Smart contracts, deployed on blockchain platforms, have revolutionized various industries by enabling trustless and automated transactions. However, these contracts immutable and decentralized nature has made them an attractive target for malicious actors seeking to exploit vulnerabilities. This research proposes a novel approach for vulnerability detection, which extends its focus to a broader feature space encompassing both the source and bytecode elements to enhance the security and robustness of smart contracts. In this paper, we make three significant contributions. First, we amass a dataset comprising nearly twenty-three thousand real-world solidity smart contracts. Second, we create a comprehensive feature space by combining high-level and low-level features. High-level features are extracted from the source code using graph learning techniques for rich control and data semantics analysis, and low-level features are extracted from the opcode sequence. Finally, we employ data-driven methods on a dataset balanced using SMOTETomek. Our results demonstrate improved vulnerability detection compared to state-of-the-art models, with the highest score of 93.9%.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Multi-model Approach for Ethereum Smart Contract Vulnerability Detection

  • Vikas Kumar Jain,
  • Meenakshi Tripathi

摘要

Smart contracts, deployed on blockchain platforms, have revolutionized various industries by enabling trustless and automated transactions. However, these contracts immutable and decentralized nature has made them an attractive target for malicious actors seeking to exploit vulnerabilities. This research proposes a novel approach for vulnerability detection, which extends its focus to a broader feature space encompassing both the source and bytecode elements to enhance the security and robustness of smart contracts. In this paper, we make three significant contributions. First, we amass a dataset comprising nearly twenty-three thousand real-world solidity smart contracts. Second, we create a comprehensive feature space by combining high-level and low-level features. High-level features are extracted from the source code using graph learning techniques for rich control and data semantics analysis, and low-level features are extracted from the opcode sequence. Finally, we employ data-driven methods on a dataset balanced using SMOTETomek. Our results demonstrate improved vulnerability detection compared to state-of-the-art models, with the highest score of 93.9%.