research-article

Towards A First Step to Understand Flash Loan and Its Applications in DeFi Ecosystem

Authors:

Xingliang Yuan,

Kui RenAuthors Info & Claims

SBC '21: Proceedings of the Ninth International Workshop on Security in Blockchain and Cloud Computing

Pages 23 - 28

https://doi.org/10.1145/3457977.3460301

Published: 25 May 2021 Publication History

Abstract

Flash Loan, as an emerging service in the decentralized finance ecosystem, allows users to request a non-collateral loan. While providing convenience, it also enables attackers to launch malicious operations with a large amount of asset that they do not have. Though there exist spot media reports of attacks that leverage Flash Loan, there lacks a comprehensive understanding of existing Flash Loan services.

In this work, we take the first step to study the Flash Loan service provided by three popular platforms. Specifically, we first illustrate the interactions between Flash Loan providers and users. Then, we design three patterns to identify Flash Loan transactions. Based on the patterns, 76,303 transactions are determined. The evaluation results show that the Flash Loan services get more popular over time. At last, we present four Flash Loan applications with real-world examples and propose two potential research directions.

Supplementary Material

MP4 File (sbc2021_fp08.mp4)

presentation video

Download
23.58 MB

References

[1]

2015. ERC20 Token Standard. https://github.com/ethereum/EIPs/blob/master/EIPS/eip-20.md.

[2]

Aave. Last Accessed: Sep. 2020. Aave. aave.com.

[3]

Balancer. Last Accessed: Oct. 2020. Balancer Exchange. balancer.exchange.

[4]

bZx. Last Accessed: Sep. 2020. bZx. bzx.network.

[5]

Compound. Last Accessed: Oct. 2020. Compound. https://compound.finance/.

[6]

Philip Daian, Steven Goldfeder, Tyler Kell, Yunqi Li, Xueyuan Zhao, Iddo Bentov, Lorenz Breidenbach, and Ari Juels. 2019. Flash boys 2.0: Frontrunning, transaction reordering, and consensus instability in decentralized exchanges. arXiv preprint arXiv:1904.05234 (2019).

[7]

defipulse. Last Accessed: Sep. 2020. DEFI PULSE. https://www.defipulse.com/.

[8]

dYdX. Last Accessed: Sep. 2020. dYdX. dydx.exchange.

[9]

Shayan Eskandari, Seyedehmahsa Moosavi, and Jeremy Clark. 2019. Sok: Transparent dishonesty: front-running attacks on blockchain. In International Conference on Financial Cryptography and Data Security. Springer, 170--189.

[10]

Lewis Gudgeon, Daniel Perez, Dominik Harz, Arthur Gervais, and Benjamin Livshits. 2020. The Decentralized Financial Crisis: Attacking DeFi. arXiv preprint arXiv:2002.08099 (2020).

[11]

Josh Kamps and Bennett Kleinberg. 2018. To the moon: defining and detecting cryptocurrency pump-and-dumps. Crime Science, Vol. 7, 1 (2018), 18.

[12]

Bowen Liu and Pawel Szalachowski. 2020. A First Look into DeFi Oracles. arXiv preprint arXiv:2005.04377 (2020).

[13]

Maker. Last Accessed: Sep. 2020. DAI Token. etherscan.io/token/0x6b175474e89094c44da98b954eedeac495271d0f.

[14]

MakerDAO. Last Accessed: Oct. 2020. MakerDAO. makerdao.com.

[15]

Satoshi Nakamoto et al. 2008. Bitcoin: A peer-to-peer electronic cash system. (2008).

[16]

Kaihua Qin, Liyi Zhou, Benjamin Livshits, and Arthur Gervais. 2020. Attacking the DeFi Ecosystem with Flash Loans for Fun and Profit. arXiv preprint arXiv:2003.03810 (2020).

[17]

DeFi Saver. Last Accessed: Oct. 2020. DeFi Saver. defisaver.com.

