diff --git a/README.md b/README.md index 048f46a..de855e1 100644 --- a/README.md +++ b/README.md @@ -1,630 +1,851 @@ # Academic Smart Contract Papers + A curated Smart Contract related academic papers. All papers are sorted based on the conference name and published year. -Welcome developers or researchers to add more published paper to this list. +Welcome developers or researchers to add more published paper to this list. ## Table of Listed Conferences -- [The ACM Symposium on Operating Systems Principles(SOSP)](#sosp) -- [USENIX Symposium on Operating Systems Design and Implementation(OSDI)](#osdi) + +- [ACM SIGSOFT Symposium on the Foundation of Software Engineering/European Software Engineering Conference(ESEC/FSE)](#ESEC/FSE) + +- [International Symposium on Software Testing and Analysis(ISSTA)](#issta) + +- [International Conference on Automated Software Engineering(ASE)](#ase) + +- [International Conference on Software Engineering(ICSE)](#icse) + +- [ACM Conference on Computer and Communications Security(CCS)](#ccs) + - [USENIX Security](#usenix-security) + - [IEEE Security and Privacy(S&P)](#sp) + - [Network and Distributed System Security(NDSS)](#ndss) -- [International Conference on Software Engineering(ICSE)](#icse) -- [ACM Conference on Computer and Communications Security(CCS)](#ccs) + +- [The ACM Symposium on Operating Systems Principles(SOSP)](#sosp) + +- [USENIX Symposium on Operating Systems Design and Implementation(OSDI)](#osdi) + - [IEEE International Conference on Computer Communications(INFOCOM)](#infocom) + - [IEEE/IFIP International Conference on Dependable Systems and Networks(DSN)](#dsn) + - [ACM SIGPLAN Conference on Programming Language Design&Implementation(PLDI)](#pldi) -- [International Conference on Automated Software Engineering(ASE)](#ase) -- [ACM SIGSOFT Symposium on the Foundation of Software Engineering/European Software Engineering Conference(ESEC/FSE)](#esec&fse) + - [European Symposium on Research in Computer Security(ESORICS)](#esorics) + - [IEEE International Conference on Software Analysis, Evolution and Reengineering(SANER)](#saner) + - [Object-Oriented Programming, Systems, Languages & Applications(OOPSLA)](#oopsla) + - [Annual Computer Security Applications Conference(ACSAC)](#acsac) + - [Asia-Pacific Software Engineering Conference(APSEC)](#apsec) + - [International World Wide Web Conference(WWW)](#www) -- [International Symposium on Software Testing and Analysis(ISSTA)](#issta) + - [IEEE International Conference on Distributed Computing Systems(ICDCS)](#icdcs) + - [ACM SIGPLAN Symposium on Principles of Programming Languages(POPL)](#popl) -- [others(OTHERS)](#others) + +- [Others(OTHERS)](#others) + - [License](#license) ------- +--- -## sosp +## ESEC/FSE -#### 2021 +### 2022 -[security] [Forerunner: Constraint-based Speculative Transaction Execution for Ethereum](https://www.microsoft.com/en-us/research/uploads/prod/2021/09/3477132.3483564.pdf).
-Yang Chen, Zhongxin Guo, Runhuai Li, Shuo Chen, Lidong Zhou, Yajin Zhou, and Xian Zhang. +[security] [An Empirical Study of Blockchain System Vulnerabilities: Modules, Types, and Patterns](). ------- +Xiao Yi, Daoyuan Wu, Lingxiao Jiang, Yuzhou Fang, Kehuan Zhang, Wei Zhang. -## osdi +[security] [Declarative Smart Contracts](https://arxiv.org/pdf/2207.13827.pdf). -#### 2021 +Haoxian Chen, Gerald Whitters, Mohammad Javad Amiri, Yuepeng Wang, Boon Thau Loo. -[security] [Finding Consensus Bugs in Ethereum via Multi-transaction Differential Fuzzing](https://www.usenix.org/system/files/osdi21-yang.pdf).
-Youngseok Yang, Seoul National University; Taesoo Kim, Georgia Institute of Technology; Byung-Gon Chun, Seoul National University and FriendliAI. +### 2021 ------- +~~[security] [Towards Practical and Cost-Effective Batching of Smart-Contract Invocations on Ethereum](). +Yibo Wang, Qi Zhang, Kai Li, Yuzhe Tang, Jiaqi Chen, Xiapu Luo, Ting Chen.~~ -## USENIX Security +[security] [ÐArcher: Detecting On-Chain-Off-Chain Synchronization Bugs in Decentralized Applications](https://dl.acm.org/doi/pdf/10.1145/3468264.3468546). -#### 2021 +Wuqi Zhang, Lili Wei, Shuqing Li, Yepang Liu, Shing-Chi Cheung. -[security] [Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications](https://www.usenix.org/system/files/sec21summer_su.pdf).
-Liya Su, Xinyue Shen, Xiaojing Liao, XiaoFeng Wang, Luyi Xing. +[application] [Making Smart Contract Development More Secure and Easier](https://dl.acm.org/doi/pdf/10.1145/3468264.3473929). -[security] [EOSAFE: Security Analysis of EOSIO Smart Contracts](http://sei.pku.edu.cn/~yaoguo/papers/He-Security-21.pdf).
-Ningyu He, Ruiyi Zhang, Lei Wu, Haoyu Wang, Xiapu Luo, Yao Guo, Ting Yu, Xuxian Jiang. +Meng Ren, Fuchen Ma, Zijing Yin, Ying Fu, Huizhong Li, Wanli Chang, Yu Jiang -[security] [SmarTest: Effectively Hunting Vulnerable Transaction Sequences in Smart Contracts through Language Model-Guided Symbolic Execution](http://prl.korea.ac.kr/~ssb920/papers/sec21.pdf).
-Sunbeom So, Seongjoon Hong, and Hakjoo Oh. +[application] [iBatch: Saving Ethereum Fees via Secure and Cost-Effective Batching of Smart-Contract Invocations](https://dl.acm.org/doi/pdf/10.1145/3468264.3468568). -[security] [Smart Contract Vulnerabilities: Vulnerable Does Not Imply Exploited](https://www.doc.ic.ac.uk/~livshits/papers/pdf/usenixsec21.pdf).
-Daniel Perez, Benjamin Livshits. +Yibo Wang, Kai Li, Yuzhe Tang, Jiaqi Chen, Qi Zhang, Xiapu Luo, Ting Chen. -[security] [EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts](https://www.usenix.org/system/files/sec21summer_rodler.pdf).
-Michael Rodler, University of Duisburg-Essen; Wenting Li and Ghassan O. Karame, NEC Laboratories Europe; Lucas Davi +### 2020 -[security] [Frontrunner Jones and the Raiders of the Dark Forest: An Empirical Study of Frontrunning on the Ethereum Blockchain](https://arxiv.org/abs/2102.03347).
-Christof Ferreira Torres, Ramiro Camino, Radu State. +[security] [Towards Automated Verification of Smart Contract Fairness](https://dl.acm.org/doi/pdf/10.1145/3368089.3409740). -#### 2020 +Ye Liu, Yi Li, Shang-Wei Lin, Rong Zhao. FSE/ESEC '2020 -[security] [ETHBMC: A Bounded Model Checker for Smart Contracts](https://www.usenix.org/system/files/sec20-frank.pdf).
-Joel Frank, Cornelius Aschermann, and Thorsten Holz. USENIX '20 Security Symposium. +[security] [ModCon: a model-based testing platform for smart contracts](https://dl.acm.org/doi/pdf/10.1145/3368089.3417939). -[security] [TXSPECTOR: Uncovering Attacks in Ethereum from Transactions](https://www.usenix.org/system/files/sec20-zhang-mengya.pdf).
-Mengya Zhang, Xiaokuan Zhang, Yinqian Zhang, and Zhiqiang Lin. USENIX '20 Security Symposium. +Ye Liu, Yi Li, Shang-Wei Lin, Qiang Yan. FSE/ESEC '2020 -[security] [An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem](https://www.usenix.org/system/files/sec20-zhou-shunfan.pdf).
-Shunfan Zhou, Zhemin Yang, and Jie Xiang, Yinzhi Cao,Min Yang and Yuan Zhang. USENIX '20 Security Symposium. +[security] [HARVEY:A Greybox Fuzzer for Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3368089.3417064). -#### 2019 +Valentin Wüstholz, Maria Christakis. FSE/ESEC '2020 -[security] [The art of the scam: Demystifying honeypots in ethereum smart contracts](https://www.usenix.org/system/files/sec19-torres.pdf).
-Torres C., Steichen M., State R. USENIX '19 Security Symposium. +### 2019 -[application] [FastKitten: Practical Smart Contracts on Bitcoin]().
-Poulami Das, Lisa Eckey, Tommaso Frassetto, David Gens, Kristina Hostáková, Patrick Jauernig, Sebastian Faust, and Ahmad-Reza Sadeghi. USENIX '19 Security Symposium. +[security] [EVMFuzzer: Detect EVM vulnerabilities via fuzz testing](https://dl.acm.org/doi/pdf/10.1145/3338906.3341175). -#### 2018 +Ying Fu, Meng Ren, Fuchen Ma, Heyuan Shi, Xin Yang, Yu Jiang, Huizhong Li, +Xiang Shi. FSE/ESEC '2019 -[security] [Erays: Reverse Engineering Ethereum's Opaque Smart Contracts](https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-zhou.pdf).
-Yi Zhou, Deepak Kumar, Surya Bakshi, Joshua Mason, Andrew Miller, and Michael Bailey. USENIX '18 Security Symposium. +[security] [A graph-based framework for analysing the design of smart contracts](https://dl.acm.org/doi/pdf/10.1145/3338906.3342495). -[security] [teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts](https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-krupp.pdf).
-Johannes Krupp and Christian Rossow. USENIX '18 Security Symposium. +Bram Vandenbogaerde. -[application] [Arbitrum: Scalable, private smart contracts](https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-kalodner.pdf).
-Harry Kalodner, Steven Goldfeder, Xiaoqi Chen, S. Matthew Weinberg, Edward W. Felten. USENIX '18 Security Symposium. +--- -[security] [Enter the Hydra: Towards principled bug bounties and exploit-resistant smart contracts](https://eprint.iacr.org/2017/1090.pdf).
-Breidenbach L,Daian P,Tramèr F. USENIX '18 Security Symposium. +## ISSTA ------- +### 2022 -## S&P +[security] [WASAI: uncovering vulnerabilities in Wasm smart contracts](https://dl.acm.org/doi/pdf/10.1145/3533767.3534218). -#### 2022 +Weimin Chen, Zihan Sun, Haoyu Wang, Xiapu Luo,Haipeng Cai ,Lei Wu. -[security] [Quantifying Blockchain Extractable Value: How dark is the forest?](https://arxiv.org/pdf/2101.05511.pdf)
-Kaihua Qin, Liyi Zhou, Arthur Gervais. +[security] [Finding permission bugs in smart contracts with role mining](https://dl.acm.org/doi/pdf/10.1145/3533767.3534372). -[security] [SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds](https://arxiv.org/pdf/2104.08638.pdf).
