{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T10:18:39Z","timestamp":1775470719532,"version":"3.50.1"},"reference-count":48,"publisher":"Springer Science and Business Media LLC","issue":"10","license":[{"start":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T00:00:00Z","timestamp":1756857600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T00:00:00Z","timestamp":1756857600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2025,10]]},"DOI":"10.1007\/s10586-025-05439-1","type":"journal-article","created":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T14:07:39Z","timestamp":1756908459000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Analyzing and detecting four types of critical security vulnerabilities in move smart contracts"],"prefix":"10.1007","volume":"28","author":[{"given":"Weijie","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ting","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Teng","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ze","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhichao","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hangbin","family":"Shen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,9,3]]},"reference":[{"key":"5439_CR1","unstructured":"move language: Introduction\u2014the Move Book (2023). https:\/\/move-language.github.io\/move\/. Accessed 10 Aug 2024"},{"issue":"10","key":"5439_CR2","doi-asserted-by":"publisher","first-page":"2084","DOI":"10.1109\/TSE.2019.2942301","volume":"47","author":"W Zou","year":"2019","unstructured":"Zou, W., Lo, D., Kochhar, P.S., et al.: Smart contract development: challenges and opportunities. IEEE Trans. Softw. Eng. 47(10), 2084\u20132106 (2019)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"5439_CR3","unstructured":"Blackshear, S., Cheng, E., Dill, D.L., et al.: Move: a language with programmable resources. Technical Report, vol. 1. Libra Associates (2019)"},{"key":"5439_CR4","doi-asserted-by":"crossref","unstructured":"Zhong, J. E., Cheang, K., Qadeer, S., et al.: The move prover[C]\/\/Computer Aided Verification: 32nd International Conference, CAV 2020, Los Angeles, CA, USA, July 21-24, 2020, Proceedings, Part I 32. Springer International Publishing, 137-150, (2020)","DOI":"10.1007\/978-3-030-53288-8_7"},{"key":"5439_CR5","unstructured":"Sui. (2023). Sui-Unlock the freedom to build powerful on-chain assets. https:\/\/sui.io\/. Accessed 10 Aug 2024"},{"key":"5439_CR6","unstructured":"Aptos Foundation: Aptos\u2014the world\u2019s most production-ready blockchain (2024). https:\/\/aptosfoundation.org\/. Accessed 10 Aug 2024"},{"key":"5439_CR7","unstructured":"Starcoin.org: Starcoin: Homepage (2021). https:\/\/starcoin.org\/en\/. Accessed 10 Aug 2024"},{"key":"5439_CR8","unstructured":"CoinGecko [n. d.]: Cryptocurrency prices by market cap. https:\/\/www.coingecko.com\/. Accessed 18 Oct 2024"},{"key":"5439_CR9","volume-title":"Model Checking and Gas Optimization of Move Smart Contracts, and Transaction Order Dependency Detection and Rectification","author":"E Keilty","year":"2023","unstructured":"Keilty, E.: Model Checking and Gas Optimization of Move Smart Contracts, and Transaction Order Dependency Detection and Rectification. University of Toronto, Toronto (2023)"},{"key":"5439_CR10","doi-asserted-by":"crossref","unstructured":"Sun, J., Hui, Z., Wang, X., et al.: Move smart contract vulnerability detection based on resource-flow analysis. In: 2023 10th International Conference on Dependable Systems and Their Applications (DSA), pp. 389\u2013398. IEEE (2023)","DOI":"10.1109\/DSA59317.2023.00054"},{"issue":"7","key":"5439_CR11","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3464421","volume":"54","author":"P Tolmach","year":"2021","unstructured":"Tolmach, P., Li, Y., Lin, S.W., et al.: A survey of smart contract formal specification and verification. ACM Comput. Surv. (CSUR) 54(7), 1\u201338 (2021)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"5439_CR12","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2020.110891","volume":"174","author":"A Vacca","year":"2021","unstructured":"Vacca, A., Di Sorbo, A., Visaggio, C.A., et al.: A systematic literature review of blockchain and smart contract development: techniques, tools, and open challenges. J. Syst. Softw. 