Abstract:Blockchain is a significant advancement in technology recently, transforming the traditional centralized system into a decentralized one. Smart contracts, as one of the best applications of blockchain, show great potential in various fields, such as finance, supply chain, and the Internet of Things (IoT). As the world's first blockchain platform to support turing complete smart contracts, Ethereum has become the most critical infrastructure for the digital world. However, with the vigorous development of smart contracts, malicious attacks against smart contracts have frequently occurred in recent years. The issue of smart contract security has attracted widespread attention due to the huge financial losses caused by smart contract vulnerabilities. Although researchers have made some progress in detecting smart contract vulnerabilities through symbolic execution and fuzzing-based methods, existing methods mainly rely on expert knowledge and hand-crafted features, leading to many detection errors. Even worse, existing methods take tens of seconds or even minutes to detect each smart contract on average, which is extremely time-consuming. In this work, we present SVScanner, the new method combining two features of heterogeneous patterns to detect smart contract vulnerabilities in the blockchain. Specifically, we first extract global semantic features from the sequence of contract code tokens. Then we further use the attention mechanism to capture deep structural semantics from the Abstract Syntax Tree (AST) of smart contracts. Finally, we combine these two features from different patterns and use a text convolutional neural network (TextCNN) to detect contract bugs. Experimental results show that SVScanner has the ability to detect vulnerabilities effectively in real-world smart contract datasets. SVScanner achieves a 7.33% improvement in accuracy compared with other traditional methods. Moreover, our method requires significantly less detection time.

Detecting unknown vulnerabilities in smart contracts with the CNN-BiLSTM model

Smart Contract Vulnerability Detection Technique: A Survey

Detecting unknown vulnerabilities in smart contracts using opcode sequences

Cross-Modality Mutual Learning for Enhancing Smart Contract Vulnerability Detection on Bytecode

ConvMHSA-SCVD: Enhancing Smart Contract Vulnerability Detection Through a Knowledge-Driven and Data-Driven Framework

A New Smart Contract Anomaly Detection Method by Fusing Opcode and Source Code Features for Blockchain Services

Deep learning-based methodology for vulnerability detection in smart contracts

Smart Contract Vulnerability Detection Based on Variant LSTM

SPCBIG-EC: A Robust Serial Hybrid Model for Smart Contract Vulnerability Detection

Ethereum Smart Contract Vulnerability Detection Model Based on Triplet Loss and BiLSTM

VDDL: A Deep Learning-Based Vulnerability Detection Model for Smart Contracts.

SVScanner: Detecting Smart Contract Vulnerabilities Via Deep Semantic Extraction

A Smart Contract Vulnerability Detection Method Based on Multimodal Feature Fusion and Deep Learning

VdaBSC: A Novel Vulnerability Detection Approach for Blockchain Smart Contract by Dynamic Analysis

Multi-label Detection Method for Smart Contract Vulnerabilities Based on Expert Knowledge and Pre-training Technology.

A Graph Neural Network-Based Smart Contract Vulnerability Detection Method with Artificial Rule

An Efficient Code-Embedding-Based Vulnerability Detection Model for Ethereum Smart Contracts

Combining Graph Neural Networks with Expert Knowledge for Smart Contract Vulnerability Detection

Deep learning-based solution for smart contract vulnerabilities detection

Smart Contract Vulnerability Detection Based on Deep Learning and Multimodal Decision Fusion

ContractWard: Automated Vulnerability Detection Models for Ethereum Smart Contracts