https://github.com/IC3Hydra/Hydra
Framework for cryptoeconomic contract security, decentralized security bounties. Live on Ethereum.
https://github.com/IC3Hydra/Hydra
bounties ethereum security smartcontracts
Last synced: about 1 month ago
JSON representation
Framework for cryptoeconomic contract security, decentralized security bounties. Live on Ethereum.
- Host: GitHub
- URL: https://github.com/IC3Hydra/Hydra
- Owner: IC3Hydra
- License: mit
- Created: 2017-11-02T13:58:32.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2018-03-02T15:03:45.000Z (about 7 years ago)
- Last Synced: 2024-10-27T22:27:51.986Z (6 months ago)
- Topics: bounties, ethereum, security, smartcontracts
- Language: Haskell
- Homepage: https://thehydra.io/
- Size: 333 KB
- Stars: 73
- Watchers: 6
- Forks: 5
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
- ultimate-defi-research-base - Hydra - Framework for cryptoeconomic contract security, decentralised security bounties (Developer Tools)
- awesome-web3 - Hydra - Framework for cryptoeconomic contract security, decentralised security bounties. (Software Development / Risk Management)
- DeFi-Developer-Road-Map - Hydra - Framework for cryptoeconomic contract security, decentralised security bounties (Roadmap)
README
# The Hydra ALPHA
[](https://travis-ci.org/IC3Hydra/Hydra)
The Hydra is an [Ethereum](https://ethereum.org) contract development framework for:
- decentralized security and bug bounties
- rigorous cryptoeconomic security guarantees
- mitigating programmer and compiler error
Hydra introduces a concept called an **exploit gap**, a way for developers to turn
crippling exploits into safe, decentralized bounty payments using a new form of
fault tolerance called **N-of-N Version Programming (NNVP)** (not to be confused
with N-Version Programming).
More general information about the Hydra is available [on the website](https://thehydra.io/)
and [in the paper](https://thehydra.io/paper.pdf).
**[Warning]: The Hydra framework is an early research prototype, and is still
undergoing the extensive testing, validation, and documentation processes required
to recommend it for production. Please help us by trying to break the below
bounties, and stay tuned for further release announcements!**
## Requirements and Install
The Hydra project requires Python3.6+. After installing Python, run
``python3.6 -m pip install -r requirements.txt`` to install all Python
dependencies. Haskell and Haskell Stack are also required for the instrumenter;
on Debian-based distros, these can be installed with ``apt-get install haskell-stack``
and tested by running ``stack test`` in the ``hydra/instrumenter`` directory.
## Deploying a Production Bounty
An example of a production bounty deployment is in ``utils/rpc_deployment.py``.
We plan on exposing a cleaner API for developers to deploy bounties soon. Currently,
an example deployment script looks something like this:
```
# Point to all heads
heads = ['examples/ERC20/heads/' + file
for file in ('ERC20_florian.se', 'ERC20_florian.sol', 'ERC20_lorenz.sol', 'ERC20_phil.vy')]
# Change these
GETH_DATADIR = '/home/example/geth_mainnet'
creator_addr = "0x12345"
# Create a Hydra contract and deploy
d = RPCHydraDeployment(creator_addr, "hydra/metacontract/Hydra.sol", heads, GETH_DATADIR)
contracts = d.build_and_deploy(include_constructor=False, debug=False)
mc_abi = d.abi_object(heads[1])
mc_addr = '0x' + utils.encode_hex(contracts[0][0])
```
To use the testnet, simply pass a corresponding IPC to the node. Note that deployment
is currently gas-heavy and uses a liberal gas price of 5 gwei.
## Running Tests
How to run tests:
To run all tests, simply do ``python3.6 run_all_tests.py`` in the root of this repository.
### Testing specific modules
- MetaContract:
Test the Meta Contract logic:
`python3 -m hydra.test.test_hydra`
- ERC20:
Run tests against each head individually:
Phil's test suite:
`python3 -m examples.ERC20.test.erc20_tests_1`
Florian's test suite:
`python3 -m examples.ERC20.test.erc20_tests_2`
Run both Phil's and Florian's test suites against the Hydra ERC20 contract:
`python3 -m examples.ERC20.test.erc20_hydra_test`
- MontyHall:
Run tests against each head individually:
`python3 -m examples.MontyHall.test.mh_head_test`
Differential testing on the heads:
`python3 -m examples.MontyHall.test.differential_test`
Run tests against the Hydra MontyHall contract:
`python3 -m examples.MontyHall.test.mh_hydra_test`
- Simple ERC20 and MontyHall
[Our paper](https://thehydra.io/paper.pdf) describes a simplified Hydra
framework without the automatic head instrumentation. Run tests against the
Hydra ERC20 contract:
`python3 -m examples.SimpleERC20.test.erc20_hydra_test`
Run tests against the Hydra MontyHall contract:
`python3 -m examples.SimpleMontyHall.test.mh_hydra_test`
# Acknowledgements
This material is based upon work supported by the National Science
Foundation Graduate Research Fellowship under Grant No. .
We would also like to thank NSF CNS-1330599, CNS-1514163, CNS-1564102,
and CNS-1704615, ARL W911NF-16-1-0145, and IC3 Industry Partners.
Any opinion, findings, and conclusions or recommendations expressed in
this material are those of the authors(s) and do not necessarily
reflect the views of the National Science Foundation.