-Priyanka Bose, Dipanjan Das, Yanju Chen, Yu Feng, Christopher Kruegel, Giovanni Vigna. +Ye Liu,Yi Li,Shang-Wei Lin,Cyrille Artho. -#### 2021 +[security] [eTainter: detecting gas-related vulnerabilities in smart contracts](https://dl.acm.org/doi/pdf/10.1145/3533767.3534378). -[security] [SmartPulse: Automated Checking of Temporal Properties in Smart Contracts](https://www.microsoft.com/en-us/research/uploads/prod/2021/02/SmartPulse-Oakland21-preprint.pdf).
-Jon Stephens, Kostas Ferles, Benjamin Mariano, Shuvendu Lahiri, Isil Dillig. +Asem Ghaleb,Julia Rubin,Karthik Pattabiraman. -[security] [sGUARD: Towards Fixing Vulnerable Smart Contracts Automatically](https://arxiv.org/abs/2101.01917).
-Tai D. Nguyen, Long H. Pham, Jun Sun. IEEE S&P '21. +[security] [Park: accelerating smart contract vulnerability detection via parallel-fork symbolic execution](https://dl.acm.org/doi/pdf/10.1145/3533767.3534395). -[finance] [On the Just-In-Time Discovery of Profit-Generating Transactions in DeFi Protocols]().
-Liyi Zhou, Kaihua Qin, Antoine Cully, Benjamin Livshits, Arthur Gervais. +Peilin Zheng, Zibin Zheng, Xiapu Luo. -[security] [Compositional Security for Reentrant Applications](https://arxiv.org/abs/2103.08577).
-Ethan Cecchetti, Siqiu Yao, Haobin Ni, Andrew C. Myers. +[security] [SmartDagger: a bytecode-based static analysis approach for detecting cross-contract vulnerability](https://dl.acm.org/doi/pdf/10.1145/3533767.3534222). -[security] [High-Frequency Trading on Decentralized On-Chain Exchanges](https://arxiv.org/pdf/2009.14021.pdf).
-Liyi Zhou, Kaihua Qin, Christof Ferreira Torres, Duc V Le, Arthur Gervais. +Zeqin Liao, Zibin Zheng, Xiao Chen, Yuhong Nan. -#### 2020 +### 2021 -[security] [Flash Boys 2.0: Frontrunning in Decentralized Exchanges, Miner Extractable Value, and Consensus Instability](https://par.nsf.gov/servlets/purl/10159474).
-Philip Daian, Steven Goldfeder, T. Kell, Yunqi Li, Xueyuan Zhao, Iddo Bentov, Lorenz Breidenbach, A. Juels. +[security] [Empirical Evaluation of Smart Contract Testing: What Is the Best Choice?](https://dl.acm.org/doi/pdf/10.1145/3460319.3464837). -[security] [VerX: Safety Verification of Smart Contracts]().
-Anton Permenev, Dimitar Dimitrov, Petar Tsankov, Dana Drachsler-Cohen, Martin Vechev. IEEE S&P '20. +Meng Ren, Zijing Yin, Fuchen Ma, Zhenyang Xu, Yu Jiang, Chengnian Sun, Huizhong Li, Yan Cai. -[security] [VeriSmart: A Highly Precise Safety Verifier for Ethereum Smart Contracts]().
-Sunbeom So, Myungho Lee, Jisu Park, Heejo Lee, Hakjoo Oh. IEEE S&P '20. +### 2020 -[security] [Executable Operational Semantics of Solidity](https://arxiv.org/pdf/1804.01295.pdf).
-Jiao Jiao, Shuanglong Kan, Shang-Wei Lin, David Sanan, Yang Liu, Jun Sun. IEEE S&P '20. +[security] [How effective are smart contract analysis tools? evaluating smart contract static analysis tools using bug injection](https://dl.acm.org/doi/abs/10.1145/3395363.3397385). -#### 2016 +Asem Ghaleb, Karthik Pattabiraman. -[application] [Hawk: The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts](https://eprint.iacr.org/2015/675.pdf).
-Kosba A, Miller A, Shi E, Wen Z, Papamanthou C. S&P '16 +[security] [Echidna: effective, usable, and fast fuzzing for smart contracts](https://dl.acm.org/doi/abs/10.1145/3395363.3404366). ------- +Gustavo Grieco, Will Song, Artur Cygan, Josselin Feist, Alex Groce. -## NDSS +[security] [EShield: protect smart contracts against reverse engineering](https://dl.acm.org/doi/pdf/10.1145/3395363.3404365). -#### 2021 +Wentian Yan, Jianbo Gao, Zhenhao Wu, Yue Li, Zhi Guan, Qingshan Li, Zhong Chen. -[application] [Bitcontracts: Supporting Smart Contracts in Legacy Blockchains]().
-Karl Wüst, Loris Diana, and Kari Kostiainen (ETH Zurich); Ghassan Karame; Sinisa Matetic and Srdjan Capkun (ETH Zurich) +### 2019 -[Sercurity] [As Strong As Its Weakest Link: How to Break Blockchain DApps at RPC Service](https://www.ndss-symposium.org/wp-content/uploads/ndss2021_3C-1_23108_paper.pdf).
-Kai Li, Jiaqi Chen, Xianghong Liu, and Yuzhe Tang; XiaoFeng Wang; Xiapu Luo +[security] [SAFEVM: a safety verifier for Ethereum smart contracts](https://dl.acm.org/doi/pdf/10.1145/3293882.3338999). -[Sercurity] [SquirRL: Automating Attack Analysis on Blockchain Incentive Mechanisms with Deep Reinforcement Learning](https://arxiv.org/abs/1912.01798).
-Charlie Hou; Mingxun Zhou; Yan Ji and Phil Daian; Florian Tramèr; Giulia Fanti; Ari Juels +Elvira Albert, Jesús Correasl, Pablo Gordillo, Guillermo Román-Díez, Albert Rubio. ISSTA '2019 -#### 2020 +[security] [Exploiting the laws of order in smart contracts](https://dl.acm.org/doi/pdf/10.1145/3293882.3330560). -[security] [SODA: A Generic Online Detection Framework for Smart Contracts](https://www.ndss-symposium.org/wp-content/uploads/2020/02/24449-paper.pdf).
-Ting Chen, Rong Cao, Ting Li, Xiapu Luo, Guofei Gu, Yufei Zhang, Zhou Liao, Hang Zhu, Gang Chen, Zheyuan He, Yuxing Tang, Xiaodong Lin, and Xiaosong Zhang. NDSS '20. +Kolluri ANikolic,Ivica Nikolic, Ilya Sergey, Aquinas Hobor, Prateek Saxena. ISSTA '2019 -[security] [Broken Metre: Attacking Resource Metering in EVM](https://arxiv.org/pdf/1909.07220.pdf).
-Daniel Perez, and Benjamin Livshits. NDSS '20. +--- -#### 2019 +## ASE -[security] [Seth: Protecting Existing Smart Contracts Against Re-Entrancy Attacks](https://arxiv.org/pdf/1812.05934.pdf).
-Michael Rodler, Wenting Li and Ghassan Karame, Lucas Davi. NDSS '19. +### 2022 -[security] [YODA: Enabling computationally intensive contracts on blockchains with Byzantine and Selfish nodes](https://arxiv.org/pdf/1811.03265.pdf).
-Sourav Das, Vinay Joseph Ribeiro, and Abhijeet Anand. NDSS '19. +[security] [Reentrancy Vulnerability Detection and Localization: A Deep Learning Based Two-phase Approach](). -[security] [Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks]().
-Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi. +Zhuo Zhang, Yan Lei, Meng Yan, Yue Yu, Jiachi Chen, Shangwen Wang, Xiaoguang Mao. -#### 2018 +[security] [Identifying Solidity Smart Contract API Documentation Errors](https://personal.ntu.edu.sg/yi_li/files/Zhu2022ISS.pdf). -[security] ["Zeus": Analyzing Safety of Smart Contracts](http://wp.internetsociety.org/ndss/wp-content/uploads/sites/25/2018/02/ndss2018_09-1_Kalra_paper.pdf).
-Kalra S, Goel S, Dhawan M, Sharma S. NDSS '18. +Chenguang Zhu, Ye Liu, Xiuheng Wu, and Yi Li. -[security] [Chainspace: A Sharded Smart Contracts Platform]().
-Mustafa Al-Bassam, Alberto Sonnino, Shehar Bano, Dave Hrycyszyn, George Danezis. +### 2021 ------- +[security] [GASOL: Gas Analysis and Optimization for Ethereum Smart Contracts](https://arxiv.org/pdf/1912.11929.pdf). + +Elvira Albert, Jesús Correas, Pablo Gordillo, Guillermo Román-Díez, Albert Rubio. + +[security] [Automating User Notice Generation for Smart Contract Functions](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9678552). + +Xing Hu, Zhipeng Gao, Xin Xia, David Lo, Xiaohu Yang. + +[security] [Characterizing Transaction-Reverting Statements in Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9678597). + +Lu Liu, Lili Wei, Wuqi Zhang, Ming Wen, Yepang Liu, Shing-Chi Cheung. + +[security] [SMARTIAN: Enhancing Smart Contract Fuzzing with Static and Dynamic Analyses](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9678888). + +Jaeseung Choi, Doyeon Kim, Soomin Kim, Gustavo Grieco, Alex Groce, Sang Kil Cha. + +[security] [SigRec: Automatic Recovery of Function Signatures in Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9426396). + +Ting Chen, zihao li, Xiapu Luo, XiaoFeng Wang, Ting Wang, Hongwei Li, Xiaosong Zhang. + +### 2020 + +[security] [Cross-Contract Static Analysis for Detecting Practical Reentrancy Vulnerabilities in Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9286095). + +Yinxing Xue, Mingliang Ma, Yun Lin, Yulei Sui, Jiaming Ye, Tianyong Peng. ASE '2020 + +[security] [Demystifying Loops in Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3324884.3416626). + +Benjamin Mariano, Yanju Chen, Yu Feng, Shuvendu K. Lahiri, Isil Dillig. ASE '2020 + +[security] [Summary-Based Symbolic Evaluation for Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9286081). + +Yu Feng, Emina Torlak, Rastislav Bodik. ASE '2020 + +[security] [Finding Ethereum Smart Contracts Security Issues by Comparing History Versions](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9286004). + +Jiachi Chen. ASE '2020 + +### 2019 + +[security] [Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8952204). + +Mark Mossberg, Felipe Manzano, Eric Hennenfent, Alex Groce, Gustavo Grieco, Josselin Feist, Trent Brunson, Artem Dinaburg. + +[security] [MuSC: A Tool for Mutation Testing of Ethereum Smart Contract](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8952206). + +Zixin Li, Haoran Wu, Jiehui Xu, Xingya Wang, Lingming Zhang, Zhenyu Chen. + +[security] [Securing Smart Contracts in Blockchain](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8967424). + +Jaturong Kongmanee, Phongphun Kijsanayothin, Rattikorn Hewett. + +### 2018 + +[security] [ContractFuzzer: Fuzzing Smart Contracts for Vulnerability](https://dl.acm.org/doi/pdf/10.1145/3238147.3238177). + +Bo Jiang, Ye Liu, W.K. Chan. ASE '2018 + +[security] [S-gram: towards semantic-aware security auditing for Ethereum smart contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9000031). + +Han Liu, Chao Liu, Wenqi Zhao, Yu Jiang, Jiaguang Sun. + +--- + +## ICSE + +### 2022 + +[security] [Utilizing Parallelism in Smart Contracts on Decentralized Blockchains by Taming Application-Inherent Conflicts](https://dl.acm.org/doi/pdf/10.1145/3510003.3510086). + +Péter Garamvölgyi, Yuxi Liu, Dong Zhou, Fan Long, Ming Wu. + +### 2021 + +[security] [Smart Contract Security: a Practitioners’ Perspective](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9402082). + +Zhiyuan Wan, Xin Xia, David Lo, Jiachi Chen, Xiapu Luo, Xiaohu Yang. + +### 2020 + +[security] [Empirical Review of Automated Analysis Tools on 47,587 Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9284023). + +Thomas Durieux, João F. Ferreira, Rui Abreu, Pedro Cruz. + +[security] [sFuzz-An Efficient Adaptive Fuzzer for Solidity Smart Contracts](https://arxiv.org/pdf/2004.08563.pdf). + +Tai D. Nguyen, Long H. Pham, Jun Sun, Yun Lin, Quang Tran Minh. + +[security] [Smart Contract Development: Challenges and Opportunities](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8847638). + +Weiqin Zou, David Lo, Pavneet Singh Kochhar, Xuan-Bach D. Le, Xin Xia, Yang Feng, Zhenyu Chen, Baowen Xu. + +[security] [Targeted Greybox Fuzzing with Static Lookahead Analysis](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9284040). + +Valentin Wüstholz, Maria Christakis. + +[security] [Gap between Theory and Practice : An Empirical Study of Security Patches in Solidity](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9283944). + +Sungjae Hwang, Sukyoung Ryu + +[security] [Seraph: Enabling Cross-Platform Security Analysis For EVM and WASM Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9270363). + +Z Yang + +### 2019 + +[security] [Gigahorse: Thorough, Declarative Decompilation of Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8811905). + +Neville Grech, Lexi Brent, Bernhard Scholz, Yannis Smaragdakis. + +[security] [VULTRON: Catching Vulnerable Smart Contracts Once and for All](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8805696). + +Haijun Wang, Yi Li, Shang-Wei Lin, Lei Ma, Yang Liu. + +### 2018 + +[security] [ReGuard: Finding Reentrancy Bugs in Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8805696). + +Chao Liu, Han Liu, Zhao Cao, Zhong Chen, Bangdao Chen, Bill Roscoe. + +--- ## CCS -#### 2022 +### 2022 + +[security] [Empirical Analysis of EIP-1559: Transaction Fees, Waiting Time, and Consensus Security](https://arxiv.org/pdf/2201.05574.pdf). -[security] [Empirical Analysis of EIP-1559: Transaction Fees, Waiting Time, and Consensus Security](https://arxiv.org/pdf/2201.05574.pdf).
