profits, as well as security impacts. This work provides deep insights on different aspects of private transactions.