arXiv:2603.28128cs.LGcs.CR2026-03

用因果图增强的多模态模型,提升智能合约漏洞检测的准确与可解释性。

ORACAL: A Robust and Explainable Multimodal Framework for Smart Contract Vulnerability Detection with Causal Graph Enrichment

  • 融合控制流、数据流与调用图,用大模型补全安全上下文
  • 在主流数据集上达到91.28%宏F1,比现有方法高39.6个百分点
  • 生成漏洞触发路径解释,且抗攻击能力显著优于同类模型

尽管图神经网络在智能合约漏洞检测中展现潜力,但仍存在显著局限:同质图模型难以捕捉控制流与数据依赖的交互,异质图方法常缺乏深层语义理解,易受对抗攻击影响。此外,多数黑箱模型无法提供可解释证据,阻碍专业审计信任。为此,我们提出ORACAL(可观测RAG增强分析与因果推理),一种融合控制流图(CFG)、数据流图(DFG)与调用图(CG)的异质多模态图学习框架。ORACAL通过检索增强生成(RAG)和大语言模型(LLM)选择性地为关键子图注入专家级安全上下文,并采用因果注意力机制分离真实漏洞信号与虚假相关性。为保障透明性,框架引入PGExplainer生成子图级解释,识别漏洞触发路径。在大规模数据集上的实验表明,ORACAL性能达当前最优,在主基准测试中宏观F1高达91.28%,超越MANDO-HGT、MTVHunter、GNN-SC和SCVHunter最高39.6个百分点;在分布外数据集上仍保持强泛化能力,分别在CGT Weakness和DAppScan上达到91.8%和77.1%。可解释性评估中,PGExplainer对人工标注的漏洞触发路径实现32.51%的平均交并比(MIoU)。在对抗攻击下,ORACAL仅造成约2.35% F1下降,攻击成功率(ASR)仅为3%,显著优于SCVHunter和MANDO-HGT(ASR为10.91%至18.73%)。

原文摘要 · Abstract (English)

Although Graph Neural Networks (GNNs) have shown promise for smart contract vulnerability detection, they still face significant limitations. Homogeneous graph models fail to capture the interplay between control flow and data dependencies, while heterogeneous graph approaches often lack deep semantic understanding, leaving them susceptible to adversarial attacks. Moreover, most black-box models fail to provide explainable evidence, hindering trust in professional audits. To address these challenges, we propose ORACAL (Observable RAG-enhanced Analysis with CausAL reasoning), a heterogeneous multimodal graph learning framework that integrates Control Flow Graph (CFG), Data Flow Graph (DFG), and Call Graph (CG). ORACAL selectively enriches critical subgraphs with expert-level security context from Retrieval-Augmented Generation (RAG) and Large Language Models (LLMs), and employs a causal attention mechanism to disentangle true vulnerability indicators from spurious correlations. For transparency, the framework adopts PGExplainer to generate subgraph-level explanations identifying vulnerability triggering paths. Experiments on large-scale datasets demonstrate that ORACAL achieves state-of-the-art performance, outperforming MANDO-HGT, MTVHunter, GNN-SC, and SCVHunter by up to 39.6 percentage points, with a peak Macro F1 of 91.28% on the primary benchmark. ORACAL maintains strong generalization on out-of-distribution datasets with 91.8% on CGT Weakness and 77.1% on DAppScan. In explainability evaluation, PGExplainer achieves 32.51% Mean Intersection over Union (MIoU) against manually annotated vulnerability triggering paths. Under adversarial attacks, ORACAL limits performance degradation to approximately 2.35% F1 decrease with an Attack Success Rate (ASR) of only 3%, surpassing SCVHunter and MANDO-HGT which exhibit ASRs ranging from 10.91% to 18.73%.

智能合约漏洞检测可解释性因果推理

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。