Liu, Yulin ; Lu, Yuxuan ; Nayak, Kartik ; Zhang, Fan ; Zhang, Luyao search by orcid ; Zhao, Yinhong. -[security] [Towards Automated Safety Vetting of Smart Contracts in Decentralized Applications](https://yueduan.github.io/pub/smart_contracts_analysis__ccs22.pdf).
+[security] [Towards Automated Safety Vetting of Smart Contracts in Decentralized Applications](https://yueduan.github.io/pub/smart_contracts_analysis__ccs22.pdf). + Yue Duan, Xin Zhao, Yu Pan, Shucheng Li, Minghao Li, Fengyuan Xu, and Mu Zhang. -[security] [VRust: Automated Vulnerability Detection for Solana Smart Contracts]().
+[security] [VRust: Automated Vulnerability Detection for Solana Smart Contracts](). + Siwei Cui,Gang Zhao,Yifei Gao,Tien Tavu,Jeff Huang. -[security] [Understanding Security Issues in the NFT Ecosystem](https://arxiv.org/pdf/2111.08893.pdf).
+[security] [Understanding Security Issues in the NFT Ecosystem](https://arxiv.org/pdf/2111.08893.pdf). + Dipanjan Das, Priyanka Bose, Nicola Ruaro, Christopher Kruegel, Giovanni Vigna. -#### 2021 +### 2021 + +[security] [DETER: Denial of Ethereum Txpool sERvices](https://dl.acm.org/doi/pdf/10.1145/3460120.3485369). -[security] [DETER: Denial of Ethereum Txpool sERvices]().
-K. Li, Y. Wang, Yuzhe Tang. +Kai Li, Yibo Wang, Yuzhe Tang. -#### 2020 +### 2020 -[security] [ACE: Asynchronous and Concurrent Execution of Complex Smart Contracts]().
CCS '2020 +[security] [ACE: Asynchronous and Concurrent Execution of Complex Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3372297.3417243). + CCS '2020 Karl Wüst, Sinisa Matetic, Silvan Egli, Kari Kostiainen, Srdjan Capkun. -[security] [eThor: Practical and Provably Sound Static Analysis of Ethereum Smart Contracts]().
CCS '2020. -Clara Schneidewind, Ilya Grishchenko, Markus Scherer, Matteo Maffei. +[security] [eThor: Practical and Provably Sound Static Analysis of Ethereum Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3372297.3417250). -#### 2019 +Clara Schneidewind, Ilya Grishchenko, Markus Scherer, Matteo Maffei. CCS '2020. + +### 2019 + +[SoftwareAnalysis] [TokenScope: Automatically Discovering Inconsistent Cryptocurrency Tokens](https://dl.acm.org/doi/pdf/10.1145/3319535.3345664). -[SoftwareAnalysis] [TokenScope: Automatically Discovering Inconsistent Cryptocurrency Tokens](http://www4.comp.polyu.edu.hk/~csxluo/TokenScope.pdf).
Ting Chen ,Yufei Zhang ,Zihao Li, Xiapu Luo,Ting Wang,Rong Cao,Xiuzhuo Xiao,Xiaosong Zhang . CCS '19. -[security] [Learning to Fuzz from Symbolic Execution with Application to Smart Contracts](https://files.sri.inf.ethz.ch/website/papers/ccs19-ilf.pdf).
-Jingxuan He, Mislav Balunovic, Nodar Ambroladze, Petar Tsankov, Martin Vechev. CCS '19. +[security] [Learning to Fuzz from Symbolic Execution with Application to Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3319535.3363230). + +Jingxuan He, Mislav Balunovic, Nodar Ambroladze, Petar Tsankov, Martin Vechev. CCS '19. -[security] [Zkay: Specifying and Enforcing Data Privacy in Smart Contracts](https://files.sri.inf.ethz.ch/website/papers/ccs19-zkay.pdf).
-Samuel Steffen, Benjamin Bichsel, Mario Gersbach , Noa Melchior , Petar Tsankov, Martin T Vechev. CCS '19. +[security] [Zkay: Specifying and Enforcing Data Privacy in Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3319535.3363222). -#### 2018 +Samuel Steffen, Benjamin Bichsel, Mario Gersbach , Noa Melchior , Petar Tsankov, Martin T Vechev. CCS '19. -[security] [CHECKMATE: Practical Security Analysis of Smart Contracts]().
-Petar Tsankov (ETH Zurich), Andrei Marian Dan (ETH Zurich), Dana Drachsler Cohen (ETH Zurich), Arthur Gervais (Imperial College London), Florian Buenzli (ETH Zurich), Martin Vechev (ETH Zurich) +### 2018 + +[security] [Securify: Practical Security Analysis of Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3243734.3243780). -[security] [Securify: Practical Security Analysis of Smart Contracts](https://arxiv.org/pdf/1806.01143.pdf).
Petar Tsankov, Andrei Dan, Dana Drachsler Cohen, Arthur Gervais, Florian Buenzli, Martin Vechev. CCS '18. -[security] [BitML: a calculus for Bitcoin smart contracts Massimo]().
+[security] [BitML: a calculus for Bitcoin smart contracts Massimo](https://dl.acm.org/doi/pdf/10.1145/3243734.3243795). + Bartoletti, Roberto Zunino. -#### 2017 +### 2017 + +[security] [Betrayal, Distrust, and Rationality: Smart Counter-Collusion Contracts for Verifiable Cloud Computing](https://dl.acm.org/doi/pdf/10.1145/3133956.3134032). -[security] [Betrayal, Distrust, and Rationality: Smart Counter-Collusion Contracts for Verifiable Cloud Computing]().
Changyu Dong, Yilei Wang, Amjad Aldweesh, Patrick McCorry, Aad van Moorsel. -#### 2016 +### 2016 + +[security] [Making Smart Contracts Smarter](https://dl.acm.org/doi/pdf/10.1145/2976749.2978309). -[security] [Making Smart Contracts Smarter](https://www.comp.nus.edu.sg/~loiluu/papers/oyente.pdf).
-Luu L, Chu DH, Olickel H, Saxena P, Hobor A. CCS '16. +Loi Luu, Duc-Hiep Chu, Hrishi Olickel, Prateek Saxena, Aquinas Hobor. CCS '16. + +[security] [Formal verification of smart contracts: Short paper](https://dl.acm.org/doi/10.1145/2993600.2993611). -[security] [Formal verification of smart contracts: Short paper](https://hal.inria.fr/hal-01400469/document).
Bhargavan K,Delignat-Lavaud A,Fournet C. CCS '16. -[security] [Town crier: An authenticated data feed for smart contracts](http://delivery.acm.org/10.1145/2980000/2978326/p270-zhang.pdf?ip=46.176.188.9&id=2978326&acc=OA&key=4D4702B0C3E38B35%2E4D4702B0C3E38B35%2E4D4702B0C3E38B35%2E594C525CFFA2AFAF&CFID=923932938&CFTOKEN=56121949&__acm__=1492299159_38039f3afa858f241818fdcf190e0200).
-Zhang F, Cecchetti E, Croman K, Juels A, Shi E. CCS '16. +[security] [Town crier: An authenticated data feed for smart contracts](https://dl.acm.org/doi/pdf/10.1145/2976749.2978326). ------- +Fan Zhang, Ethan Cecchetti, Kyle Croman, Ari Juels, Elaine Shi. CCS '16. -## ICSE +--- -#### 2022 -[security] [Utilizing Parallelism in Smart Contracts on Decentralized Blockchains by Taming Application-Inherent Conflicts]().
-Péter Garamvölgyi, Yuxi Liu, Dong Zhou, Fan Long, Ming Wu. +## USENIX Security -#### 2021 +### 2021 -[security] [Smart Contract Security: a Practitioners’ Perspective]().
-Zhiyuan Wan, Xin Xia, David Lo, Jiachi Chen, Xiapu Luo, Xiaohu Yang +[security] [Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications](https://www.usenix.org/system/files/sec21summer_su.pdf). -#### 2020 +Liya Su, Xinyue Shen, Xiaojing Liao, XiaoFeng Wang, Luyi Xing. -[security] [Empirical Review of Automated Analysis Tools on 47,587 Ethereum Smart Contracts](https://arxiv.org/pdf/1910.10601.pdf).
-T Durieux, JF Ferreira, R Abreu, P Cruz. +[security] [EOSAFE: Security Analysis of EOSIO Smart Contracts](http://sei.pku.edu.cn/~yaoguo/papers/He-Security-21.pdf). -[security] [sFuzz-An Efficient Adaptive Fuzzer for Solidity Smart Contracts](https://arxiv.org/pdf/2004.08563.pdf).
-TD Nguyen, LH Pham, J Sun, Y Lin, QT Minh. +Ningyu He, Ruiyi Zhang, Lei Wu, Haoyu Wang, Xiapu Luo, Yao Guo, Ting Yu, Xuxian Jiang. -[security] [Smart Contract Development: Challenges and Opportunities](https://xin-xia.github.io/publication/tse196.pdf).
