Fetching the paper…
Reading the bibliography…
Smart contract vulnerabilities have led to significant financial losses, with their increasing complexity rendering outright prevention of hacks increasingly challenging.
Control flow analysis
Frances E Allen. 1970 · 1970
Earlier work this paper cites.
The program dependence graph and its use in optimization
Jeanne Ferrante, Karl J Ottenstein, and Joe D Warren. 1987 · 1987
Earlier work this paper cites.
The use of program dependence graphs in software engineering. In Proceedings of the 14th international conference on Software engineering . 392–411
Susan Horwitz and Thomas Reps. 1992 · 1992
Earlier work this paper cites.
Compilers: principles, techniques, & tools
Alfred V Aho, Monica S Lam, Ravi Sethi, and Jeffrey D Ullman. 2007 · 2007
Earlier work this paper cites.
Source code analysis: A road map
David Binkley. 2007 · 2007
Earlier work this paper cites.
Bitcoin: A peer-to-peer electronic cash system
Satoshi Nakamoto. 2008 · 2008
Earlier work this paper cites.
The graph traversal pattern
Marko A Rodriguez and Peter Neubauer. 2012 · 2012
Earlier work this paper cites.
Modeling and discovering vulnerabilities with code property graphs. In 2014 IEEE Symposium on Security and Privacy . IEEE, 590–604
Fabian Yamaguchi, Nico Golde, Daniel Arp, and Konrad Rieck. 2014 · 2014
Earlier work this paper cites.
The gremlin graph traversal machine and language (invited talk). In Proceedings of the 15th Symposium on Database Programming Languages . 1–10
Marko A Rodriguez. 2015 · 2015
Earlier work this paper cites.
Making smart contracts smarter. In Proceedings of the 2016 ACM SIGSAC conference on computer and communications security . 254–269
Loi Luu, Duc-Hiep Chu, Hrishi Olickel, Prateek Saxena, and Aquinas Hobor. 2016 · 2016
Earlier work this paper cites.
Online detection of effectively callback free objects with applications to smart contracts
Shelly Grossman, Ittai Abraham, Guy Golan-Gueta, Yan Michalevsky, Noam Rinetzky, Mooly Sagiv, and Yoni Zohar. 2017 · 2017
Earlier work this paper cites.
Contractfuzzer: Fuzzing smart contracts for vulnerability detection. In Proceedings of the 33rd ACM/IEEE International Conference on Automated Software Engineering . 259–269
Bo Jiang, Ye Liu, and Wing Kwong Chan. 2018 · 2018
Earlier work this paper cites.
Securify: Practical security analysis of smart contracts. In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security . 67–82
Petar Tsankov, Andrei Dan, Dana Drachsler-Cohen, Arthur Gervais, Florian Buenzli, and Martin Vechev. 2018 · 2018
Earlier work this paper cites.
Slither: a static analysis framework for smart contracts. In 2019 IEEE/ACM 2nd International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB) . IEEE, 8–15
Josselin Feist, Gustavo Grieco, and Alex Groce. 2019 · 2019
Earlier work this paper cites.
Manticore: A user-friendly symbolic execution framework for binaries and smart contracts. In 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE) . IEEE, 1186–1189
Mark Mossberg, Felipe Manzano, Eric Hennenfent, Alex Groce, Gustavo Grieco, Josselin Feist, Trent Brunson, and Artem Dinaburg. 2019 · 2019
Cited alongside, same era.
Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks. In NDSS
Michael Rodler, Wenting Li, Ghassan Karame, and Lucas Davi. 2019 · 2019
Cited alongside, same era.
SODA: A Generic Online Detection Framework for Smart Contracts.. In NDSS
Ting Chen, Rong Cao, Ting Li, Xiapu Luo, Guofei Gu, Yufei Zhang, Zhou Liao, Hang Zhu, Gang Chen, Zheyuan He, et al · 2020
Cited alongside, same era.
Ægis: Shielding vulnerable smart contracts against attacks. In Proceedings of the 15th ACM Asia Conference on Computer and Communications Security . 584–597
Christof Ferreira Torres, Mathis Baden, Robert Norvill, Beltran Borja Fiz Pontiveros, Hugo Jonker, and Sjouke Mauw. 2020 · 2020
Cited alongside, same era.
Practical Mitigation of Smart Contract Bugs
Jens-Rene Giesen, Sebastien Andreina, Michael Rodler, Ghassan O Karame, and Lucas Davi. 2022 · 2022
Later among the works it cites.
A Survey of DeFi Security: Challenges and Opportunities
Wenkai Li, Jiuyang Bu, Xiaoqi Li, Hongli Peng, Yuanzheng Niu, and Xianyi Chen. 2022 · 2022
Later among the works it cites.
Park: Accelerating smart contract vulnerability detection via parallel-fork symbolic execution. In Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis . 740–751
Peilin Zheng, Zibin Zheng, and Xiapu Luo. 2022 · 2022
Later among the works it cites.
