ContractWard: Automated Vulnerability Detection Models for Ethereum Smart Contracts

【Author】 Wang, Wei; Song, Jingjing; Xu, Guangquan; Li, Yidong; Wang, Hao; Su, Chunhua

【Source】IEEE TRANSACTIONS ON NETWORK SCIENCE AND ENGINEERING

【影响因子】5.033

【Abstract】Smart contracts are decentralized applications running on Blockchain. A very large number of smart contracts has been deployed on Ethereum. Meanwhile, security flaws of contracts have led to huge pecuniary losses and destroyed the ecological stability of contract layer on Blockchain. It is thus an emerging yet crucial issue to effectively and efficiently detect vulnerabilities in contracts. Existing detection methods like Oyente and Securify are mainly based on symbolic execution or analysis. These methods are very time-consuming, as the symbolic execution requires the exploration of all executable paths or the analysis of dependency graphs in a contract. In this work, we propose ContractWard to detect vulnerabilities in smart contracts with machine learning techniques. First, we extract bigram features from simplified operation codes of smart contracts. Second, we employ five machine learning algorithms and two sampling algorithms to build the models. ContractWard is evaluated with 49502 real-world smart contracts running on Ethereum. The experimental results demonstrate the effectiveness and efficiency of ContractWard. The predictive Micro-F1 and Macro-F1 of ContractWard are over 96% and the average detection time is 4 seconds on each smart contract when we use XGBoost for training the models andSMOTETomek for balancing the training sets.

【Keywords】Blockchain; machine learning; smart contracts; vulnerability detection

【发表时间】2021 APR-JUN

【收录时间】2022-01-02

【文献类型】

【主题类别】

--