论文标题
并非如此不可变：智能合约对以太坊的提高性
Not so immutable: Upgradeability of Smart Contracts on Ethereum
论文作者
论文摘要
在合理的情况下，将部署到以太坊这样的区块链系统的智能合约预计将是不变且防篡改的。这既是一个功能（促进完整性和透明度），也是一个错误（防止安全补丁和功能更新）。现代智能合约使用软件技巧来启用升级性，提出了有关如何实现升级性以及有权进行更改的研究问题。在本文中，我们总结并评估了六种升级性模式。我们开发了一个测量框架，以查找使用某些突出升级模式的以太坊上有多少可升级合同。我们发现140万份代理合同，其中8,225个是独特的可升级代理合同。我们还衡量了他们如何实施对升级性的访问控制：约50％由单个外部地址（EOA）控制，约有14％的人受多签名钱包的控制，其中有限数量的人可以改变合同的整个逻辑。
A smart contract that is deployed to a blockchain system like Ethereum is, under reasonable circumstances, expected to be immutable and tamper-proof. This is both a feature (promoting integrity and transparency) and a bug (preventing security patches and feature updates). Modern smart contracts use software tricks to enable upgradeability, raising the research questions of how upgradeability is achieved and who is authorized to make changes. In this paper, we summarize and evaluate six upgradeability patterns. We develop a measurement framework for finding how many upgradeable contracts are on Ethereum that use certain prominent upgrade patters. We find 1.4 million proxy contracts which 8,225 of them are unique upgradeable proxy contracts. We also measure how they implement access control over their upgradeability: about 50% are controlled by a single Externally Owned Address (EOA), and about 14% are controlled by multi-signature wallets in which a limited number of persons can change the whole logic of the contract.