SoK: Decentralized Finance (DeFi) Attacks
Liyi Zhou, Xihan Xiong, Jens Ernstberger, Stefanos Chaliasos, Zhipeng Wang, Ye Wang, Kaihua Qin, Roger Wattenhofer, Dawn Song, and Arthur Gervais. 2022 · 2022
Later among the works it cites.
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
sfuzz: An efficient adaptive fuzzer for solidity smart contracts. In Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering . 778–788
Tai D Nguyen, Long H Pham, Jun Sun, Yun Lin, and Quang Tran Minh. 2020 · 2020
Cited alongside, same era.
{ \{ TXSPECTOR } \} : Uncovering attacks in ethereum from transactions. In 29th USENIX Security Symposium (USENIX Security 20) . 2775–2792
Mengya Zhang, Xiaokuan Zhang, Yinqian Zhang, and Zhiqiang Lin. 2020 · 2020
Cited alongside, same era.
Shunfan Zhou, Malte Möser, Zhemin Yang, Ben Adida, Thorsten Holz, Jie Xiang, Steven Goldfeder, Yinzhi Cao, Martin Plattner, Xiaojun Qin, et al · 2020
Cited alongside, same era.
Compositional security for reentrant applications. In 2021 IEEE Symposium on Security and Privacy (SP) . IEEE, 1249–1267
Ethan Cecchetti, Siqiu Yao, Haobin Ni, and Andrew C Myers. 2021 · 2021
Cited alongside, same era.
Ethersolve: Computing an accurate control-flow graph from ethereum bytecode. In 2021 IEEE/ACM 29th International Conference on Program Comprehension (ICPC) . IEEE, 127–137
Filippo Contro, Marco Crosara, Mariano Ceccato, and Mila Dalla Preda. 2021 · 2021
Cited alongside, same era.
Dynamic vulnerability detection on smart contracts using machine learning. In Proceedings of the 25th International Conference on Evaluation and Assessment in Software Engineering . 305–312
Mojtaba Eshghie, Cyrille Artho, and Dilian Gurov. 2021 · 2021
Cited alongside, same era.
Smart Contract Vulnerabilities: Vulnerable Does Not Imply Exploited.. In USENIX Security Symposium . 1325–1341
Daniel Perez and Benjamin Livshits. 2021 · 2021
Cited alongside, same era.
Making smart contract development more secure and easier. In Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering . 1360–1370
Meng Ren, Fuchen Ma, Zijing Yin, Ying Fu, Huizhong Li, Wanli Chang, and Yu Jiang. 2021 · 2021
Cited alongside, same era.
Defitainter: Detecting price manipulation vulnerabilities in defi protocols. In Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis . 1144–1156
Queping Kong, Jiachi Chen, Yanlin Wang, Zigui Jiang, and Zibin Zheng. 2023 · 2023
Closest in time.
Enhancing Ethereum smart-contracts static analysis by computing a precise Control-Flow Graph of Ethereum bytecode
Michele Pasqua, Andrea Benini, Filippo Contro, Marco Crosara, Mila Dalla Preda, and Mariano Ceccato. 2023 · 2023
Closest in time.
The blockchain imitation game. In 32nd USENIX Security Symposium (USENIX Security 23) . 3961–3978
Kaihua Qin, Stefanos Chaliasos, Liyi Zhou, Benjamin Livshits, Dawn Song, and Arthur Gervais. 2023 · 2023
Closest in time.
DeFiRanger: Detecting DeFi Price Manipulation Attacks
Siwei Wu, Zhou Yu, Dabao Wang, Yajin Zhou, Lei Wu, Haoyu Wang, and Xingliang Yuan. 2023 · 2023
Closest in time.
Sok: Decentralized exchanges (dex) with automated market maker (amm) protocols
Jiahua Xu, Krzysztof Paruch, Simon Cousaert, and Yebo Feng. 2023 · 2023
Closest in time.
Demystifying exploitable bugs in smart contracts. In 2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE) . IEEE, 615–627
Zhuo Zhang, Brian Zhang, Wen Xu, and Zhiqiang Lin. 2023 · 2023
Closest in time.
Curve Conundrum: The dForce Attack via a Read-Only Reentrancy Vector Exploit
CertiK. [n. d.] · 2024
Closest in time.
Flashsyn: Flash loan attack synthesis via counter example driven approximation. In Proceedings of the IEEE/ACM 46th International Conference on Software Engineering . 1–13
Zhiyang Chen, Sidi Mohamed Beillahi, and Fan Long. 2024 · 2024
Closest in time.
Decoding Sentiment Protocol’s $1 Million Exploit | QuillAudits
QuillAudits. [n. d.] · 2024
Closest in time.
DeFort: Automatic Detection and Analysis of Price Manipulation Attacks in DeFi Applications. In Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis . 402–414
Maoyi Xie, Ming Hu, Ziqiao Kong, Cen Zhang, Yebo Feng, Haijun Wang, Yue Xue, Hao Zhang, Ye Liu, and Yang Liu. 2024 · 2024
Closest in time.