Abstract:Smart contract, a special software code running on and resided in the blockchain, enlarges the general application of blockchain and exchanges assets without dependence of external parties. With blockchain’s characteristic of immutability, they cannot be modified once deployed. Thus, the contract and the records are persisted on the blockchain forever, including failed transactions that are caused by runtime errors and result in the waste of computation, storage, and fees. In this paper, we refer to smart contracts which will cause runtime errors as crash-inducing smart contracts. However, automatic identification of crash-inducing smart contracts is limited investigated in the literature. The existing approaches to identify crash-inducing smart contracts are either limited in finding vulnerability (e.g., pattern-based static analysis) or very expensive (e.g., program analysis), which is insufficient for Ethereum.To reduce runtime errors on Ethereum, we propose an efficient, generalizable, and machine learning-based crash-inducing smart contract detector, CRASHSCDET, to automatically identify crash-inducing smart contracts. To investigate the effectiveness of CRASHSCDET, we firstly propose 34 static source code metrics from four dimensions (i.e., complexity metrics, count metrics, object-oriented metrics, and Solidity-specific metrics) to characterize smart contracts. Then, we collect a large-scale dataset of verified smart contracts (i.e., 54,739) and label these smart contracts based on their execution traces on Etherscan. We make a comprehensive comparison with three state-of-the-art approaches and the results show that CRASHSCDET can achieve good performance (i.e., 0.937 of F1-measure and 0.980 of AUC on average) and statistically significantly improve the baselines by 0.5%-60.4% in terms of F1-measure and by 41.2%-44.3% in terms of AUC, which indicates the effectiveness of static source code metrics in identifying crash-inducing smart contracts. We further investigate the importance of different types of metrics and find that metrics in different dimensions have varying abilities to depict the characteristic of smart contracts. Especially, metrics belonging to the "Count" dimension are the most discriminative ones but combining all metrics can achieve better prediction performance.

A Game-Theoretic Method Based on Q-learning to Invalidate Criminal Smart Contracts

Automatic Identification of Crash-inducing Smart Contracts

Randomness Invalidates Criminal Smart Contracts

RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs

Evil Geniuses: Delving into the Safety of LLM-based Agents

A game‐theoretic approach of mixing different qualities of coins

Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates

PathSeeker: Exploring LLM Security Vulnerabilities with a Reinforcement Learning-Based Jailbreak Approach

An evaluation of deep learning models for chargeback Fraud detection in online games

Contractual Reinforcement Learning: Pulling Arms with Invisible Hands

Playing Language Game with LLMs Leads to Jailbreaking

SmartInv: Multimodal Learning for Smart Contract Invariant Inference

SC-Bench: A Large-Scale Dataset for Smart Contract Auditing

Lockpicking LLMs: A Logit-Based Jailbreak Using Token-level Manipulation

A non-cooperative meta-modeling game for automated third-party calibrating, validating and falsifying constitutive laws with parallelized adversarial attacks

Towards Reliable Empirical Machine Unlearning Evaluation: A Game-Theoretic View

Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapes

Towards Safer Smart Contracts: A Sequence Learning Approach to Detecting Security Threats

Smart Learning to Find Dumb Contracts (Extended Version)

Learn to Disguise: Avoid Refusal Responses in LLM's Defense via a Multi-agent Attacker-Disguiser Game

Smart Contract Vulnerability Detection: From Pure Neural Network to Interpretable Graph Feature and Expert Pattern Fusion