[18]

Tether. Last Accessed: Jan. 2021. Tether: Fiat currencies on the Bitcoin blockchain. https://tether.to/wp-content/uploads/2016/06/TetherWhitePaper.pdf.

[19]

Uniswap. Last Accessed: Sep. 2020. Uniswap. uniswap.org.

[20]

Gavin Wood. 2014. Ethereum: A secure decentralised generalised transaction ledger. Ethereum project yellow paper, Vol. 151 (2014), 1--32.

[21]

Jiahua Xu and Benjamin Livshits. 2019. The anatomy of a cryptocurrency pump-and-dump scheme. In 28th USENIX Security Symposium (USENIX Security 19). 1609--1625.

Digital Library

[22]

Yearn.finance (YFI). Last Accessed: Sep. 2020. EMN Token. etherscan.io/token/0x8b31d4A56dD29d18C817ef0fA3990d30ECC5D89b.

[23]

Micah Zoltu. 2020. How to turn $20M into $340M in 15 seconds. https://medium.com/coinmonks/how-to-turn-20m-into-340m-in-15-seconds-48d161a42311.

Cited By

Wang CLi PZeng YFan XDastani MSichman JAlechina NDignum V(2024)Optimal Flash Loan Fee Function with Respect to Leverage StrategiesProceedings of the 23rd International Conference on Autonomous Agents and Multiagent Systems10.5555/3635637.3663050(1874-1882)Online publication date: 6-May-2024
https://dl.acm.org/doi/10.5555/3635637.3663050
Saravanakrishnan VNandhini MPalanivelu P(2024)DeFi's Transformative Influence on the Global Financial LandscapeDigital Technologies, Ethics, and Decentralization in the Digital Era10.4018/979-8-3693-1762-4.ch006(99-120)Online publication date: 8-Feb-2024
https://doi.org/10.4018/979-8-3693-1762-4.ch006
Al-Zubaidie MJebbar W(2024)Providing Security for Flash Loan System Using Cryptocurrency Wallets Supported by XSalsa20 in a Blockchain EnvironmentApplied Sciences10.3390/app1414636114:14(6361)Online publication date: 22-Jul-2024
https://doi.org/10.3390/app14146361
Show More Cited By

Index Terms

Towards A First Step to Understand Flash Loan and Its Applications in DeFi Ecosystem
1. Security and privacy

Recommendations

An empirical study of DeFi liquidations: incentives, risks, and instabilities
IMC '21: Proceedings of the 21st ACM Internet Measurement Conference

Financial speculators often seek to increase their potential gains with leverage. Debt is a popular form of leverage, and with over 39.88B USD of total value locked (TVL), the Decentralized Finance (DeFi) lending markets are thriving. Debts, however, ...
Optimal Flash Loan Fee Function with Respect to Leverage Strategies
AAMAS '24: Proceedings of the 23rd International Conference on Autonomous Agents and Multiagent Systems

We investigate two decentralized methods for leveraging assets: Firstly, investors recurrently commit their target assets as collateral to secure loans, subsequently reinvesting the borrowed funds in the same assets. Secondly, investors pledge their ...
Understanding Flash-Loan-based Wash Trading
AFT '22: Proceedings of the 4th ACM Conference on Advances in Financial Technologies

Flash Loan, a popular lending service in the decentralized finance (DeFi) ecosystem, allows users to borrow a large number of virtual assets without any collateral. It can be leveraged to support many financial activities (such as arbitrage, ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

cover image ACM Conferences

SBC '21: Proceedings of the Ninth International Workshop on Security in Blockchain and Cloud Computing

May 2021

40 pages

ISBN:9781450384056

DOI:10.1145/3457977

Program Chairs:
Jian Liu
Zhejiang University
,
Shweta Shinde
ETH Zurich

Copyright © 2021 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Sponsors

SIGSAC: ACM Special Interest Group on Security, Audit, and Control

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 25 May 2021

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Funding Sources

Leading Innovative and Entrepreneur Team Introduction Program of Zhejiang
Fundamental Research Funds for the Central Universities

Conference

ASIA CCS '21

Sponsor:

