Abstract:The immutable and trustable characteristics of blockchain enable smart contracts to be applied in various fields. Unfortunately, smart contracts are subject to various vulnerabilities, which are frequently exploited by attackers, causing financial damage to users. Therefore, it is extremely important to perform effective vulnerability detection and locating to ensure the security of smart contracts. Deep learning has shown great advantages in smart contract vulnerability detection due to its powerful end-to-end feature learning. The previous deep learning based approaches to smart contract vulnerability detection focus on identifying whether there are vulnerabilities in a smart contract. However, this kind of detection cannot achieve fine-grained vulnerability detection, i.e., locating which function in the smart contract is vulnerable. In this paper, we study the problem of vulnerable smart contract function locating. We construct a novel Multi-Relational Nested contract Graph (MRNG) to better characterize the rich syntactic and semantic information in the smart contract code, including the relationships between data and instructions. An MRNG represents a smart contract, where each node represents a function in the smart contract and each edge describes the calling relationship between the functions. In addition, we create a Multi-Relational Function Graph (MRFG) for each function, which characterizes the corresponding function code. Accordingly, each node in the MRNG is an MRFG. Each MRFG uses different types of edges to represent the different control and data relationships between nodes within a function. We also propose a Multi-Relational Nested Graph Convolutional Network (MRN-GCN) to process the MRNG. MRN-GCN first extracts and aggregates features from each MRFG, using the edge-enhanced graph convolution network and self-attention mechanism. The extracted feature vector is then assigned to the corresponding node in the MRNG to obtain a new Featured Contract Graph (FCG) for the smart contract. Graph convolution is used to further extract features from the FCG. Finally, a feed forward network with a Sigmoid function is used to locate the vulnerable functions. Experimental results on the real-world smart contract datasets show that model MRN-GCN can effectively improve the accuracy, precision, recall and F1-score performance of vulnerable smart contract function locating.

Proposing of Imaging Graph Neural Network with Defined Security Pattern for Improving Smart Contract Vulnerability Detection

Combining Graph Neural Networks with Expert Knowledge for Smart Contract Vulnerability Detection

Smart Contract Vulnerability Detection Technique: A Survey

CodeNet: Code-Targeted Convolutional Neural Network Architecture for Smart Contract Vulnerability Detection

Smart Contract Vulnerability Detection: From Pure Neural Network to Interpretable Graph Feature and Expert Pattern Fusion

Smart Contract Vulnerability Detection using Graph Neural Network

Smart Contract Vulnerability Detection Based on Multi Graph Convolutional Neural Networks with Self-attention

Ignnvd: A Novel Software Vulnerability Detection Model Based on Integrated Graph Neural Networks

Smart Contract Vulnerability Detection Based on Multimodal Feature Fusion

Cross-Modality Mutual Learning for Enhancing Smart Contract Vulnerability Detection on Bytecode

ConvMHSA-SCVD: Enhancing Smart Contract Vulnerability Detection Through a Knowledge-Driven and Data-Driven Framework

A Smart Contract Vulnerability Detection Method Based on Program Dependency Graph

Extended Abstract of Combine Sliced Joint Graph with Graph Neural Networks for Smart Contract Vulnerability Detection

DA-GNN: A smart contract vulnerability detection method based on Dual Attention Graph Neural Network

Vulnerable smart contract function locating based on Multi-Relational Nested Graph Convolutional Network

VulnSense: Efficient Vulnerability Detection in Ethereum Smart Contracts by Multimodal Learning with Graph Neural Network and Language Model

A Smart Contract Vulnerability Detection Method Based on Multimodal Feature Fusion and Deep Learning

VDDL: A Deep Learning-Based Vulnerability Detection Model for Smart Contracts.

SCVHunter: Smart Contract Vulnerability Detection Based on Heterogeneous Graph Attention Network

Detection of vulnerabilities in blockchain smart contracts using deep learning

Deep learning-based solution for smart contract vulnerabilities detection