Smart Contract Vulnerability Detection Based on Automated Feature Extraction and Feature Interaction

Abstract

Smart contract is the core of blockchain operation, and contract vulnerability will cause huge economic losses. Therefore, effective smart contract vulnerability detection is of vital importance and attracts more and more attention. In this paper, we propose a vulnerability detection model (VDM-AEI) based on automatic feature extraction and feature interaction. For the first time, this model converts smart contracts into gray images and uses VGG16 and GRU models to automatically extract vulnerability features and filter effective features, respectively. Then, a contract graph and an expert knowledge feature vector are constructed by using commonly used methods as part of feature construction. Next, AutoInt and DCN networks are used to build a dual feature interaction network to obtain more abundant vulnerability feature information, which extracts high-dimensional nonlinear features from the low and sparse features of the contract graph feature vector and the expert knowledge-defined feature vector. Finally, all ouput features of GRU, AutoInt and DCN networks are integrated to obtain vulnerability classification results through fully connected neural networks. We conducted extensive experiments on the ESC and VSC datasets for reentrancy vulnerabilities, timestamp dependency vulnerabilities, and infinite loop vulnerabilities. The experimental results prove the effectiveness and accuracy of the VDM-AEI model. Compared with the latest vulnerability detection model CGE, the accuracy rates of the 3 types of vulnerability detection are improved by 10.85%, 6.18%, and 12.34%, respectively. In addition, the predicted F1 scores of VDM-AEI are all greater than 95%, and the recall rate is no less than 94%.