-Weiqin Zou, David Lo, Pavneet Singh Kochhar, Xuan-Bach D. Le, Xin Xia, Yang Feng, Zhenyu Chen, Baowen Xu. +[security] [SmarTest: Effectively Hunting Vulnerable Transaction Sequences in Smart Contracts through Language Model-Guided Symbolic Execution](http://prl.korea.ac.kr/~ssb920/papers/sec21.pdf). -[security] [Targeted Greybox Fuzzing with Static Lookahead Analysis]().
-Valentin Wüstholz, Maria Christakis. +Sunbeom So, Seongjoon Hong, and Hakjoo Oh. -[security] [Empirical Review of Automated Analysis Tools on 47,587 Ethereum Smart Contracts]().
-Thomas Durieux, João F. Ferreira, Rui Abreu, Pedro Cruz. +[security] [Smart Contract Vulnerabilities: Vulnerable Does Not Imply Exploited](https://www.doc.ic.ac.uk/~livshits/papers/pdf/usenixsec21.pdf). -[security] [Gap between Theory and Practice : An Empirical Study of Security Patches in Solidity]().
-Sungjae Hwang, Sukyoung Ryu +Daniel Perez, Benjamin Livshits. -[security] [Seraph: Enabling Cross-Platform Security Analysis For EVM and WASM Smart Contracts]().
-Z Yang +[security] [EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts](https://www.usenix.org/system/files/sec21summer_rodler.pdf). -#### 2019 +Michael Rodler, University of Duisburg-Essen; Wenting Li and Ghassan O. Karame, NEC Laboratories Europe; Lucas Davi -[security] [Gigahorse: Thorough, Declarative Decompilation of Smart Contracts](https://ieeexplore.ieee.org/document/8811905/).
-Grech NBrent LScholz BSmaragdakis Y. +[security] [Frontrunner Jones and the Raiders of the Dark Forest: An Empirical Study of Frontrunning on the Ethereum Blockchain](https://arxiv.org/abs/2102.03347). -[security] [VULTRON: Catching Vulnerable Smart Contracts Once and for All](https://ieeexplore.ieee.org/document/8811905/).
-Haijun Wang, Yi Li, Shang-Wei Lin, Lei Ma, Yang Liu. +Christof Ferreira Torres, Ramiro Camino, Radu State. -#### 2018 +### 2020 -[security] [ReGuard: Finding Reentrancy Bugs in Smart Contracts]().
-Chao Liu, Han Liu, Zhao Cao, Zhong Chen, Bangdao Chen, Bill Roscoe. +[security] [ETHBMC: A Bounded Model Checker for Smart Contracts](https://www.usenix.org/system/files/sec20-frank.pdf). ------- +Joel Frank, Cornelius Aschermann, and Thorsten Holz. USENIX '20 Security Symposium. -## INFOCOM +[security] [TXSPECTOR: Uncovering Attacks in Ethereum from Transactions](https://www.usenix.org/system/files/sec20-zhang-mengya.pdf). + +Mengya Zhang, Xiaokuan Zhang, Yinqian Zhang, and Zhiqiang Lin. USENIX '20 Security Symposium. -#### 2021 +[security] [An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem](https://www.usenix.org/system/files/sec20-zhou-shunfan.pdf). -[application] [Counter-Collusion Smart Contracts for Watchtowers in Payment Channel Networks]().
-Yuhui Zhang, Dejun Yang, Guoliang Xue, Ruozhou Yu. +Shunfan Zhou, Zhemin Yang, and Jie Xiang, Yinzhi Cao,Min Yang and Yuan Zhang. USENIX '20 Security Symposium. -[mine] [Characterizing Ethereum's Mining Power Decentralization at a Deeper Level]().
-Liyi Zeng, Yang Chen, Shuo Chen, Zhongxin Guo. +### 2019 -#### 2020 +[security] [The art of the scam: Demystifying honeypots in ethereum smart contracts](https://www.usenix.org/system/files/sec19-torres.pdf). -[application] [ET-DeaL: A P2P Smart Contract-based Secure Energy Trading Scheme for Smart Grid Systems]().
-Aparna Kumari, Arpit Shukla, Rajesh Gupta, Sudeep Tanwar, Sudhanshu Tyagi, Neeraj Kumar. +Torres C., Steichen M., State R. USENIX '19 Security Symposium. -[application] [A Solution for State Conflicts of Smart Contract in Interaction with Non-blockchain]().
-Hong Su, Bing Guo, Yan Shen, Tao Li, Chaoxia Qing, Zhen Zhang. +[application] [FastKitten: Practical Smart Contracts on Bitcoin](). -[application] [ChainIDE 2.0: Facilitating Smart Contract Development for Consortium Blockchain]().
-Xiao Wu, Han Qiu, Shuyi Zhang, Gérard Memmi, Keke Gai, Wei Cai. +Poulami Das, Lisa Eckey, Tommaso Frassetto, David Gens, Kristina Hostáková, Patrick Jauernig, Sebastian Faust, and Ahmad-Reza Sadeghi. USENIX '19 Security Symposium. -[application] [EncELC: Hardening and Enriching Ethereum Light Clients with Trusted Enclaves]().
-Chengjun Cai, Lei Xu, Anxin Zhou, Ruochen Wang, Cong Wang, Qian Wang. +### 2018 -#### 2019 +[security] [Erays: Reverse Engineering Ethereum's Opaque Smart Contracts](https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-zhou.pdf). + +Yi Zhou, Deepak Kumar, Surya Bakshi, Joshua Mason, Andrew Miller, and Michael Bailey. USENIX '18 Security Symposium. -[application] [Interledger Smart Contracts for Decentralized Authorization to Constrained Things]().
-Vasilios A. Siris, Dimitrios Dimopoulos, Nikos Fotiou, Spyros Voulgaris, George C. Polyzos. +[security] [teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts](https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-krupp.pdf). + +Johannes Krupp and Christian Rossow. USENIX '18 Security Symposium. -#### 2018 +[application] [Arbitrum: Scalable, private smart contracts](https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-kalodner.pdf). + +Harry Kalodner, Steven Goldfeder, Xiaoqi Chen, S. Matthew Weinberg, Edward W. Felten. USENIX '18 Security Symposium. -[graph analysis] [Understanding ethereum via graph analysis](https://www4.comp.polyu.edu.hk/~csxluo/EthereumGraphAnalysis.pdf).
-Ting Chen,Yuxiao Zhu, Zihao Li, Jiachi Chen, Xiaoqi Li, Xiapu Luo, Xiaodong Lin, Xiaodong Lin. INFOCOM'18 +[security] [Enter the Hydra: Towards principled bug bounties and exploit-resistant smart contracts](https://eprint.iacr.org/2017/1090.pdf). + +Breidenbach L,Daian P,Tramèr F. USENIX '18 Security Symposium. ------ -## DSN +## S&P -#### 2020 +### 2022 -[security] [SMACS: Smart Contract Access Control Service](https://arxiv.org/abs/2003.07495).
-Bowen Liu, Siwei Sun, Pawel Szalachowski. DSN '20 +[security] [Quantifying Blockchain Extractable Value: How dark is the forest?](https://arxiv.org/pdf/2101.05511.pdf) + +Kaihua Qin, Liyi Zhou, Arthur Gervais. -[security] [Data-Driven Model-Based Analysis of the Ethereum Verifier's Dilemma](https://arxiv.org/pdf/2004.12768.pdf).
-Maher Alharby, Roben Lunardi, Amjad Aldweesh, Aad van Moorsel. DSN '20 +[security] [SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds](https://arxiv.org/pdf/2104.08638.pdf). + +Priyanka Bose, Dipanjan Das, Yanju Chen, Yu Feng, Christopher Kruegel, Giovanni Vigna. -[security] [Smart Contracts on the Move](https://arxiv.org/pdf/2004.05933.pdf).
-Enrique Fynn, Alysson Bessani, Fernando Pedone. DSN '20 +### 2021 -[mine] [Impact of Geo-Distribution and Mining Pools on Blockchains: A Study of Ethereum](https://arxiv.org/pdf/2004.05933.pdf).
-Paulo Silva, David Vavricka, João Barreto, Miguel Matos. DSN '20 +[security] [SmartPulse: Automated Checking of Temporal Properties in Smart Contracts](https://www.microsoft.com/en-us/research/uploads/prod/2021/02/SmartPulse-Oakland21-preprint.pdf). + +Jon Stephens, Kostas Ferles, Benjamin Mariano, Shuvendu Lahiri, Isil Dillig. -#### 2019 +[security] [sGUARD: Towards Fixing Vulnerable Smart Contracts Automatically](https://arxiv.org/abs/2101.01917). + +Tai D. Nguyen, Long H. Pham, Jun Sun. IEEE S&P '21. -[application] [FabZK: Supporting Privacy-Preserving, Auditable Smart Contracts in Hyperledger Fabric]().
-Hui Kang, Ting Dai, Nerla Jean-Louis and Shu Tao. Xiaohui Gu. DSN '19 +[finance] [On the Just-In-Time Discovery of Profit-Generating Transactions in DeFi Protocols](). + +Liyi Zhou, Kaihua Qin, Antoine Cully, Benjamin Livshits, Arthur Gervais. -#### 2018 +[security] [Compositional Security for Reentrant Applications](https://arxiv.org/abs/2103.08577). + +Ethan Cecchetti, Siqiu Yao, Haobin Ni, Andrew C. Myers. -[security] [Towards Model-Driven Engineering of Smart Contracts for Cyber-Physical Systems]().
-Peter Garamvolgyi, Imre Kocsis, Benjamin Gehl, Attila Klenik. +[security] [High-Frequency Trading on Decentralized On-Chain Exchanges](https://arxiv.org/pdf/2009.14021.pdf). + +Liyi Zhou, Kaihua Qin, Christof Ferreira Torres, Duc V Le, Arthur Gervais. ------- +### 2020 -## PLDI +[security] [Flash Boys 2.0: Frontrunning in Decentralized Exchanges, Miner Extractable Value, and Consensus Instability](https://par.nsf.gov/servlets/purl/10159474). + +Philip Daian, Steven Goldfeder, T. Kell, Yunqi Li, Xueyuan Zhao, Iddo Bentov, Lorenz Breidenbach, A. Juels. -#### 2021 +[security] [VerX: Safety Verification of Smart Contracts](). + +Anton Permenev, Dimitar Dimitrov, Petar Tsankov, Dana Drachsler-Cohen, Martin Vechev. IEEE S&P '20. -[security] [Practical Smart Contract Sharding with Ownership and Commutativity Analysis]().
-George Pîrlea, Amrit Kumar, Ilya Sergey. +[security] [VeriSmart: A Highly Precise Safety Verifier for Ethereum Smart Contracts](). + +Sunbeom So, Myungho Lee, Jisu Park, Heejo Lee, Hakjoo Oh. IEEE S&P '20. -#### 2020 +[security] [Executable Operational Semantics of Solidity](https://arxiv.org/pdf/1804.01295.pdf). + +Jiao Jiao, Shuanglong Kan, Shang-Wei Lin, David Sanan, Yang Liu, Jun Sun. IEEE S&P '20. -[security] [Behavioral Simulation for Smart Contracts]().
