Affiliation:
1. Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou 510006, China
2. School of Beidou, Guangxi University of Information Engineering, Nanning 530299, China
3. Information Security Research Center, CEPREI Laboratory, Guangzhou 510610, China
4. Key Laboratory of Ministry of Industry and Information Technology, Guangzhou 510610, China
Abstract
With the rapid development and widespread application of blockchain technology in recent years, smart contracts running on blockchains often face security vulnerability problems, resulting in significant economic losses. Unlike traditional programs, smart contracts cannot be modified once deployed, and vulnerabilities cannot be remedied. Therefore, the vulnerability detection of smart contracts has become a research focus. Most existing vulnerability detection methods are based on rules defined by experts, which are inefficient and have poor scalability. Although there have been studies using machine learning methods to extract contract features for vulnerability detection, the features considered are singular, and it is impossible to fully utilize smart contract information. In order to overcome the limitations of existing methods, this paper proposes a smart contract vulnerability detection method based on deep learning and multimodal decision fusion. This method also considers the code semantics and control structure information of smart contracts. It integrates the source code, operation code, and control-flow modes through the multimodal decision fusion method. The deep learning method extracts five features used to represent contracts and achieves high accuracy and recall rates. The experimental results show that the detection accuracy of our method for arithmetic vulnerability, re-entrant vulnerability, transaction order dependence, and Ethernet locking vulnerability can reach 91.6%, 90.9%, 94.8%, and 89.5%, respectively, and the detected AUC values can reach 0.834, 0.852, 0.886, and 0.825, respectively. This shows that our method has a good vulnerability detection effect. Furthermore, ablation experiments show that the multimodal decision fusion method contributes significantly to the fusion of different modalities.
Funder
National Natural Science Foundation of China
NSF of Guangdong Province
the Key Laboratory, Ministry of Industry and Information Technology, China
Subject
Electrical and Electronic Engineering,Biochemistry,Instrumentation,Atomic and Molecular Physics, and Optics,Analytical Chemistry
Reference70 articles.
1. Deng, W., Huang, T., and Wang, H. (2023). A Review of the Key Technology in a Blockchain Building Decentralized Trust Platform. Mathematics, 11.
2. A Next-Generation Smart Contract and Decentralized Application Platform;Buterin;White Paper,2014
3. Dannen, C. (2017). Introducing Ethereum and Solidity, Springer.
4. An overview on smart contracts: Challenges, advances and platforms;Zheng;Future Gener. Comput. Syst.,2020
5. Blockchain-Enabled Conditional Decentralized Vehicular Crowdsensing System;Zhao;IEEE Trans. Intell. Transp. Syst.,2022
Cited by
7 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. Empirical Study of Move Smart Contract Security: Introducing MoveScan for Enhanced Analysis;Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis;2024-09-11
2. QuadraCode AI: Smart Contract Vulnerability Detection with Multimodal Representation;2024 33rd International Conference on Computer Communications and Networks (ICCCN);2024-07-29
3. Smart Contract Vulnerability Detection Using Deep Learning Algorithms on EVM bytecode;2024 13th Mediterranean Conference on Embedded Computing (MECO);2024-06-11
4. “Vulnerabilities in Smart Contracts: A Detailed Survey of Detection and Mitigation Methodologies”;2024 International Conference on Emerging Technologies in Computer Science for Interdisciplinary Applications (ICETCS);2024-04-22
5. ChainSniper: A Machine Learning Approach for Auditing Cross-Chain Smart Contracts;Proceedings of the 2024 9th International Conference on Intelligent Information Technology;2024-02-23