[1]Decentralized autonomous organization:The DAO[EBOL]. (20160617)[20161010]. https:en.wikipedia.orgwikiDecentralized_autonomous_organization[2]Castillo M. DAO Attack[EBOL]. 2016[20161010]. http:www.coindesk.comthedaojustraised50millionbutwhatisit[3]Szabo N. Formalizing and securing relationships on public networks[JOL]. First Monday, 1997, 2(9) [20161010]. http:ojphi.orgojsindex.phpfmarticleview548[4]Miller M S. The digital path: Smart contracts and the third world[EBOL]. 2003[20161010]. http:www.erights.orgtalkspisapaperindex.html[5]Ethereum: A nextgeneration smart contract and decentralized application platform[OL]. 2014[20161010].https:github. comethereumwikiwiki%5BEnglish%5DWhitePaper[6]Ethereum[EBOL]. 2014 [20161010]. http:www.ethereum.org[7]Formal methods[EBOL]. 2002[20161010]. http:en.wikipedia.orgiFormal_ methods[8]Vidar S, Peter H, Kraemer F A. Modeldriven engineering of reliable faulttolerant systems—A stateoftheart survey[J]. Advances in Computers, 2013, 91: 119205[9]Hyperledger: Blockchain technologies for business[EBOL]. 2016 [20161010]. https:www.hyperledger.org[10]OpenTransactions: Smart contracts from open yransactions[EBOL]. [20161010]. http:opentransactions.orgwikiindex.php?title=Smart_contracts[11]Kenneth M. Symmetry and model checking[J]. Formal Methods in System Design, 1996, 9(12): 105131[12]Baier, Christel, Katoen, et al. Principles of Model Checking[M]. Cambridge:MIT Press,2008[13]朱江. 基于AADL架构模型的代码自动生成技术研究与实现[D]. 北京: 北京航空航天大学, 2011 [14]张颖蓓. LDP协议一致性测试研究与实现[D]. 长沙: 国防科技大学, 2003[15]Schamann J M. Automated Theorem Proving in Software Engineering[M]. Berlin: Springer, 2001: 546555[16]Von Neumann J, Goldstine H H. Planning and coding of problems for an electronic computing instrument[OL]. Institute for Advanced Study, Princeton, New Jersey, 1948 [20161010]. http:publications.ias.edusitesdefaultfilesu:13_p:214____Planning_Coding_Problems_v2p3r.pdf[17]Floyd R W. Assigning meanings to programs[M] Program Verification.Berlin:Springer, 1967:1932[18]Hoare C A R. An axiomatic basis for computer programming[M] Pioneers and Their Contributions to Software Engineering. Berlin: Springer, 1969: 576580[19]Clarke E M, Grumber J O, Peled D A. Model Checking[M]. Cambridge: MIT Press, 1999[20]Prigent A, Cassez F, Dhaussy P, et al. Extending the translation from SDL to promela[C] Proc of the 9th Int SPIN Workshop on Model Checking of Software. Berlin: Springer, 2002: 7994