-Sidi Mohamed Beillahi, Gabriela Ciocarlie, Michael Emmi, Constantin Enea. PLDI '2020 +### 2016 + +[application] [Hawk: The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts](https://eprint.iacr.org/2015/675.pdf). + +Kosba A, Miller A, Shi E, Wen Z, Papamanthou C. S&P '16 + +--- + +## NDSS + +### 2021 + +[application] [Bitcontracts: Supporting Smart Contracts in Legacy Blockchains](). + +Karl Wüst, Loris Diana, and Kari Kostiainen (ETH Zurich); Ghassan Karame; Sinisa Matetic and Srdjan Capkun (ETH Zurich) + +[Sercurity] [As Strong As Its Weakest Link: How to Break Blockchain DApps at RPC Service](https://www.ndss-symposium.org/wp-content/uploads/ndss2021_3C-1_23108_paper.pdf). + +Kai Li, Jiaqi Chen, Xianghong Liu, and Yuzhe Tang; XiaoFeng Wang; Xiapu Luo + +[Sercurity] [SquirRL: Automating Attack Analysis on Blockchain Incentive Mechanisms with Deep Reinforcement Learning](https://arxiv.org/abs/1912.01798). + +Charlie Hou; Mingxun Zhou; Yan Ji and Phil Daian; Florian Tramèr; Giulia Fanti; Ari Juels + +### 2020 + +[security] [SODA: A Generic Online Detection Framework for Smart Contracts](https://www.ndss-symposium.org/wp-content/uploads/2020/02/24449-paper.pdf). + +Ting Chen, Rong Cao, Ting Li, Xiapu Luo, Guofei Gu, Yufei Zhang, Zhou Liao, Hang Zhu, Gang Chen, Zheyuan He, Yuxing Tang, Xiaodong Lin, and Xiaosong Zhang. NDSS '20. + +[security] [Broken Metre: Attacking Resource Metering in EVM](https://arxiv.org/pdf/1909.07220.pdf). + +Daniel Perez, and Benjamin Livshits. NDSS '20. + +### 2019 + +[security] [Seth: Protecting Existing Smart Contracts Against Re-Entrancy Attacks](https://arxiv.org/pdf/1812.05934.pdf). + +Michael Rodler, Wenting Li and Ghassan Karame, Lucas Davi. NDSS '19. + +[security] [YODA: Enabling computationally intensive contracts on blockchains with Byzantine and Selfish nodes](https://arxiv.org/pdf/1811.03265.pdf). + +Sourav Das, Vinay Joseph Ribeiro, and Abhijeet Anand. NDSS '19. + +[security] [Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks](). + +Michael Rodler, Wenting Li, Ghassan O. Karame, Lucas Davi. + +### 2018 + +[security] ["Zeus": Analyzing Safety of Smart Contracts](http://wp.internetsociety.org/ndss/wp-content/uploads/sites/25/2018/02/ndss2018_09-1_Kalra_paper.pdf). + +Kalra S, Goel S, Dhawan M, Sharma S. NDSS '18. + +[security] [Chainspace: A Sharded Smart Contracts Platform](). + +Mustafa Al-Bassam, Alberto Sonnino, Shehar Bano, Dave Hrycyszyn, George Danezis. -[security] [Ethainter: A Smart Contract Security Analyzer for Composite Vulnerabilities]().
-Lexi Brent, Neville Grech, Sifis Lagouvardos, Bernhard Scholz, Yannis Smaragdakis. PLDI '2020 -[Ssecurity] [Securing Smart Contract with Runtime Validation]().
-Ao Li, Jemin Andrew Choi, Fan Long. PLDI '2020 ------ -## ASE -#### 2022 -[security] [Reentrancy Vulnerability Detection and Localization: A Deep Learning Based Two-phase Approach]().
-Zhuo Zhang, Yan Lei, Meng Yan, Yue Yu, Jiachi Chen, Shangwen Wang, Xiaoguang Mao. +## SOSP -[security] [Identifying Solidity Smart Contract API Documentation Errors](https://personal.ntu.edu.sg/yi_li/files/Zhu2022ISS.pdf).
-Chenguang Zhu, Ye Liu, Xiuheng Wu, and Yi Li. +### 2021 -#### 2021 +[security] [Forerunner: Constraint-based Speculative Transaction Execution for Ethereum](https://www.microsoft.com/en-us/research/uploads/prod/2021/09/3477132.3483564.pdf). -[security] [GASOL: Gas Analysis and Optimization for Ethereum Smart Contracts](https://arxiv.org/pdf/1912.11929.pdf).
-Elvira Albert, Jesús Correas, Pablo Gordillo, Guillermo Román-Díez, Albert Rubio. +Yang Chen, Zhongxin Guo, Runhuai Li, Shuo Chen, Lidong Zhou, Yajin Zhou, and Xian Zhang. -[security] [Automating User Notice Generation for Smart Contract Functions]().
-Xing Hu, Zhipeng Gao, Xin Xia, David Lo, Xiaohu Yang. +------ -[security] [Characterizing Transaction-Reverting Statements in Ethereum Smart Contracts](https://arxiv.org/pdf/2108.10799.pdf).
-Lu Liu, Lili Wei, Wuqi Zhang, Ming Wen, Yepang Liu, Shing-Chi Cheung. +## OSDI -[security] [SMARTIAN: Enhancing Smart Contract Fuzzing with Static and Dynamic Analyses](https://agroce.github.io/ase21.pdf).
-Jaeseung Choi, Doyeon Kim, Soomin Kim, Gustavo Grieco, Alex Groce, Sang Kil Cha. +### 2021 -[security] [SigRec: Automatic Recovery of Function Signatures in Smart Contracts]().
-Ting Chen, zihao li, Xiapu Luo, XiaoFeng Wang, Ting Wang, Hongwei Li, Xiaosong Zhang. +[security] [Finding Consensus Bugs in Ethereum via Multi-transaction Differential Fuzzing](https://www.usenix.org/system/files/osdi21-yang.pdf). +Youngseok Yang, Seoul National University; Taesoo Kim, Georgia Institute of Technology; Byung-Gon Chun, Seoul National University and FriendliAI. -#### 2020 +--- -[security] [Cross-Contract Static Analysis for Detecting Practical Reentrancy Vulnerabilities in Smart Contracts]().
-Yinxing Xue, Mingliang Ma, Yun Lin, Yulei Sui, Jiaming Ye, Tianyong Peng. ASE '2020 -[security] [Demystifying Loops in Smart Contracts]().
-Benjamin Mariano, Yanju Chen, Yu Feng, Shuvendu K. Lahiri, Isil Dillig. ASE '2020 -[security] [Summary-Based Symbolic Evaluation for Smart Contracts]().
-Yu Feng, Emina Torlak, Rastislav Bodik. ASE '2020 +## INFOCOM -[security] [Finding Ethereum Smart Contracts Security Issues by Comparing History Versions](https://arxiv.org/pdf/2010.02509.pdf).
-Jiachi Chen. ASE '2020 +### 2021 -#### 2019 +[application] [Counter-Collusion Smart Contracts for Watchtowers in Payment Channel Networks](). -[security] [Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts]().
-Mark Mossberg, Felipe Manzano, Eric Hennenfent, Alex Groce, Gustavo Grieco, Josselin Feist, Trent Brunson, Artem Dinaburg. +Yuhui Zhang, Dejun Yang, Guoliang Xue, Ruozhou Yu. -[security] [MuSC: A Tool for Mutation Testing of Ethereum Smart Contract]().
-Zixin Li, Haoran Wu, Jiehui Xu, Xingya Wang, Lingming Zhang, Zhenyu Chen. +[mine] [Characterizing Ethereum's Mining Power Decentralization at a Deeper Level](). -[security] [Securing Smart Contracts in Blockchain]().
-Jaturong Kongmanee, Phongphun Kijsanayothin, Rattikorn Hewett. +Liyi Zeng, Yang Chen, Shuo Chen, Zhongxin Guo. -#### 2018 +### 2020 -[security] [ContractFuzzer: Fuzzing Smart Contracts for Vulnerability](https://arxiv.org/ftp/arxiv/papers/1807/1807.03932.pdf).
-Bo Jiang, Ye Liu, W.K. Chan. ASE '2018 +[application] [ET-DeaL: A P2P Smart Contract-based Secure Energy Trading Scheme for Smart Grid Systems](). -[security] [S-gram: towards semantic-aware security auditing for Ethereum smart contracts]().
-Han Liu, Chao Liu, Wenqi Zhao, Yu Jiang, Jiaguang Sun. +Aparna Kumari, Arpit Shukla, Rajesh Gupta, Sudeep Tanwar, Sudhanshu Tyagi, Neeraj Kumar. + +[application] [A Solution for State Conflicts of Smart Contract in Interaction with Non-blockchain](). + +Hong Su, Bing Guo, Yan Shen, Tao Li, Chaoxia Qing, Zhen Zhang. + +[application] [ChainIDE 2.0: Facilitating Smart Contract Development for Consortium Blockchain](). + +Xiao Wu, Han Qiu, Shuyi Zhang, Gérard Memmi, Keke Gai, Wei Cai. + +[application] [EncELC: Hardening and Enriching Ethereum Light Clients with Trusted Enclaves](). + +Chengjun Cai, Lei Xu, Anxin Zhou, Ruochen Wang, Cong Wang, Qian Wang. + +### 2019 + +[application] [Interledger Smart Contracts for Decentralized Authorization to Constrained Things](). + +Vasilios A. Siris, Dimitrios Dimopoulos, Nikos Fotiou, Spyros Voulgaris, George C. Polyzos. + +### 2018 + +[graph analysis] [Understanding ethereum via graph analysis](https://www4.comp.polyu.edu.hk/~csxluo/EthereumGraphAnalysis.pdf). + +Ting Chen,Yuxiao Zhu, Zihao Li, Jiachi Chen, Xiaoqi Li, Xiapu Luo, Xiaodong Lin, Xiaodong Lin. INFOCOM'18 ------ -## ESEC&FSE +## DSN -#### 2022 +### 2020 -[security] [An Empirical Study of Blockchain System Vulnerabilities: Modules, Types, and Patterns]().
-Xiao Yi, Daoyuan Wu, Lingxiao Jiang, Yuzhou Fang, Kehuan Zhang, Wei Zhang. +[security] [SMACS: Smart Contract Access Control Service](https://arxiv.org/abs/2003.07495). -[security] [Declarative Smart Contracts](https://arxiv.org/pdf/2207.13827.pdf).
-Haoxian Chen, Gerald Whitters, Mohammad Javad Amiri, Yuepeng Wang, Boon Thau Loo. +Bowen Liu, Siwei Sun, Pawel Szalachowski. DSN '20 -#### 2021 +[security] [Data-Driven Model-Based Analysis of the Ethereum Verifier's Dilemma](https://arxiv.org/pdf/2004.12768.pdf). -[security] [Towards Practical and Cost-Effective Batching of Smart-Contract Invocations on Ethereum]().
-Yibo Wang, Qi Zhang, Kai Li, Yuzhe Tang, Jiaqi Chen, Xiapu Luo, Ting Chen. +Maher Alharby, Roben Lunardi, Amjad Aldweesh, Aad van Moorsel. DSN '20 -[security] [ÐArcher: Detecting On-Chain-Off-Chain Synchronization Bugs in Decentralized Applications]().
