Analyzing Ethereum Smart Contract Vulnerabilities at Scale Based on Inter-Contract Dependency

Smart contracts running on public blockchains are permissionless and decentralized,attracting both developers and malicious participants.Ethereum,the world’s largest decentralized application platform on which more than 40 million smart contracts are running,is frequently challenged by smart contract vulnerabilities.What’s worse,since the homogeneity of a wide range of smart contracts and the increase in inter-contract dependencies,a vulnerability in a certain smart contract could affect a large number of other contracts in Ethereum.However,little is known about how vulnerable contracts affect other on-chain contracts and which contracts can be affected.Thus,we first present the contract dependency graph(CDG)to perform a vulnerability analysis for Ethereum smart contracts,where CDG characterizes inter-contract dependencies formed by DELEGATECALL-type internal transaction in Ethereum.Then,three generic definitions of security violations against CDG are given for finding respective potential victim contracts affected by different types of vulnerable contracts.Further,we construct the CDG with 195,247 smart contracts active in the latest blocks of the Ethereum and verify the above security violations against CDG by detecting three representative known vulnerabilities.Compared to previous large-scale vulnerability analysis,our analysis scheme marks potential victim contracts that can be affected by different types of vulnerable contracts,and identify their possible risks based on the type of security violation actually occurring.The analysis results show that the proportion of potential victim contracts reaches 14.7%,far more than that of corresponding vulnerable contracts(less than 0.02%)in CDG.

RSscore:Reaction superiority learned from reaction mapping hypergraph

The selection of chemical reactions is directly related to the quality of synthesis pathways,so a reasonable reaction evaluation metric plays a crucial role in the design and planning of synthesis pathways.Since reaction conditions also need to be considered in synthesis pathway design,a reaction metric that combines reaction time,temperature,and yield is required for chemical reactions of different reaction agents.In this study,a chemical reaction graph descriptor which includes the atom-atom mapping relationship is proposed to effectively describe reactions.Then,through pre-training using graph contrastive learning and fine-tuning through supervised learning,we establish a model for generating the probability of reaction superiority(RSscore).Finally,to validate the effectiveness of the current evaluation index,RSscore is applied in two applications,namely reaction evaluation and synthesis routes analysis,which proves that the RSscore provides an important agents-considered evaluation criterion for computer-aided synthesis planning(CASP).