Abstract:Smart contracts have been widely and rapidly used to automate financial and business transactions together with blockchains, helping people make agreements while minimizing trusts. With millions of smart contracts deployed on blockchain, various bugs and vulnerabilities in smart contracts have emerged. Following the rapid development of deep learning, many recent studies have used deep learning for vulnerability detection to conduct security checks before deploying smart contracts. These approaches show effective results on detecting whether a smart contract is vulnerable or not whereas their results on locating suspicious statements responsible for the detected vulnerability are still unsatisfactory. To address this problem, we propose a deep learning based two-phase smart contract debugger for reentrancy vulnerability, one of the most severe vulnerabilities, named as ReVulDL: Reentrancy Vulnerability Detection and Localization. ReVulDL integrates the vulnerability detection and localization into a unified debugging pipeline. For the detection phase, given a smart contract, ReVulDL uses a graph-based pre-training model to learn the complex relationships in propagation chains for detecting whether the smart contract contains a reentrancy vulnerability. For the localization phase, if a reentrancy vulnerability is detected, ReVulDL utilizes interpretable machine learning to locate the suspicious statements in smart contract to provide interpretations of the detected vulnerability. Our large-scale empirical study on 47,398 smart contracts shows that ReVulDL achieves promising results in detecting reentrancy vulnerabilities (e.g., outperforming 16 state-of-the-art vulnerability detection approaches) and locating vulnerable statements (e.g., 70.38% of the vulnerable statements are ranked within Top-10).

Hunting for Re-Entrancy Attacks in Ethereum Smart Contracts via Static Analysis

Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models

Reentrancy Vulnerability Identification in Ethereum Smart Contracts

Turn the Rudder: A Beacon of Reentrancy Detection for Smart Contracts on Ethereum

Uncover the Premeditated Attacks: Detecting Exploitable Reentrancy Vulnerabilities by Identifying Attacker Contracts

ReGuard: finding reentrancy bugs in smart contracts.

Efficiently Detecting Reentrancy Vulnerabilities in Complex Smart Contracts

Exploiting Bytecode Analysis for Reentrancy Vulnerability Detection in Ethereum Smart Contracts

Cross-contract static analysis for detecting practical reentrancy vulnerabilities in smart contracts

AdvSCanner: Generating Adversarial Smart Contracts to Exploit Reentrancy Vulnerabilities Using LLM and Static Analysis

SmartReco: Detecting Read-Only Reentrancy via Fine-Grained Cross-DApp Analysis

Security Analysis of Blockchain Smart Contract: Taking Reentrancy Vulnerability as an Example

Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks

Blockchain Smart Contract Threat Detection Technology Based on Symbolic Execution

ReenRepair: Automatic and Semantic Equivalent Repair of Reentrancy in Smart Contracts

Evaluating Ethereum Reentrancy Detection Tools Via Mutation Testing

Involuntary Transfer: A Vulnerability Pattern in Smart Contracts

A Bytecode‐based Integrated Detection and Repair Method for Reentrancy Vulnerabilities in Smart Contracts

Unity is Strength: Enhancing Precision in Reentrancy Vulnerability Detection of Smart Contract Analysis Tools

Reentrancy Vulnerability Detection and Localization: A Deep Learning Based Two-phase Approach

Mathematical Analysis of Existing Techniques for Ethereum Smart Contract Vulnerability Detection