-Wuqi Zhang, Lili Wei, Shuqing Li, Yepang Liu, Shing-Chi Cheung. +[security] [Smart Contracts on the Move](https://arxiv.org/pdf/2004.05933.pdf). -[application] [Making Smart Contract Development More Secure and Easier](https://arxiv.org/pdf/2106.09440.pdf).
-Meng Ren, Fuchen Ma, Zijing Yin, Ying Fu, Huizhong Li, Wanli Chang, Yu Jiang +Enrique Fynn, Alysson Bessani, Fernando Pedone. DSN '20 -[application] [iBatch: Saving Ethereum Fees via Secure and Cost-Effective Batching of Smart-Contract Invocations](https://tristartom.github.io/docs/fse21-ibatch.pdf).
-Y Wang, Q Zhang, K Li, Y Tang, X Luo, T Chen. +[mine] [Impact of Geo-Distribution and Mining Pools on Blockchains: A Study of Ethereum](https://arxiv.org/pdf/2004.05933.pdf). -#### 2020 +Paulo Silva, David Vavricka, João Barreto, Miguel Matos. DSN '20 -[security] [Towards Automated Verification of Smart Contract Fairness]().
-Ye Liu, Yi Li, Shang-Wei Lin, Rong Zhao. FSE/ESEC '2020 +### 2019 -[security] [ModCon: a model-based testing platform for smart contracts]().
-Ye Liu, Yi Li, Shang-Wei Lin, Qiang Yan. FSE/ESEC '2020 +[application] [FabZK: Supporting Privacy-Preserving, Auditable Smart Contracts in Hyperledger Fabric](). -[security] [HARVEY:A Greybox Fuzzer for Smart Contracts]().
-Valentin Wüstholz, Maria Christakis. FSE/ESEC '2020 +Hui Kang, Ting Dai, Nerla Jean-Louis and Shu Tao. Xiaohui Gu. DSN '19 -#### 2019 +### 2018 -[security] [EVMFuzzer: Detect EVM vulnerabilities via fuzz testing](http://www.wingtecher.com/themes/WingTecherResearch/assets/papers/fse19demo.pdf).
-Fu Y, Ren M, Ma F. FSE/ESEC '2019 +[security] [Towards Model-Driven Engineering of Smart Contracts for Cyber-Physical Systems](). -[security] [A graph-based framework for analysing the design of smart contracts]().
-Bram Vandenbogaerde. +Peter Garamvolgyi, Imre Kocsis, Benjamin Gehl, Attila Klenik. ------ +## PLDI + +### 2021 + +[security] [Practical Smart Contract Sharding with Ownership and Commutativity Analysis](). + +George Pîrlea, Amrit Kumar, Ilya Sergey. + +### 2020 + +[security] [Behavioral Simulation for Smart Contracts](). + +Sidi Mohamed Beillahi, Gabriela Ciocarlie, Michael Emmi, Constantin Enea. PLDI '2020 + +[security] [Ethainter: A Smart Contract Security Analyzer for Composite Vulnerabilities](). + +Lexi Brent, Neville Grech, Sifis Lagouvardos, Bernhard Scholz, Yannis Smaragdakis. PLDI '2020 + +[Ssecurity] [Securing Smart Contract with Runtime Validation](). + +Ao Li, Jemin Andrew Choi, Fan Long. PLDI '2020 + +------ + + + ## ESORICS -#### 2020 +### 2020 + +[security] [PrivacyGuard: Enforcing Private Data Usage Control with Blockchain and Off-chain Contract Execution](https://arxiv.org/abs/2003.06552). -[security] [PrivacyGuard: Enforcing Private Data Usage Control with Blockchain and Off-chain Contract Execution](https://arxiv.org/abs/2003.06552).
Yuan Lu, Qiang Tang, Guiling Wang. ESORICS '2020 -#### 2019 +### 2019 + +[security] [Practical Mutation Testing for Smart Contracts](https://arxiv.org/abs/2003.06552). -[security] [Practical Mutation Testing for Smart Contracts](https://arxiv.org/abs/2003.06552).
Joran J. Honig, Maarten H. Everts, Marieke Huisman: -[application] [PDFS: Practical Data Feed Service for Smart Contracts](https://arxiv.org/abs/2003.06552).
+[application] [PDFS: Practical Data Feed Service for Smart Contracts](https://arxiv.org/abs/2003.06552). + Juan Guarnizo and Pawel Szalachowski. -[security] [The Operational Cost of Ethereum Airdrops]().
+[security] [The Operational Cost of Ethereum Airdrops](). + Michael Fröwis, Rainer Böhme: -[security] [Annotary: A Concolic Execution System for Developing Secure Smart Contracts]().
+[security] [Annotary: A Concolic Execution System for Developing Secure Smart Contracts](). + Konrad Weiss, Julian Schütte -[security] [An Efficient Micropayment Channel on Ethereum]().
+[security] [An Efficient Micropayment Channel on Ethereum](). + Hisham S. Galal, Muhammad ElSheikh, Amr M. Youssef. -[security] [A Minimal Core Calculus for Solidity Contracts]().
+[security] [A Minimal Core Calculus for Solidity Contracts](). + Massimo Bartoletti, Letterio Galletta, Maurizio Murgia. -#### 2018 +### 2018 + +[security] [Succinctly Verifiable Sealed-Bid Auction Smart Contract](). -[security] [Succinctly Verifiable Sealed-Bid Auction Smart Contract]().
Hisham S. Galal, Amr M. Youssef. -#### 2017 +### 2017 + +[security] [In Code We Trust? - Measuring the Control Flow Immutability of All Smart Contracts Deployed on Ethereum](). -[security] [In Code We Trust? - Measuring the Control Flow Immutability of All Smart Contracts Deployed on Ethereum]().
Michael Fröwis, Rainer Böhme ------ ## SANER -#### 2021 +### 2021 + +[security] [Understanding Code Reuse in Smart Contracts](). -[security] [Understanding Code Reuse in Smart Contracts]().
Xiangping Chen , Peiyong Liao , Yixin Zhang , Yuan Huang , Zibin Zheng. SANER'2021 -#### 2020 +### 2020 + +[security] [SMARTSHIELD: Automatic Smart Contract Protection Made Easy](). -[security] [SMARTSHIELD: Automatic Smart Contract Protection Made Easy]().
Yuyao Zhang, Siqi Ma, Juanru Li, Kailai Li, Surya Nepal. SANER '2020 -[security] [EthPloit: From Fuzzing to Efficient Exploit Generation against Smart Contracts]().
+[security] [EthPloit: From Fuzzing to Efficient Exploit Generation against Smart Contracts](). + Qingzhao Zhang, Yizhuo Wang, Juanru Li, Siqi Ma. SANER '2020 -#### 2019 +### 2019 + +[security] [Towards Generating Cost-Effective Test-Suite for Ethereum Smart Contract](). -[security] [Towards Generating Cost-Effective Test-Suite for Ethereum Smart Contract]().
Xingya Wang, Haoran Wu, Weisong Sun, Yuan Zhao. SANER '2019 -[security] [EVM*: From Offline Detection to Online Reinforcement for Ethereum Virtual Machine]().
+[security] [EVM*: From Offline Detection to Online Reinforcement for Ethereum Virtual Machine](). + Fuchen Ma, Ying Fu, Meng Ren, Mingzhe Wang, Yu Jiang, Kaixiang Zhang, Huizhong Li, Xiang Shi. SANER '2019 -#### 2018 +### 2018 + +[security] [SmartInspect: solidity smart contract inspector](). -[security] [SmartInspect: solidity smart contract inspector]().
Santiago Bragagnolo, Henrique Rocha, Marcus Denker, Stéphane Ducasse. -[security] [Smart contracts vulnerabilities: a call for blockchain software engineering?]().
+[security] [Smart contracts vulnerabilities: a call for blockchain software engineering?](). + Giuseppe Destefanis, Michele Marchesi, Marco Ortu, Roberto Tonelli, Andrea Bracciali, Robert M. Hierons. -[security] [The ICO phenomenon and its relationships with ethereum smart contract environment]().
+[security] [The ICO phenomenon and its relationships with ethereum smart contract environment](). + Gianni Fenu, Lodovica Marchesi, Michele Marchesi, Roberto Tonelli. -[security] [Smart contracts: security patterns in the ethereum ecosystem and solidity]().
+[security] [Smart contracts: security patterns in the ethereum ecosystem and solidity](). + Maximilian Wohrer, Uwe Zdun. -#### 2017 +### 2017 + +[application] [Under-optimized smart contracts devour your money](https://www4.comp.polyu.edu.hk/~csxluo/Gasper.pdf). -[application] [Under-optimized smart contracts devour your money](https://www4.comp.polyu.edu.hk/~csxluo/Gasper.pdf).
Chen T, Li X, Luo X. SANER '2017 ------ ## OOPSLA -#### 2022 +### 2022 + +[security] [Elipmoc: Advanced Decompilation of Ethereum Smart Contracts](https://yanniss.github.io/elipmoc-oopsla22.pdf). -[security] [Elipmoc: Advanced Decompilation of Ethereum Smart Contracts](https://yanniss.github.io/elipmoc-oopsla22.pdf).
Neville Grech, Sifis Lagouvardos, Ilias Tsatiris, and Yannis Smaragdakis. -#### 2021 +### 2021 + +[security] [Symbolic Value-Flow Static Analysis: Deep, Precise, Complete Modeling of Ethereum Smart Contracts](). -[security] [Symbolic Value-Flow Static Analysis: Deep, Precise, Complete Modeling of Ethereum Smart Contracts]().
Yannis Smaragdakis, Neville Grech, Sifis Lagouvardos, Konstantinos Triantafyllou, Ilias Tsatiris. -[security] [Rich Specifications for Ethereum Smart Contract Verification]().
+[security] [Rich Specifications for Ethereum Smart Contract Verification](). + Christian Braem, Marco Eilers, Peter Müller, Robin Sierra, Alexander J. Summers. -[security] [Pluto: Exposing Vulnerabilities in Inter-Contract Scenarios]().
+[security] [Pluto: Exposing Vulnerabilities in Inter-Contract Scenarios](). + Fuchen Ma, Zhenyang Xu, Meng Ren, Zijing Yin, Yuanliang Chen, Lei Qiao, Bin Gu, Huizhong Li, Yu Jiang, Jiaguang Sun. -#### 2020 +### 2020 + +[security] [Precise Static Modelling of Ethereum "Memory"](https://dl.acm.org/doi/pdf/10.1145/3428258). -[security] [Precise Static Modelling of Ethereum "Memory"](https://dl.acm.org/doi/pdf/10.1145/3428258).
Lagouvardos, S., Grech, N., Tsatiris, I., Smaragdakis, Y. -[security] [Taming Callbacks for Smart Contract Modularity]().
+[security] [Taming Callbacks for Smart Contract Modularity](). + Elvira Albert, Shelly Grossman, Noam Rinetzky, Clara Rodríguez, Albert Rubio, Mooly Sagiv. OOPSLA '2020 -#### 2019 +### 2019 + +[security] [Detecting Nondeterministic Payment Bugs in Ethereum Smart Contracts](https://dl.acm.org/doi/10.1145/3360615). -[security] [Detecting Nondeterministic Payment Bugs in Ethereum Smart Contracts](https://dl.acm.org/doi/10.1145/3360615).
