Blockchain smart contract vulnerability detection based on GR algorithm

WANG Deguang; SHAN Mengtao; LI Fengqi; TONG Ning

doi:10.11959/j.issn.2096-109x.2025018

您当前的位置：

首页 >

文章列表页 >

Blockchain smart contract vulnerability detection based on GR algorithm

Papers | 更新时间：2025-05-14

- Blockchain smart contract vulnerability detection based on GR algorithm
- Chinese Journal of Network and Information Security Vol. 11, Issue 2, Pages: 76-86(2025)
- 作者机构：
  
  大连交通大学软件学院，辽宁大连 116028
- 作者简介：
- 基金信息：
  
  Liaoning Province International Science and Technology Cooperation Project(2022JH2/10700012);Liaoning Province Applied Basic Research Project(2023JH2/101300188;2022JH2/101300269);Yunnan Provincial Key Laboratory Fund for Service Computing(YNSC23118);Basic Research Project of Liaoning Provincial Department of Education(JYTMS20230011)
- DOI：10.11959/j.issn.2096-109x.2025018
  CLC： TP393
- Received：27 September 2024，
  
  Revised：2025-02-10，
  
  Published：25 April 2025
- 稿件说明：
移动端阅览
王德广, 单梦桃, 李凤岐, 等. 基于GR算法的区块链智能合约漏洞检测[J]. 网络与信息安全学报, 2025, 11(2): 76-86.

WANG D G, SHAN M T, LI F Q, et al. Blockchain smart contract vulnerability detection based on GR algorithm[J]. Chinese Journal of Network and Information Security, 2025, 11(2): 76-86.
王德广, 单梦桃, 李凤岐, 等. 基于GR算法的区块链智能合约漏洞检测[J]. 网络与信息安全学报, 2025, 11(2): 76-86. DOI： 10.11959/j.issn.2096-109x.2025018.

WANG D G, SHAN M T, LI F Q, et al. Blockchain smart contract vulnerability detection based on GR algorithm[J]. Chinese Journal of Network and Information Security, 2025, 11(2): 76-86. DOI： 10.11959/j.issn.2096-109x.2025018.

摘要

智能合约作为区块链技术的核心执行载体，其安全性是确保链上数字资产有效管理的基石。针对当前智能合约漏洞检测存在覆盖漏洞类型有限、检测效率偏低的技术瓶颈，提出重点解决多类型漏洞检测与特征提取效率优化两大核心问题。为此，构建了包含3 000余条样本的5个专项数据集，覆盖可重入漏洞、时间戳依赖漏洞、整数型溢出漏洞、交易顺序依赖和交易授权漏洞等主流漏洞类型，为多种类检测奠定数据基础；在算法设计层面，提出改进的GR（gated recurrent unit- random forest）算法模型，其中改进型门控循环神经网络通过引入分离注意力机制强化关键漏洞特征的捕捉能力，而随机森林算法则采用信息熵优化策略实现全局特征的完整性保留，双通道处理架构既保证了关键漏洞特征的显著性提取，又避免了深层特征在传递过程中的信息衰减，旨在提升智能合约漏洞检测的种类数与效率。实验结果显示：GR算法模型能够识别出5种智能合约漏洞，准确率高达98.88％。相较于先前算法模型，检测效率提高3%以上，漏洞类型平均增加3种，验证了GR算法模型的可行性和优越性。

Abstract

Smart contract

as the core execution mechanism in blockchain technology

have their security serving as the cornerstone for the effective management of on-chain digital assets. To address the current technical bottlenecks in smart contract vulnerability detection

such as limited coverage of vulnerability categories and detection efficiency

the study was conducted. Two critical challenges were focused on: multi-category vulnerability detection and optimization of feature extraction efficiency. Methodologically

the following approaches were adopted: Five specialized datasets containing more than 3

000 annotated samples were constructed

covering mainstream vulnerability categories including reentrant vulnerabilities

timestamp dependency vulnerabilities

integer overflow vulnerabilities

transaction order dependence and transaction authorization vulnerabilities. Thus

a robust data foundation for multi-category detection was established. At the algorithmic design level

an improved GR (gated recurrent unit-random forest) algorithm model was proposed. In this model

the improved gated recurrent neural network (GRU) incorporated a decoupled attention mechanism to strengthen the ability to capture critical vulnerability features. Meanwhile

the random forest algorithm employed an information entropy optimization strategy to preserve the integrity of global features. The dual-channel processing architecture not only ensured the significant extraction of key vulnerability features

but also prevented information attenuation during deep feature transmission. Ultimately

the aim of improving both the variety and efficiency of smart contract vulnerability detection was achieved. Experimental results showed that the GR algorithm model could successfully detect five categories of smart contract vulnerabilities with an accuracy rate of 98.88%. Compared to previous algorithm models

it achieved over 3% improvement in detection efficiency and increased three detectable vulnerability categories. Thus

the feasibility and superiority of the GR algorithm model were validated.

关键词

Keywords

references

SZABO N . Smart contracts: building blocks for digital markets [J ] . EXTROPY: The Journal of Transhumanist Thought , 1996 , 18 ( 2 ): 28 .

CHEN J , XIA X , LO D , et al . Defectchecker: Automated smart contract defect detection by analyzing evm bytecode [J ] . IEEE Transactions on Software Engineering , 2021 , 48 ( 7 ): 2189 - 2207 .

