Title: Typosquatting 3.0: Characterizing Squatting in Blockchain Naming Systems Show Chinese title

Title: Typosquatting 3.0：区块链命名系统中的劫持行为分析

Abstract: A Blockchain Name System (BNS) simplifies the process of sending cryptocurrencies by replacing complex cryptographic recipient addresses with human-readable names, making the transactions more convenient. Unfortunately, these names can be susceptible to typosquatting attacks, where attackers can take advantage of user typos by registering typographically similar BNS names. Unsuspecting users may accidentally mistype or misinterpret the intended name, resulting in an irreversible transfer of funds to an attacker's address instead of the intended recipient. In this work, we present the first large-scale, intra-BNS typosquatting study. To understand the prevalence of typosquatting within BNSs, we study three different services (Ethereum Name Service, Unstoppable Domains, and ADAHandles) spanning three blockchains (Ethereum, Polygon, and Cardano), collecting a total of 4.9M BNS names and 200M transactions-the largest dataset for BNSs to date. We describe the challenges involved in conducting name-squatting studies on these alternative naming systems, and then perform an in-depth quantitative analysis of our dataset. We find that typosquatters are indeed active on BNSs, registering more malicious domains with each passing year. Our analysis reveals that users have sent thousands of transactions to squatters and that squatters target both globally popular BNS domain names as well as the domains owned by popular Twitter/X users. Lastly, we document the complete lack of defenses against typosquatting in custodial and non-custodial wallets and propose straightforward countermeasures that can protect users without relying on third-party services. Show Chinese abstract

Abstract: 区块链名称系统（BNS）通过将复杂的加密接收者地址替换为可读的人类名称，简化了加密货币的发送过程，使交易更加方便。 不幸的是，这些名称可能容易受到拼写错误攻击，攻击者可以利用用户输入错误，注册与BNS名称在视觉上相似的名称。 毫不知情的用户可能会意外输入错误或误解所需的名称，导致资金不可逆地转移到攻击者的地址，而不是预期的接收者。 在这项工作中，我们进行了首次大规模的BNS内部拼写错误攻击研究。 为了了解BNS中拼写错误攻击的普遍性，我们研究了三种不同的服务（以太坊名称服务、不可阻挡域名和ADAHandles），覆盖了三个区块链（以太坊、Polygon和Cardano），收集了总计490万BNS名称和2亿笔交易——这是目前最大的BNS数据集。 我们描述了在这些替代命名系统上进行名称占用研究所涉及的挑战，然后对我们的数据集进行了深入的定量分析。 我们发现，拼写错误攻击者确实在BNS上活跃，每年注册的恶意域名数量不断增加。 我们的分析显示，用户已向占用者发送了数千笔交易，而占用者既针对全球流行的BNS域名，也针对知名Twitter/X用户的域名。 最后，我们记录了托管和非托管钱包中对拼写错误攻击缺乏防御措施，并提出了简单的对策，可以在不依赖第三方服务的情况下保护用户。