Intelligent contract vulnerability detection method and device

Abstract

The invention discloses a smart contract vulnerability detection method and device, and the method comprises the steps: obtaining a to-be-detected smart contract code, converting the to-be-detected smart contract code into a static single assignment form, compiling the to-be-detected smart contract code in the static single assignment form into an abstract syntax tree through a compiler, and carrying out the detection of the vulnerability of a smart contract. Splitting the abstract syntax tree according to a preset rule to obtain a plurality of function-level syntax trees containing functions, searching for vulnerability tags corresponding to the functions contained in the function-level syntax trees for each function-level syntax tree according to a preset function data set, and forming a target data set by the function-level syntax trees and the corresponding vulnerability tags, and performing vulnerability classification on the target data set to obtain a classification result. According to the method, the to-be-detected smart contract code is converted into the static single assignment form, the static single assignment form is converted and split into the function-level syntax tree, and vulnerability detection is performed on the function-level syntax tree, so that compared with the prior art, the efficiency of finding out the code vulnerability of the smart contract from the function degree is improved.

Description

technical field [0001] The present application relates to the field of vulnerability detection, in particular to a method and device for vulnerability detection of smart contracts. Background technique [0002] With the development of social science and technology, blockchain technology has been widely used, in which a large number of smart contracts are applied to different fields, including financial services, public services, Internet of Things, etc. As the scope of application of smart contracts has increased and the functions implemented have become more complex, many serious vulnerabilities have emerged. [0003] In view of the vulnerability security problem of smart contracts, most of the current methods are artificial static analysis of smart contract code. Since the vulnerability code only accounts for a very small part of the entire smart contract code, the analysis of vulnerabilities requires huge operating costs and a lot of time. As a result, resources are wast...

AI Technical Summary

Problems solved by technology

As the application scope of smart contracts increases and the functions realized become more complex, many serious loopholes appear

[0003] Aiming at the vulnerability security of smart contracts, most of the current methods are artificial static analysis of smart contract codes. Since the vulnerability codes only account for a very small part of the entire smart contract code, it takes a huge operating cost and a lot of time to analyze the vulnerabilities. As a result, resources are wasted. How to improve the efficiency of finding code loopholes in smart contracts from the functional level is a concern of people.

Images