OnChainScan: An Online Blockchain Smart Contract Vulnerability Scanner

Avatar for Purnima Murali MOHAN
Purnima Murali MOHAN    
Associate Professor

Read More 

Avatar for Peter LOH
Peter LOH    
Associate Professor

Read More 

The Onchainscan project developed a machine learning-based approach for detecting vulnerabilities in smart contracts, leveraging features from Opcodes and Control Flow Graphs (CFGs). 

A standardised dataset was created across Solidity versions using AST-based bug injection and SWC classification, and it was published on the IEEE DataPort. The proposed MLP model achieved high accuracy while maintaining the lowest average False Positive Rate (FPR) among all evaluated tools and models, measured at 0.0125.

Project Deliverables/Outcomes/Impact
  • Onchainscan prototype, 1 publication in IEEE Access
  • Dataset published to IEEE data port
  • Project showcased in HTX Tech Xplore exhibit
A technical flowchart titled "ML Model Training" pipeline for smart contract analysis, showing stages from contract cleaning and bug injection to feature extraction and opcode simplification.