Shuai Wang, Chengyu Zhang, Zhendong Su. OOPSLA '2019 -[security] [Safer Smart Contract Programming with Scilla](https://ilyasergey.net/papers/scilla-oopsla19.pdf).
+[security] [Safer Smart Contract Programming with Scilla](https://ilyasergey.net/papers/scilla-oopsla19.pdf). + Ilya Sergey, Vaivaswatha Nagaraj, Jacob Johannsen, Amrit Kumar, Anton Trunov, Ken Chan. OOPSLA '2019 -#### 2018 +### 2018 + +[security] [MadMax: surviving out-of-gas conditions in Ethereum smart contracts](). -[security] [MadMax: surviving out-of-gas conditions in Ethereum smart contracts]().
Neville Grech, Michael Kong, Anton Jurisevic, Lexi Brent, Bernhard Scholz, Yannis Smaragdakis. @@ -632,242 +853,245 @@ Neville Grech, Michael Kong, Anton Jurisevic, Lexi Brent, Bernhard Scholz, Yanni ## ACSAC -#### 2021 -[security] [SolSaviour: A Defending Framework for Deployed Defective Smart Contracts]().
+### 2021 +[security] [SolSaviour: A Defending Framework for Deployed Defective Smart Contracts](). + Li Zecheng, Zhou Yu, Songtao Guo, Xiao Bin. -#### 2019 -[security] [SmarTor: Smarter Tor with Smart Contracts]().
+### 2019 +[security] [SmarTor: Smarter Tor with Smart Contracts](). + Andre Greubel, Alexandra Dmitrienko, Samuel Kounev. -#### 2018 -[security] [Finding The Greedy, Prodigal, and Suicidal Contracts at Scale](https://arxiv.org/abs/1802.06038).
+### 2018 +[security] [Finding The Greedy, Prodigal, and Suicidal Contracts at Scale](https://arxiv.org/abs/1802.06038). + Ilya Sergey, Vaivaswatha Nagaraj, Jacob Johannsen, Amrit Kumar, Anton Trunov, Ken Chan. ACSAC '2018 -[security] [Osiris: Hunting for Integer Bugs in Ethereum Smart Contracts]().
+[security] [Osiris: Hunting for Integer Bugs in Ethereum Smart Contracts](). + Christof Ferreira Torres, SnT/University of Luxembourg; Julian Schütte, Fraunhofer AISEC; Radu State, SnT/University of Luxembourg ------ ## APSEC -#### 2020 +### 2020 + +[security] [Source Code Obfuscation for Smart Contracts](https://ieeexplore.ieee.org/document/9359296). -[security] [Source Code Obfuscation for Smart Contracts](https://ieeexplore.ieee.org/document/9359296).
Meng Zhang, Pengcheng Zhang, Xiapu Luo, Feng Xiao. -#### 2019 +### 2019 + +[security] [SIF: A Framework for Solidity Contract Instrumentation and Analysis](https://arxiv.org/pdf/1905.01659.pdf). -[security] [SIF: A Framework for Solidity Contract Instrumentation and Analysis](https://arxiv.org/pdf/1905.01659.pdf).
Chao Peng, Sefa Akca, Ajitha Rajan. APSEC '2019 -[security] [SolAnalyser: A Framework for Analysing and Testing Smart Contracts]().
+[security] [SolAnalyser: A Framework for Analysing and Testing Smart Contracts](). + Sefa Akca, Ajitha Rajan, Chao Peng. APSEC '2019 -#### 2018 +### 2018 + +[security] [Fuse: An Architecture for Smart Contract Fuzz Testing Service](). -[security] [Fuse: An Architecture for Smart Contract Fuzz Testing Service]().
Wing Kwong Chan, Bo Jian. ------ ## WWW -#### 2021 - -[Finance] [Towards Understanding Cryptocurrency Derivatives:A Case Study of BitMEX](https://dl.acm.org/doi/pdf/10.1145/3442381.3450059).
-Kyle Soska, Jin-Dong Dong, Alex Khodaverdian, Ariel Zetlin-Jones, Bryan Routledge, Nicolas Christin. - - -[graph analysis] [Temporal Analysis of the Entire Ethereum Blockchain Network](https://personal.ntu.edu.sg/arijit.khan/Papers/Ethereum_Blockchain_Temporal_Network.pdf).
-Lin Zhao, Sourav Sen Gupta, Arijit Khan, Robby Luo. - -[Finance] [Detecting and Quantifying Wash Trading on Decentralized Cryptocurrency Exchanges](https://arxiv.org/pdf/2102.07001.pdf).
-Friedhelm Victor, Andrea Marie Weintraud. - -#### 2020 +### 2021 -[graph analysis] [Measurements, Analyses, and Insights on the Entire Ethereum Blockchain Network](https://dl.acm.org/doi/fullHtml/10.1145/3366423.3380103).
-Xi Tong Lee, Arijit Khan, Sourav Sen Gupta, Yu Hann Ong, Xuan Liu. WWW '2020 +[Finance] [Towards Understanding Cryptocurrency Derivatives:A Case Study of BitMEX](https://dl.acm.org/doi/pdf/10.1145/3442381.3450059). -[graph analysis] [Traveling the token world: A graph analysis of Ethereum ERC20 token ecosystem](https://dl.acm.org/doi/fullHtml/10.1145/3366423.3380103).
-Weili Chen, Tuo Zhang, Zhiguang Chen, Zibin Zheng, Yutong Lu. WWW '2020 - ------- - -## ISSTA - -#### 2022 - -[security] [WASAI: uncovering vulnerabilities in Wasm smart contracts](https://dl.acm.org/doi/pdf/10.1145/3533767.3534218).
-Weimin Chen, Zihan Sun, Haoyu Wang, Xiapu Luo,Haipeng Cai ,Lei Wu. - -[security] [Finding permission bugs in smart contracts with role mining](https://dl.acm.org/doi/pdf/10.1145/3533767.3534372).
-Ye Liu,Yi Li,Shang-Wei Lin,Cyrille Artho. - -[security] [eTainter: detecting gas-related vulnerabilities in smart contracts](https://dl.acm.org/doi/pdf/10.1145/3533767.3534378).
-Asem Ghaleb,Julia Rubin,Karthik Pattabiraman. +Kyle Soska, Jin-Dong Dong, Alex Khodaverdian, Ariel Zetlin-Jones, Bryan Routledge, Nicolas Christin. -[security] [Park: accelerating smart contract vulnerability detection via parallel-fork symbolic execution](https://dl.acm.org/doi/pdf/10.1145/3533767.3534395).
-Peilin Zheng, Zibin Zheng, Xiapu Luo. -[security] [SmartDagger: a bytecode-based static analysis approach for detecting cross-contract vulnerability](https://dl.acm.org/doi/pdf/10.1145/3533767.3534222).
-Zeqin Liao, Zibin Zheng, Xiao Chen, Yuhong Nan. +[graph analysis] [Temporal Analysis of the Entire Ethereum Blockchain Network](https://personal.ntu.edu.sg/arijit.khan/Papers/Ethereum_Blockchain_Temporal_Network.pdf). -#### 2021 - -[security] [Empirical Evaluation of Smart Contract Testing: What Is the Best Choice?]().
-Meng Ren, Zijing Yin, Fuchen Ma, Zhenyang Xu, Yu Jiang, Chengnian Sun, Huizhong Li, Yan Cai. +Lin Zhao, Sourav Sen Gupta, Arijit Khan, Robby Luo. -#### 2020 +[Finance] [Detecting and Quantifying Wash Trading on Decentralized Cryptocurrency Exchanges](https://arxiv.org/pdf/2102.07001.pdf). -[security] [How effective are smart contract analysis tools? evaluating smart contract static analysis tools using bug injection](https://dl.acm.org/doi/abs/10.1145/3395363.3397385).
-Asem Ghaleb, Karthik Pattabiraman. +Friedhelm Victor, Andrea Marie Weintraud. -[security] [Echidna: effective, usable, and fast fuzzing for smart contracts](https://dl.acm.org/doi/abs/10.1145/3395363.3404366).
-Gustavo Grieco, Will Song, Artur Cygan, Josselin Feist, Alex Groce. +### 2020 -[security] [EShield: protect smart contracts against reverse engineering]().
-Wentian Yan, Jianbo Gao, Zhenhao Wu, Yue Li, Zhi Guan, Qingshan Li, Zhong Chen. +[graph analysis] [Measurements, Analyses, and Insights on the Entire Ethereum Blockchain Network](https://dl.acm.org/doi/fullHtml/10.1145/3366423.3380103). -#### 2019 +Xi Tong Lee, Arijit Khan, Sourav Sen Gupta, Yu Hann Ong, Xuan Liu. WWW '2020 -[security] [SAFEVM: a safety verifier for Ethereum smart contracts](https://dl.acm.org/doi/pdf/10.1145/3293882.3338999).
-Elvira Albert, Jesús Correasl, Pablo Gordillo, Guillermo Román-Díez, Albert Rubio. ISSTA '2019 +[graph analysis] [Traveling the token world: A graph analysis of Ethereum ERC20 token ecosystem](https://dl.acm.org/doi/fullHtml/10.1145/3366423.3380103). -[security] [Exploiting the laws of order in smart contracts](https://arxiv.org/abs/1810.11605).
-Kolluri ANikolic,Sergey I ,et al. ISSTA '2019 +Weili Chen, Tuo Zhang, Zhiguang Chen, Zibin Zheng, Yutong Lu. WWW '2020 ------ ## ICDCS -#### 2020 +### 2020 + +[security] [TinyEVM: Off-Chain Smart Contracts on Low-Power IoT Devices](). -[security] [TinyEVM: Off-Chain Smart Contracts on Low-Power IoT Devices]().
Christos Profentzas, Magnus Almgren, Olaf Landsiedel. -#### 2019 +### 2019 + +[security] [DataEther: Data Exploration Framework For Ethereum](). -[security] [DataEther: Data Exploration Framework For Ethereum]().
Ting Chen, Teng Hu, Jiachi Chen, Xiaosong Zhang, Zihao Li, Yufei Zhang, Xiapu Luo. -[security] [Read-Uncommitted Transactions for Smart Contract Performance]().
+[security] [Read-Uncommitted Transactions for Smart Contract Performance](). + Victor Cook, Zachary Painter, Christina L. Peterson, Damian Dechev. -#### 2018 +### 2018 + +[security] [MPCSToken: Smart Contract Enabled Fault-Tolerant Incentivisation for Mobile P2P Crowd Services](). -[security] [MPCSToken: Smart Contract Enabled Fault-Tolerant Incentivisation for Mobile P2P Crowd Services]().
Fengrui Shi, Zhijin Qin, Di Wu, Julie A. McCann. ------ ## POPL -#### 2022 +### 2022 + +[security] [SolType: Refinement Types for Solidity](https://arxiv.org/pdf/2110.00677.pdf). -[security] [SolType: Refinement Types for Solidity](https://arxiv.org/pdf/2110.00677.pdf).
Bryan Tan, Benjamin Mariano, Shuvendu Lahiri, Isil Dillig, Yu Feng ------ +### 2018 -#### 2018 +[security] [Vandal: A Scalable Security Analysis Framework for Smart Contracts](https://arxiv.org/abs/1809.03981). -[security] [Vandal: A Scalable Security Analysis Framework for Smart Contracts](https://arxiv.org/abs/1809.03981).
