.png){kind=icon}
返回
A Triplet-Learning-Based Framework for Cross-Version Smart Contract Vulnerability Detection
.png){kind=icon}
PRE
AI
DOI：10.1109/JIOT.2025.3615991.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
As security concerns in blockchain platforms continue to rise, triggered by substantial financial losses, detecting vulnerabilities in smart contracts has emerged as a crucial focus for both academia and industry. Although many promising vulnerability detection methods for Ethereum have been proposed in recent years, their long-term reliability and adaptability across different versions of smart contracts remain unresolved. Specifically, the performance of these methods tends to degrade over time, and in some cases, they may even fail entirely. A key factor contributing to this dilemma is the regular updates of Solidity versions. These updates often introduce new features or syntax changes, which significantly influence how vulnerabilities are manifested and detected. To tackle this challenge, we propose triplet detection (TD), a triplet learning-based vulnerability detection framework, to preserve invariant vulnerability knowledge across multiple Solidity versions. In TD, we propose a novel smart offline mining (SOM) strategy to guide the triplet selection, ensuring the learned embedding capture both foundational and version-independent vulnerability features. The experimental results demonstrate that TD outperforms state-of-the-art vulnerability detection tools and baseline methods. Furthermore, TD achieves the superior performance in detecting vulnerabilities across different versions of smart contracts (e.g., from v0.4 to v0.8), highlighting its capability to tackle the challenges of long-term reliability and adaptability in detection models due to the updates of smart contract versions.
Keyword:
Smart contracts
Reliability
Security
Blockchains
Software
Fuzzing
Feature extraction
Semantics
Syntactics
Data mining
Deep learning
smart contract
triplet learning
vulnerability detection
期刊
IF:
8.9
论文数:
1.4W
被引数:
7.8W
机构
引用论文
.png){kind=icon}
An Efficient Smart Contract Vulnerability Detector Based on Semantic Contract Graphs Using Approximate Graph Matching基于近似图匹配的语义合约图的高效智能合约漏洞检测器
PREAI
分享收藏
查看更多内容