arXiv:2508.01343cs.CRcs.AI2025-08被引 11

用图神经网络分析合约调用关系,精准识别未校验外部调用漏洞。

UEChecker: Detecting Unchecked External Call Vulnerabilities in DApps via Graph Analysis

  • 构建合约调用图,结合图卷积与多头注意力捕捉跨层级依赖
  • 在608个DApp上检测出87.59%的未校验外部调用漏洞
  • 相比GAT、LSTM等模型,准确率更高,适合安全审计人员使用

DApp合约层攻击导致经济损失达660亿美元。当合约调用外部协议却未验证返回结果时,会引发闪电贷攻击和重入攻击等漏洞。本文提出UEChecker,一种基于深度学习的漏洞检测工具,利用调用图与图卷积网络识别未校验外部调用漏洞。设计三个核心模块:边预测模块重构节点与边的特征表示;节点聚合模块融合节点及其邻居结构信息,增强全局理解;Conformer Block模块整合多头注意力、卷积与前馈网络,有效捕捉不同尺度的依赖关系,突破邻域限制。最终将模块与图卷积网络结合实现漏洞检测。对608个DApp的审计结果显示,本工具在检测未校验外部调用漏洞上准确率达87.59%。与GAT、LSTM、GCN等基线模型对比,UEChecker始终表现更优。

原文摘要 · Abstract (English)

The increasing number of attacks on the contract layer of DApps has resulted in economic losses amounting to $66 billion. Vulnerabilities arise when contracts interact with external protocols without verifying the results of the calls, leading to exploit entry points such as flash loan attacks and reentrancy attacks. In this paper, we propose UEChecker, a deep learning-based tool that utilizes a call graph and a Graph Convolutional Network to detect unchecked external call vulnerabilities. We design the following components: An edge prediction module that reconstructs the feature representation of nodes and edges in the call graph; A node aggregation module that captures structural information from both the node itself and its neighbors, thereby enhancing feature representation between nodes and improving the model's understanding of the global graph structure; A Conformer Block module that integrates multi-head attention, convolutional modules, and feedforward neural networks to more effectively capture dependencies of different scales within the call graph, extending beyond immediate neighbors and enhancing the performance of vulnerability detection. Finally, we combine these modules with Graph Convolutional Network to detect unchecked external call vulnerabilities. By auditing the smart contracts of 608 DApps, our results show that our tool achieves an accuracy of 87.59% in detecting unchecked external call vulnerabilities. Furthermore, we compare our tool with GAT, LSTM, and GCN baselines, and in the comparison experiments, UEChecker consistently outperforms these models in terms of accuracy.

智能合约漏洞检测图神经网络安全审计

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。