Guardians of the Ledger: Protecting Decentralized Exchanges from State Derailment Defects

TL;DR

This paper systematically studies state derailment defects in decentralized exchange smart contracts and introduces StateGuard, a deep learning framework using GCNs, to detect these defects with high accuracy, improving over existing methods.

Contribution

It defines five categories of state derailment defects, proposes a novel deep learning-based detection framework, and demonstrates its effectiveness on real-world DEX smart contracts.

Findings

StateGuard achieves 94.25% F1-score in defect detection.

It outperforms state-of-the-art methods by 6.29% F1-score.

Successfully identified multiple novel CVEs in real contracts.

Abstract

The decentralized exchange (DEX) leverages smart contracts to trade digital assets for users on the blockchain. Developers usually develop several smart contracts into one project, implementing complex logic functions and multiple transaction operations. However, the interaction among these contracts poses challenges for developers analyzing the state logic. Due to the complex state logic in DEX projects, many critical state derailment defects have emerged in recent years. In this paper, we conduct the first systematic study of state derailment defects in DEX. We define five categories of state derailment defects and provide detailed analyses of them. Furthermore, we propose a novel deep learning-based framework StateGuard for detecting state derailment defects in DEX smart contracts. It leverages a smart contract deconstructor to deconstruct the contract into an Abstract Syntax Tree (AST), from which five categories of dependency features are extracted. Next, it implements a graph optimizer to process the structured data. At last, the optimized data is analyzed by Graph Convolutional Networks (GCNs) to identify potential state derailment defects. We evaluated StateGuard through a dataset of 46 DEX projects containing 5,671 smart contracts, and it achieved 94.25% F1-score. In addition, in a comparison experiment with state-of-the-art, StateGuard leads the F1-score by 6.29%. To further verify its practicality, we used StateGuar to audit real-world contracts and successfully authenticated multiple novel CVEs.