Abstract:The immutable and trustable characteristics of blockchain enable smart contracts to be applied in various fields. Unfortunately, smart contracts are subject to various vulnerabilities, which are frequently exploited by attackers, causing financial damage to users. Therefore, it is extremely important to perform effective vulnerability detection and locating to ensure the security of smart contracts. Deep learning has shown great advantages in smart contract vulnerability detection due to its powerful end-to-end feature learning. The previous deep learning based approaches to smart contract vulnerability detection focus on identifying whether there are vulnerabilities in a smart contract. However, this kind of detection cannot achieve fine-grained vulnerability detection, i.e., locating which function in the smart contract is vulnerable. In this paper, we study the problem of vulnerable smart contract function locating. We construct a novel Multi-Relational Nested contract Graph (MRNG) to better characterize the rich syntactic and semantic information in the smart contract code, including the relationships between data and instructions. An MRNG represents a smart contract, where each node represents a function in the smart contract and each edge describes the calling relationship between the functions. In addition, we create a Multi-Relational Function Graph (MRFG) for each function, which characterizes the corresponding function code. Accordingly, each node in the MRNG is an MRFG. Each MRFG uses different types of edges to represent the different control and data relationships between nodes within a function. We also propose a Multi-Relational Nested Graph Convolutional Network (MRN-GCN) to process the MRNG. MRN-GCN first extracts and aggregates features from each MRFG, using the edge-enhanced graph convolution network and self-attention mechanism. The extracted feature vector is then assigned to the corresponding node in the MRNG to obtain a new Featured Contract Graph (FCG) for the smart contract. Graph convolution is used to further extract features from the FCG. Finally, a feed forward network with a Sigmoid function is used to locate the vulnerable functions. Experimental results on the real-world smart contract datasets show that model MRN-GCN can effectively improve the accuracy, precision, recall and F1-score performance of vulnerable smart contract function locating.

Smart Contract Vulnerability Detection Based on Multi Graph Convolutional Neural Networks with Self-attention

Smart Contract Vulnerability Detection Technique: A Survey

Smart Contract Vulnerability Detection Based on Multimodal Feature Fusion

ConvMHSA-SCVD: Enhancing Smart Contract Vulnerability Detection Through a Knowledge-Driven and Data-Driven Framework

A Smart Contract Vulnerability Detection Method Based on Program Dependency Graph

Combining Graph Neural Networks with Expert Knowledge for Smart Contract Vulnerability Detection

Smart Contract Vulnerability Detection using Graph Neural Network

DA-GNN: A smart contract vulnerability detection method based on Dual Attention Graph Neural Network

SCVHunter: Smart Contract Vulnerability Detection Based on Heterogeneous Graph Attention Network

Smart Contract Vulnerability Detection: From Pure Neural Network to Interpretable Graph Feature and Expert Pattern Fusion

Cross-Modality Mutual Learning for Enhancing Smart Contract Vulnerability Detection on Bytecode

Extended Abstract of Combine Sliced Joint Graph with Graph Neural Networks for Smart Contract Vulnerability Detection

Vulnerable smart contract function locating based on Multi-Relational Nested Graph Convolutional Network

A Smart Contract Vulnerability Detection Method Based on Multimodal Feature Fusion and Deep Learning

Smart Contract Vulnerability Detection Model Based on Multi-Task Learning

A Smart Contract Vulnerability Detection Model Based on Syntactic and Semantic Fusion Learning

Graph Neural Networks Enhanced Smart Contract Vulnerability Detection of Educational Blockchain

Smart Contract Vulnerability Detection Based on Deep Learning and Multimodal Decision Fusion

CodeNet: Code-Targeted Convolutional Neural Network Architecture for Smart Contract Vulnerability Detection

An Efficient Smart Contract Vulnerability Detector Based on Semantic Contract Graphs Using Approximate Graph Matching

Toward Vulnerability Detection for Ethereum Smart Contracts Using Graph-Matching Network