张娴 , 朱建明 , 隋智源等 . 数字货币交易匿名性与监管的博弈分析 [J ] . 网络与信息安全学报 , 2022 , 8 ( 5 ): 150 - 157 .

ZHANG X , ZHU J M , SUI Z Y , et al . Game analysis of anonymity and regulation in digital currency transactions [J ] . Journal of Network and Information Security , 2022 , 8 ( 5 ): 150 - 157 .

NGUYEN T D , PHAM L H , SUN J , et al . Sfuzz: An efficient adaptive fuzzer for solidity smart contracts [C ] // Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering . 2020 : 778 - 788 .

MEHAR M I , SHIER C L , GIAMBATTISTA A , et al . Understanding a revolutionary and flawed grand experiment in blockchain: The DAO attack [J ] . Journal of Cases on Information Technology (JCIT) , 2019 , 21 ( 1 ): 19 - 32 .

钱鹏 , 刘振广 , 何钦铭 , 等 . 智能合约安全漏洞检测技术研究综述 [J ] . 软件学报 , 2022 , 33 ( 8 ): 3059 - 3085 .

QIAN P , LIU Z G , HE Q . M, et al. Review of security vulnerability detection technologies for smart contracts[J ] . Journal of Software , 2022 , 33 ( 8 ): 3059 - 3085 .

TSANKOV P , DAN A , DRACHSLER-COHEN D , et al . Securify: Practical security analysis of smart contracts [C ] // Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security . 2018 : 67 - 82 .

WÜSTHOLZ V , CHRISTAKIS M . Harvey: A greybox fuzzer for smart contracts [C ] // Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering . 2020 : 1398 - 1409 .

BRENT L , GRECH N , LAGOUVARDOS S , et al . Ethainter: A smart contract security analyzer for composite vulnerabilities [C ] // Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation . 2020 : 454 - 469 .

张文博 , 陈思敏 , 魏立斐 , 等 . 基于形式化方法的智能合约验证研究综述 [J ] . 网络与信息安全学报 , 2022 , 8 ( 4 ): 12 - 28 .

ZHANG W B , CHEN S M , WEI L F , et al . State-of-the-art survey of smart contract verification based on formal methods [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 4 ): 12 - 28 .

KODAVALI L , KUPPUSWAMY S . Bayesian network based vulnerability detection of blockchain smart contracts [J ] . Journal of Intelligent & Fuzzy Systems , 2023 , 44 ( 2 ): 1907 - 1920 .

张光华 , 刘永升 , 王鹤 , 等 . 基于BiLSTM和注意力机制的智能合约漏洞检测方案 [J ] . 信息网络安全 , 2022 , 22 ( 9 ): 46 - 54 .

ZHANG G H , LIU Y S , WANG H , et al . A smart contract vulnerability detection scheme based on BiLSTM and attention mechanism [J ] . Information Network Security , 2022 , 22 ( 9 ): 46 - 54 .

杨忠举 , 朱卫星 , 何红悦 , 等 . 基于智能合约的无人机集群安全性研究 [J ] . 软件导刊 , 2023 , 22 ( 8 ): 164 - 171 .

YANG Z J , ZHU W X , HE H Y , et al . Research on the security of drone clusters based on smart contracts [J ] . Software Guide , 2023 , 22 ( 8 ): 164 - 171 .

SUN W , MA F , TZACHOR A , et al . Bridging environmentally extended input-output models and complex network analysis: A bibliometric analysis of trends and opportunities [J ] . Journal of Cleaner Production , 2025 , 486 144427 - 144427 .

SUN X R , CHAI J . Random forest feature selection for partial label learning [J ] . Neurocomputing , 2023 , 561 .

ZHANG Y , ZHOU W , HUANG L , et al . Efficient microbubble Trajectory tracking in ultrasound localization microscopy using a gated recurrent unit-based multitasking temporal neural network [J ] . IEEE Transactions on Ultrasonics, Ferroelectrics, and Frequency Control , 2024 .

SHERSTINSKY A . Fundamentals of recurrent neural network (RNN) and long short-term memory (LSTM) network [J ] . Physica D: Nonlinear Phenomena , 2020 , 404 : 132306 .

GAO S , HUANG Y , ZHANG S , et al . Short-term runoff prediction with GRU and LSTM networks without requiring time step optimization during sample generation [J ] . Journal of Hydrology , 2020 , 589 : 125188 .

YAMAGUCHI F , GOLDE N , ARP D , et al . Modeling and discovering vulnerabilities with code property graphs [C ] // 2014 IEEE Symposium on Security and Privacy . 2014 : 590 - 604 .

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Bytecode-based approach for Ethereum smart contract classification

State-of-the-art survey of smart contract verification based on formal methods

Research progress of access control based on blockchain

High resistance botnet based on smart contract

Multi-microgrid marketized transaction models and algorithms based on smart contracts

Related Author

Dan LIN

Kaixin LIN

Jiajing WU

Zibin ZHENG

Wenbo ZHANG

Simin CHEN

Lifei WEI

Wei SONG

Related Institution

School of Software Engineering, Sun Yat-sen University

School of Computer Science and Engineering, SunYat-sen University

Shanghai University of Electric Power

Shanghai Key Laboratory of Trustworthy Computing

College of Information Technology, Shanghai Ocean University

⁰