Obsidian

Abstract

Blockchain platforms are coming into use for processing critical transactions among participants who have not established mutual trust. Many blockchains are programmable, supporting smart contracts , which maintain persistent state and support transactions that transform the state. Unfortunately, bugs in many smart contracts have been exploited by hackers. Obsidian is a novel programming language with a type system that enables static detection of bugs that are common in smart contracts today. Obsidian is based on a core calculus, Silica, for which we proved type soundness. Obsidian uses typestate to detect improper state manipulation and uses linear types to detect abuse of assets. We integrated a permissions system that encodes a notion of ownership to allow for safe, flexible aliasing. We describe two case studies that evaluate Obsidian’s applicability to the domains of parametric insurance and supply chain management, finding that Obsidian’s type system facilitates reasoning about high-level states and ownership of resources. We compared our Obsidian implementation to a Solidity implementation, observing that the Solidity implementation requires much boilerplate checking and tracking of state, whereas Obsidian does this work statically.

Document Details

Document Type
Pub Defense Publication
Publication Date
Sep 30, 2020
Source ID
10.1145/3417516

Entities

People

  • Brad A. Myers
  • Jonathan Erik Aldrich
  • Joshua Sunshine
  • Michael Coblenz
  • Miles Baker
  • Paulette Koronkevich
  • Reed Oei
  • Tyler Etzel
  • Yannick Bloem

Organizations

  • Apple Inc.
  • Carnegie Mellon University
  • National Science Foundation
  • United States Department of Defense
  • University of British Columbia
  • University of Illinois Urbana–Champaign

Tags

Fields of Study

  • Computer science

Readers

  • Cybersecurity.
  • Database Systems and Applications