Decentralised Finance (DeFi) protocols are usually built by composing a variety of smart contracts. Although composability is a key driver of DeFi innovation, it also introduces security risks: adversaries may exploit interactions between newly deployed contracts and the existing blockchain state to cause economic losses. We introduce a formal security notion for DeFi composability, called MEV non-interference, which requires that interactions with the existing blockchain state do not increase the Maximal Extractable Value (MEV) obtainable from a set of newly deployed contracts. To formalise this notion, we define local MEV, a new measure of economic attacks that quantifies the losses incurred by a given set of victim contracts. We study MEV non-interference under two adversarial models, corresponding to bounded and unbounded adversarial wealth, and establish sufficient conditions and locality principles that enable modular reasoning about secure composability. We apply our framework to representative DeFi compositions including exchanges, automated market makers, options, lending pools, routers, and arbitrage contracts, and show that it distinguishes secure compositions from vulnerable ones. Our results provide a formal foundation for analysing the economic security of DeFi systems built through smart contract composition.
A formal framework for the economic security of DeFi compositions
Bartoletti M.
;Marchesin R.;
2027-01-01
Abstract
Decentralised Finance (DeFi) protocols are usually built by composing a variety of smart contracts. Although composability is a key driver of DeFi innovation, it also introduces security risks: adversaries may exploit interactions between newly deployed contracts and the existing blockchain state to cause economic losses. We introduce a formal security notion for DeFi composability, called MEV non-interference, which requires that interactions with the existing blockchain state do not increase the Maximal Extractable Value (MEV) obtainable from a set of newly deployed contracts. To formalise this notion, we define local MEV, a new measure of economic attacks that quantifies the losses incurred by a given set of victim contracts. We study MEV non-interference under two adversarial models, corresponding to bounded and unbounded adversarial wealth, and establish sufficient conditions and locality principles that enable modular reasoning about secure composability. We apply our framework to representative DeFi compositions including exchanges, automated market makers, options, lending pools, routers, and arbitrage contracts, and show that it distinguishes secure compositions from vulnerable ones. Our results provide a formal foundation for analysing the economic security of DeFi systems built through smart contract composition.| File | Dimensione | Formato | |
|---|---|---|---|
|
1-s2.0-S2352220826000635-main.pdf
accesso aperto
Descrizione: articolo online
Tipologia:
versione editoriale (VoR)
Dimensione
10.11 MB
Formato
Adobe PDF
|
10.11 MB | Adobe PDF | Visualizza/Apri |
I metadati presenti in IRIS UNICA sono rilasciati con licenza Creative Commons CC0 1.0 Universal, mentre i file delle pubblicazioni sono protetti da diritto d'autore, salvo diversa indicazione.



