arXiv:2506.06735cs.CRcs.AI2025-06被引 3

用AI检测智能合约漏洞,提升安全性和自动化水平。

Ai-Driven Vulnerability Analysis in Smart Contracts: Trends, Challenges and Future Directions

  • 结合机器学习与图神经网络分析代码结构和语义。
  • 可识别溢出、重入等常见漏洞,检测效果优于传统方法。
  • 适合区块链开发者与安全研究人员快速排查风险。

智能合约是区块链生态的核心,支持去中心化应用的自动执行。然而,数值溢出、重入攻击和权限错误等问题已导致数百万美元损失。传统审计手段如人工审查和形式化验证在可扩展性、自动化和适应新开发模式方面存在局限。为此,基于AI的检测技术应运而生,具备学习复杂模式、发现隐蔽缺陷和提供可扩展安全保障的能力。本文系统分析了机器学习、深度学习、图神经网络及基于Transformer的模型在智能合约漏洞检测中的应用,重点考察其代码表征方式、语义处理机制以及对实际漏洞类别的响应能力。进一步对比了各方法在准确率、可解释性、计算开销和实时适用性方面的优劣。最后,指出现有挑战与未来发展方向。

原文摘要 · Abstract (English)

Smart contracts, integral to blockchain ecosystems, enable decentralized applications to execute predefined operations without intermediaries. Their ability to enforce trustless interactions has made them a core component of platforms such as Ethereum. Vulnerabilities such as numerical overflows, reentrancy attacks, and improper access permissions have led to the loss of millions of dollars throughout the blockchain and smart contract sector. Traditional smart contract auditing techniques such as manual code reviews and formal verification face limitations in scalability, automation, and adaptability to evolving development patterns. As a result, AI-based solutions have emerged as a promising alternative, offering the ability to learn complex patterns, detect subtle flaws, and provide scalable security assurances. This paper examines novel AI-driven techniques for vulnerability detection in smart contracts, focusing on machine learning, deep learning, graph neural networks, and transformer-based models. This paper analyzes how each technique represents code, processes semantic information, and responds to real world vulnerability classes. We also compare their strengths and weaknesses in terms of accuracy, interpretability, computational overhead, and real time applicability. Lastly, it highlights open challenges and future opportunities for advancing this domain.

智能合约AI安全漏洞检测

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。