Lexi Brent, Anton Jurisevic, Michael Kong, Eric Liu, Francois Gauthier, Vincent Gramoli, Ralph Holz, Bernhard Scholz ------ ## OTHERS -[security] [TokenAware: Accurate and Efficient Bookkeeping Recognition for Token Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3560263).
+[security] [TokenAware: Accurate and Efficient Bookkeeping Recognition for Token Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3560263). + Zheyuan He, Shuwei Song, Yang Bai, Xiapu Luo, Ting Chen, Wensheng Zhang, Peng He, Hongwei Li, Xiaodong Lin, Xiaosong Zhang. TOSEM2022 -[security] [Impact and User Perception of Sandwich Attacks in the DeFi Ecosystem](https://dl.acm.org/doi/pdf/10.1145/3491102.3517585).
+[security] [Impact and User Perception of Sandwich Attacks in the DeFi Ecosystem](https://dl.acm.org/doi/pdf/10.1145/3491102.3517585). + Ye Wang, Patrick Zuest, Yaxing Yao, Zhicong Lu, Roger Wattenhofer. CHI 2022 -[security] [SolCMC: Solidity Compiler’s Model Checker](http://verify.inf.usi.ch/sites/default/files/solcmc.pdf).
+[security] [SolCMC: Solidity Compiler’s Model Checker](http://verify.inf.usi.ch/sites/default/files/solcmc.pdf). + Leonardo Alt, Martin Blicha, Antti E. J. Hyvärinen & Natasha Sharygina. CAV 2022 -[security] [Pied-Piper: Revealing the Backdoor Threats in Ethereum ERC Token Contracts](https://dl.acm.org/doi/pdf/10.1145/3560264).
+[security] [Pied-Piper: Revealing the Backdoor Threats in Ethereum ERC Token Contracts](https://dl.acm.org/doi/pdf/10.1145/3560264). + Fuchen Ma, Meng Ren, Lerong Ouyang, Yuanliang Chen, Juan Zhu, Ting Chen, Yingli Zheng, Xiao Dai, Yu Jiang, Jiaguang Sun. TOSEM2022 -[security] [Time-travel Investigation: Toward Building a Scalable Attack Detection Framework on Ethereum](https://arxiv.org/pdf/2005.08278.pdf).
+[security] [Time-travel Investigation: Toward Building a Scalable Attack Detection Framework on Ethereum](https://arxiv.org/pdf/2005.08278.pdf). + Siwei Wu, Lei Wu, Yajin Zhou, Runhuai Li, Zhi Wang, Xiapu Luo, Cong Wang, Kui Ren. TOSEM2022 -[security] [Code Cloning in Smart Contracts on the Ethereum Platform: An Extended Replication Study](https://arxiv.org/pdf/2005.08278.pdf).
+[security] [Code Cloning in Smart Contracts on the Ethereum Platform: An Extended Replication Study](https://arxiv.org/pdf/2005.08278.pdf). + Faizan Khan, Istvan David, Daniel Varro, Shane McIntosh. -[security] [Penny Wise and Pound Foolish: Quantifying the Risk of Unlimited Approval of ERC20 Tokens on Ethereum](https://arxiv.org/pdf/2207.01790.pdf).
+[security] [Penny Wise and Pound Foolish: Quantifying the Risk of Unlimited Approval of ERC20 Tokens on Ethereum](https://arxiv.org/pdf/2207.01790.pdf). + Dabao Wang, Hang Feng, Siwei Wu, Yajin Zhou, Lei Wu, and Xingliang Yuan. Raid2022 -[security] [Trade or Trick? Detecting and Characterizing Scam Tokens on Uniswap Decentralized Exchange](https://arxiv.org/pdf/2109.00229.pdf).
+[security] [Trade or Trick? Detecting and Characterizing Scam Tokens on Uniswap Decentralized Exchange](https://arxiv.org/pdf/2109.00229.pdf). + Xia, Pengcheng and Wang, Haoyu and Gao, Bingyu and Su, Weihang and Yu, Zhou and Luo, Xiapu and Zhang, Chao and Xiao, Xusheng and Xu, Guoai. POMACS2021 -[application] [An Off-The-Chain Execution Environment for Scalable Testing and Profiling of Smart Contracts](https://www.usenix.org/system/files/atc21-kim-yeonsoo.pdf).
+[application] [An Off-The-Chain Execution Environment for Scalable Testing and Profiling of Smart Contracts](https://www.usenix.org/system/files/atc21-kim-yeonsoo.pdf). + Yeonsoo Kim and Seongho Jeong, Kamil Jezek, Bernd Burgstaller, Bernhard Scholz. Usenix ATC22. -[security] [Inheritance software metrics on smart contracts]().
+[security] [Inheritance software metrics on smart contracts](). + Ashish Rajendra Sai, Conor Holmes, Jim Buckley, Andrew Le Gear. ICPC '2020 -[security] [Recommending Differentiated Code to Support Smart Contract Update]().
+[security] [Recommending Differentiated Code to Support Smart Contract Update](). + Yuan Huang, Queping Kong, Nan Jia, Xiangping Chen, Zibin Zheng. ICPC '2019 -[security] [Enabling clone detection for ethereum via smart contract birthmarks]().
+[security] [Enabling clone detection for ethereum via smart contract birthmarks](). + Han Liu, Zhiqiang Yang, Yu Jiang, Wenqi Zhao, Jiaguang Sun. ICPC '2019 -[security] [SmartCheck: Static Analysis of Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8445052).
+[security] [SmartCheck: Static Analysis of Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8445052). + Sergei Tikhomirov, Ekaterina Voskresenskaya, Ivan Ivanitskiy, Ramil Takhaviev, Evgeny Marchenko, Yaroslav Alexandrov. WETSEB '2018 -[security] [Runtime Verification of Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8530777).
+[security] [Runtime Verification of Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8530777). + Joshua Ellul, Gordon J. Pace. EDCC '2018 -[security] [Formal Modeling and Verification of Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3185089.3185138).
+[security] [Formal Modeling and Verification of Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3185089.3185138). + X. Bai, Zijing Cheng. ICSCA '2018 -[security] [Protect Your Smart Contract Against Unfair Payment]().
+[security] [Protect Your Smart Contract Against Unfair Payment](). + Yue Li, Han Liu, Zhiqiang Yang, Bin Wang, Qian Ren, Lei Wang and Bangdao Chen. SRDS '2020 -[security] [TZ4Fabric: Executing Smart Contracts with ARM TrustZone (Practical Experience Report)]().
+[security] [TZ4Fabric: Executing Smart Contracts with ARM TrustZone (Practical Experience Report)](). + Christina Müller, Marcus Brandenburger, Christian Cachin, Pascal Felber, Christian Göttel and Valerio Schiavoni. SRDS '2020 -[security] [Smart Contract Vulnerability Detection Using Graph Neural Networks]().
+[security] [Smart Contract Vulnerability Detection Using Graph Neural Networks](). + Yuan Zhuang, Zhenguang Liu, Peng Qian, Qi Liu, Xiang Wang, Qinming He. IJCAI'20 -[security] [Towards a first step to understand the cryptocurrency stealing attack on ethereum]().
+[security] [Towards a first step to understand the cryptocurrency stealing attack on ethereum](). + Zhen Cheng, Xinrui Hou, Runhuai Li, Yajin Zhou, Xiapu Luo, Jinku Li, Kui Ren. RAID2019 -[application] [Developing Cost-Effective Blockchain-Powered Applications: A Case Study of the Gas Usage of Smart Contract Transactions in the Ethereum Blockchain Platform]().
+[application] [Developing Cost-Effective Blockchain-Powered Applications: A Case Study of the Gas Usage of Smart Contract Transactions in the Ethereum Blockchain Platform](). + Abdullah A. Zarir, Gustavo Ansaldi Oliva, Zhen Ming (Jack) Jiang, Ahmed E. Hassan. -[security] [MPro: Combining Static and Symbolic Analysis for Scalable Testing of Smart Contract](https://arxiv.org/pdf/1911.00570.pdf).
+[security] [MPro: Combining Static and Symbolic Analysis for Scalable Testing of Smart Contract](https://arxiv.org/pdf/1911.00570.pdf). + William Zhang, Sebastian Banescu, Leonardo Pasos, Steven T. Stewart, Vijay Ganesh. ISSRE2019 -[security] [SADPonzi: Detecting and Characterizing Ponzi Schemes in Ethereum Smart Contracts](https://www4.comp.polyu.edu.hk/~csxluo/SADPonzi.pdf).
+[security] [SADPonzi: Detecting and Characterizing Ponzi Schemes in Ethereum Smart Contracts](https://www4.comp.polyu.edu.hk/~csxluo/SADPonzi.pdf). + W Chen, X Li, Y Sui, N He, H Wang, L Wu. SIGMETRICS2021 -[security] [Extracting Smart Contracts Tested and Verified in Coq]().
+[security] [Extracting Smart Contracts Tested and Verified in Coq](). + Danil Annenkov, Mikkel Milo, Jakob Botsch Nielsen, Bas Spitters. CPP2021 -[security] [Why Do Smart Contracts Self-Destruct? Investigating the Selfdestruct Function on Ethereum]().
+[security] [Why Do Smart Contracts Self-Destruct? Investigating the Selfdestruct Function on Ethereum](). + Jiachi Chen, Xin Xia, David Lo, John Grundy. TOSEM 2021 -[security] [Large-Scale Empirical Study of Inline Assembly on 7.6 Million Ethereum Smart Contracts]().
+[security] [Large-Scale Empirical Study of Inline Assembly on 7.6 Million Ethereum Smart Contracts](). + Zhou Liao, Shuwei Song, Hang Zhu, Xiapu Luo, Zheyuan He, Renkai Jiang, Ting Chen, Jiachi Chen, Tao Zhang, and Xiao-song Zhang. TSE22 -[security] [Model checking of vulnerabilities in smart contracts: a solidity-to-CPN approach]().
+[security] [Model checking of vulnerabilities in smart contracts: a solidity-to-CPN approach](). + Ikram Garfatta, Kaïs Klai, Mohamed Graïet, Walid Gaaloul. SAC2022 -[security] [DEFECTCHECKER: Automated Smart Contract Defect Detection by Analyzing EVM Bytecode]().
+[security] [DEFECTCHECKER: Automated Smart Contract Defect Detection by Analyzing EVM Bytecode](). + Jiachi Chen, Xin Xia, David Lo, John Grundy, Xiapu Luo, Ting Chen. TSE22 -[security] [An Empirical Investigation on the Trade-off between Smart Contract Readability and Gas Consumption]().
+[security] [An Empirical Investigation on the Trade-off between Smart Contract Readability and Gas Consumption](). + Anna Vacca; Michele Fredella; Andrea Di Sorbo; Corrado A. Visaggio; Gerardo Canfora. (ICPC2022) -[security] [Peculiar: Smart Contract Vulnerability Detection Based on Crucial Data Flow Graph and Pre-training Techniques]().
+[security] [Peculiar: Smart Contract Vulnerability Detection Based on Crucial Data Flow Graph and Pre-training Techniques](). + Yihao, QinBo, LinXiaoguang, MaoYan, LeiZhuo, ZhangShangwen Wang. (ISSRE 2021) ## License + [![CC0](http://mirrors.creativecommons.org/presskit/buttons/88x31/svg/cc-zero.svg)](https://creativecommons.org/publicdomain/zero/1.0/) This list is released into the public domain.