Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models

In the last decade, smart contract security issues lead to tremendous losses, which has attracted increasing public attention both in industry and in academia. Researchers have embarked on efforts with logic rules, symbolic analysis, and formal analysis to achieve encouraging results in smart contra...

Full description

Bibliographic Details
Main Authors: Peng Qian, Zhenguang Liu, Qinming He, Roger Zimmermann, Xun Wang
Format: Article
Language:English
Published: IEEE 2020-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/8970384/
_version_ 1818665182953472000
author Peng Qian
Zhenguang Liu
Qinming He
Roger Zimmermann
Xun Wang
author_facet Peng Qian
Zhenguang Liu
Qinming He
Roger Zimmermann
Xun Wang
author_sort Peng Qian
collection DOAJ
description In the last decade, smart contract security issues lead to tremendous losses, which has attracted increasing public attention both in industry and in academia. Researchers have embarked on efforts with logic rules, symbolic analysis, and formal analysis to achieve encouraging results in smart contract vulnerability detection tasks. However, the existing detection tools are far from satisfactory. In this paper, we attempt to utilize the deep learning-based approach, namely bidirectional long-short term memory with attention mechanism (BLSTM-ATT), aiming to precisely detect reentrancy bugs. Furthermore, we propose contract snippet representations for smart contracts, which contributes to capturing essential semantic information and control flow dependencies. Our extensive experimental studies on over 42,000 real-world smart contracts show that our proposed model and contract snippet representations significantly outperform state-of-the-art methods. In addition, this work proves that it is practical to apply deep learning-based technology on smart contract vulnerability detection, which is able to promote future research towards this area.
first_indexed 2024-12-17T05:44:35Z
format Article
id doaj.art-3d01fb8850fe448d9c2dc9edd0a9afe6
institution Directory Open Access Journal
issn 2169-3536
language English
last_indexed 2024-12-17T05:44:35Z
publishDate 2020-01-01
publisher IEEE
record_format Article
series IEEE Access
spelling doaj.art-3d01fb8850fe448d9c2dc9edd0a9afe62022-12-21T22:01:21ZengIEEEIEEE Access2169-35362020-01-018196851969510.1109/ACCESS.2020.29694298970384Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential ModelsPeng Qian0https://orcid.org/0000-0003-4934-5811Zhenguang Liu1Qinming He2Roger Zimmermann3Xun Wang4School of Computer and Information Engineering, Zhejiang Gongshang University, Hangzhou, ChinaSchool of Computer and Information Engineering, Zhejiang Gongshang University, Hangzhou, ChinaDepartment of Computer Science, Zhejiang University, Hangzhou, ChinaSchool of Computing, National University of Singapore, SingaporeSchool of Computer and Information Engineering, Zhejiang Gongshang University, Hangzhou, ChinaIn the last decade, smart contract security issues lead to tremendous losses, which has attracted increasing public attention both in industry and in academia. Researchers have embarked on efforts with logic rules, symbolic analysis, and formal analysis to achieve encouraging results in smart contract vulnerability detection tasks. However, the existing detection tools are far from satisfactory. In this paper, we attempt to utilize the deep learning-based approach, namely bidirectional long-short term memory with attention mechanism (BLSTM-ATT), aiming to precisely detect reentrancy bugs. Furthermore, we propose contract snippet representations for smart contracts, which contributes to capturing essential semantic information and control flow dependencies. Our extensive experimental studies on over 42,000 real-world smart contracts show that our proposed model and contract snippet representations significantly outperform state-of-the-art methods. In addition, this work proves that it is practical to apply deep learning-based technology on smart contract vulnerability detection, which is able to promote future research towards this area.https://ieeexplore.ieee.org/document/8970384/Blockchainsmart contractdeep learningsequential modelsvulnerability detection
spellingShingle Peng Qian
Zhenguang Liu
Qinming He
Roger Zimmermann
Xun Wang
Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models
IEEE Access
Blockchain
smart contract
deep learning
sequential models
vulnerability detection
title Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models
title_full Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models
title_fullStr Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models
title_full_unstemmed Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models
title_short Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models
title_sort towards automated reentrancy detection for smart contracts based on sequential models
topic Blockchain
smart contract
deep learning
sequential models
vulnerability detection
url https://ieeexplore.ieee.org/document/8970384/
work_keys_str_mv AT pengqian towardsautomatedreentrancydetectionforsmartcontractsbasedonsequentialmodels
AT zhenguangliu towardsautomatedreentrancydetectionforsmartcontractsbasedonsequentialmodels
AT qinminghe towardsautomatedreentrancydetectionforsmartcontractsbasedonsequentialmodels
AT rogerzimmermann towardsautomatedreentrancydetectionforsmartcontractsbasedonsequentialmodels
AT xunwang towardsautomatedreentrancydetectionforsmartcontractsbasedonsequentialmodels