Abstract: Disclosed are a vulnerability detection method and device for a smart contract, and a storage medium. The method includes the following steps: constructing a control flowchart for the smart contract and collecting opcodes, operands, and opcodes in a static single assignment (SSA) form based on a call flow thereof; crawling application binary interfaces in a blockchain browser based on an address of the smart contract; using the opcodes and the operands as an input, and outputting function parameters; monitoring whether there are specified actions in functions to determine function attributes; and fusing the opcodes in the SSA form and the application binary interfaces or a concatenation form of the function parameters and the function attributes by an encoder, and obtaining existent vulnerability types by a decoder. With the technical solution of the present disclosure, semantic and function interface information in bytecodes is effectively used, and multi-label vulnerability detection is implemented.