Abstract:Smart contracts have been widely used in the blockchain world these years, and simultaneously vulnerability detection has gained more and more attention due to the staggering economic losses caused by the attacker. Existing tools that analyze vulnerabilities for smart contracts heavily rely on rules predefined by experts, which are labour-intense and require domain knowledge. Moreover, predefined rules tend to be misconceptions and increase the risk of crafty potential back-doors in the future. Recently, researchers mainly used static and dynamic execution analysis to detect the vulnerabilities of smart contracts and have achieved acceptable results. However, the dynamic method cannot cover all the program inputs and execution paths, which leads to some vulnerabilities that are hard to detect. The static analysis method commonly includes symbolic execution and theorem proving, which requires using constraints to detect vulnerability. These shortcomings show that traditional methods are challenging to apply and expand on a large scale. This paper aims to detect vulnerabilities via the Bug Injection framework and transfer learning techniques. First, we train a Transformer encoder using multi-modality code, which contains source code, intermediate representation, and assembly code. The input code consists separately of Solidity source code, intermediate representation, and assembly code. Specifically, we translate source code into the intermediate representation and decompile the byte code into assembly code by the EVM compiler. Then, we propose a novel entropy embedding technique, which combines token embedding, segment embedding, and positional embedding of the Transformer encoder in our approach. After that, we utilize the Bug Injection framework to automatically generate specific types of buggy code for fine-tuning and evaluating the performance of vulnerability detection. The experimental results show that our proposed approach improves the performance in detecting reentrancy vulnerabilities and timestamp dependence. Moreover, our approach is more flexible and scalable than static and dynamic analysis approaches in detecting smart contract vulnerabilities. Our approach improves the baseline approaches by an average of 11.89% in term of F1 score.

Enhancing smart contract security: Leveraging pre‐trained language models for advanced vulnerability detection

VDDL: A Deep Learning-Based Vulnerability Detection Model for Smart Contracts.

Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models

Smart Contract Vulnerability Detection Technique: A Survey

Cross-Modality Mutual Learning for Enhancing Smart Contract Vulnerability Detection on Bytecode

ConvMHSA-SCVD: Enhancing Smart Contract Vulnerability Detection Through a Knowledge-Driven and Data-Driven Framework

Deep learning-based solution for smart contract vulnerabilities detection

Ethereum Smart Contract Vulnerability Detection Model Based on Triplet Loss and BiLSTM

Enhancing BERT-Based Language Model for Multi-label Vulnerability Detection of Smart Contract in Blockchain

A New Smart Contract Anomaly Detection Method by Fusing Opcode and Source Code Features for Blockchain Services

SmartDT: An Effective Vulnerability Detection System of Smart Contracts Based on Deep Learning.

Robust Vulnerability Detection in Solidity-Based Ethereum Smart Contracts Using Fine-Tuned Transformer Encoder Models

Smart Contract Vulnerability Detection: The Role of Large Language Model (LLM)

Smart Contract Vulnerability Detection Based on Deep Learning and Multimodal Decision Fusion

Smart Contract Vulnerability Detection: From Pure Neural Network to Interpretable Graph Feature and Expert Pattern Fusion

A Smart Contract Vulnerability Detection Method Based on Multimodal Feature Fusion and Deep Learning

Optimizing smart contract vulnerability detection via multi-modality code and entropy embedding

VdaBSC: A Novel Vulnerability Detection Approach for Blockchain Smart Contract by Dynamic Analysis

An Integrated Smart Contract Vulnerability Detection Tool Using Multi-Layer Perceptron on Real-Time Solidity Smart Contracts

Smart Contract Vulnerability Detection Based on Multimodal Feature Fusion

Automated Smart Contract Vulnerability Detection using Fine-tuned Large Language Models