SIGSAC

ASIA CCS '21: ACM Asia Conference on Computer and Communications Security

June 7, 2021

Virtual Event, Hong Kong

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

48
Total Citations
View Citations
754
Total Downloads

Downloads (Last 12 months)140
Downloads (Last 6 weeks)10

Reflects downloads up to 19 Nov 2024

Other Metrics

View Author Metrics

Citations

Cited By

Wang CLi PZeng YFan XDastani MSichman JAlechina NDignum V(2024)Optimal Flash Loan Fee Function with Respect to Leverage StrategiesProceedings of the 23rd International Conference on Autonomous Agents and Multiagent Systems10.5555/3635637.3663050(1874-1882)Online publication date: 6-May-2024
https://dl.acm.org/doi/10.5555/3635637.3663050
Saravanakrishnan VNandhini MPalanivelu P(2024)DeFi's Transformative Influence on the Global Financial LandscapeDigital Technologies, Ethics, and Decentralization in the Digital Era10.4018/979-8-3693-1762-4.ch006(99-120)Online publication date: 8-Feb-2024
https://doi.org/10.4018/979-8-3693-1762-4.ch006
Al-Zubaidie MJebbar W(2024)Providing Security for Flash Loan System Using Cryptocurrency Wallets Supported by XSalsa20 in a Blockchain EnvironmentApplied Sciences10.3390/app1414636114:14(6361)Online publication date: 22-Jul-2024
https://doi.org/10.3390/app14146361
Si JSharma TWang K(2024)Understanding User-Perceived Security Risks and Mitigation Strategies in the Web3 EcosystemProceedings of the 2024 CHI Conference on Human Factors in Computing Systems10.1145/3613904.3642291(1-22)Online publication date: 11-May-2024
https://dl.acm.org/doi/10.1145/3613904.3642291
Li WLi XZhang YLi ZChua TNgo CKumar RLauw HKa-Wei Lee R(2024)DeFiTail: DeFi Protocol Inspection through Cross-Contract Execution AnalysisCompanion Proceedings of the ACM Web Conference 202410.1145/3589335.3651488(786-789)Online publication date: 13-May-2024
https://dl.acm.org/doi/10.1145/3589335.3651488
Bodo Bde Filippi P(2024) Trust in context: The impact of regulation on blockchain and DeFi Regulation & Governance10.1111/rego.12637Online publication date: 6-Oct-2024
https://doi.org/10.1111/rego.12637
Lin DWu JHuang TLin KZheng Z(2024)Who is Who on Ethereum? Account Labeling Using Heterophilic Graph Convolutional NetworkIEEE Transactions on Systems, Man, and Cybernetics: Systems10.1109/TSMC.2023.332952054:3(1541-1553)Online publication date: Mar-2024
https://doi.org/10.1109/TSMC.2023.3329520
Wang BYuan XDuan LMa HWang BSu CWang W(2024)DeFiScanner: Spotting DeFi Attacks Exploiting Logic Vulnerabilities on BlockchainIEEE Transactions on Computational Social Systems10.1109/TCSS.2022.322812211:2(1577-1588)Online publication date: Apr-2024
https://doi.org/10.1109/TCSS.2022.3228122
Iqbal MChiarelli AMatulevičius R(2024)Bridging Two Worlds: Framework for Secure Implementation of Blockchain Oracles2024 IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C)10.1109/SANER-C62648.2024.00008(12-22)Online publication date: 12-Mar-2024
https://doi.org/10.1109/SANER-C62648.2024.00008
Upadhya JUpadhyay KSainju APoudel SHasan MPoudel KRanganathan J(2024)QuadraCode AI: Smart Contract Vulnerability Detection with Multimodal Representation2024 33rd International Conference on Computer Communications and Networks (ICCCN)10.1109/ICCCN61486.2024.10637655(1-9)Online publication date: 29-Jul-2024
https://doi.org/10.1109/ICCCN61486.2024.10637655
Show More Cited By

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Media

Figures

Other

Tables

View Table of Contents