174, 110891 (2021)","journal-title":"J. Syst. Softw."},{"key":"5439_CR13","doi-asserted-by":"crossref","unstructured":"Wan, Z., Lo, D., Xia, X., et al.: Bug characteristics in blockchain systems: a large-scale empirical study. In: 2017 IEEE\/ACM 14th International Conference on Mining Software Repositories (MSR), pp. 413\u2013424. IEEE (2017)","DOI":"10.1109\/MSR.2017.59"},{"key":"5439_CR14","doi-asserted-by":"crossref","unstructured":"Wan, Z., Xia, X., Lo, D., et al.: Smart contract security: a practitioners\u2019 perspective. In: 2021 IEEE\/ACM 43rd International Conference on Software Engineering (ICSE), pp. 1410\u20131422. IEEE (2021)","DOI":"10.1109\/ICSE43902.2021.00127"},{"key":"5439_CR15","doi-asserted-by":"crossref","unstructured":"Wang, S., Yuan, Y., Wang, X., et al.: An overview of smart contract: architecture, applications, and future trends. In: 2018 IEEE Intelligent Vehicles Symposium (IV), pp. 108\u2013113. IEEE (2018)","DOI":"10.1109\/IVS.2018.8500488"},{"key":"5439_CR16","unstructured":"BeosinBlockchainSecurity: MoveLint (2023). https:\/\/github.com\/BeosinBlockchainSecurity\/Move-Lint. Accessed 10 Aug 2024"},{"key":"5439_CR17","doi-asserted-by":"crossref","unstructured":"Song, S., et al.: Empirical study of move smart contract security: introducing MoveScan for enhanced analysis. In: Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis (2024)","DOI":"10.1145\/3650212.3680391"},{"key":"5439_CR18","unstructured":"MoveBit: The pioneer in move security. https:\/\/github.com\/movebit\/Sampled-Audit-Reports. Accessed 10 Aug 2024"},{"key":"5439_CR19","unstructured":"Certik: Security assessment (2023). https:\/\/skynet.certik.com\/projects\/Aptos. Accessed 10 Aug 2024"},{"key":"5439_CR20","unstructured":"aptos labs: Accelerating the Future of Web3. https:\/\/aptoslabs.com\/. Accessed 10 Aug 2024"},{"key":"5439_CR21","unstructured":"Sui Protocol: Sui Protocol. https:\/\/hackenproof.com\/programs\/sui-protocol. Accessed 10 Aug 2024"},{"key":"5439_CR22","doi-asserted-by":"crossref","unstructured":"Liu, C., Liu, H., Cao, Z., et al.: Reguard: finding reentrancy bugs in smart contracts. In: Proceedings of the 40th International Conference on Software Engineering: Companion Proceedings, pp. 65\u201368 (2018)","DOI":"10.1145\/3183440.3183495"},{"key":"5439_CR23","doi-asserted-by":"crossref","unstructured":"Chen, T., et al.: Tokenscope: automatically detecting inconsistent behaviors of cryptocurrency tokens in ethereum. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (2019)","DOI":"10.1145\/3319535.3345664"},{"key":"5439_CR24","doi-asserted-by":"crossref","unstructured":"Hildenbrandt, E., Saxena, M., Rodrigues, N., et al.: Kevm: a complete formal semantics of the ethereum virtual machine. In: 2018 IEEE 31st Computer Security Foundations Symposium (CSF), pp. 204\u2013217. IEEE (2018)","DOI":"10.1109\/CSF.2018.00022"},{"issue":"2","key":"5439_CR25","doi-asserted-by":"publisher","first-page":"777","DOI":"10.1109\/TSE.2022.3163614","volume":"49","author":"Z Liao","year":"2022","unstructured":"Liao, Z., Song, S., Zhu, H., et al.: Large-scale empirical study of inline assembly on 7.6 million ethereum smart contracts. IEEE Trans. Softw. Eng. 49(2), 777\u2013801 (2022)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"5439_CR26","unstructured":"ABEL Finance: Abel Finance\u2014decentralized LP lending platform (2025). https:\/\/abelfinance.xyz\/. Accessed 15 Aug 2024"},{"key":"5439_CR27","unstructured":"argo:. Argo|USDA (2024). https:\/\/argo.fi\/. Accessed 15 Aug 2024"},{"key":"5439_CR28","unstructured":"Axelar Foundation: Axelar|Internet-scale interoperability (2024). https:\/\/axelar.network\/. Accessed 15 Aug 2024"},{"key":"5439_CR29","unstructured":"Move: Move standard library (2024). https:\/\/github.com\/move-language\/move\/tree\/main\/language\/move-stdlib. Accessed 15 Aug 2024"},{"key":"5439_CR30","unstructured":"Bware Labs: DecentralizedWeb3 infrastructure\u2014blast API (2024). https:\/\/blastapi.io\/. Accessed 15 Aug 2024"},{"key":"5439_CR31","unstructured":"Aptflip: Aptflip|Flip to win (2024). https:\/\/aptflip.com\/. Accessed 15 Aug 2024"},{"key":"5439_CR32","unstructured":"Mysten Labs: Awesome Move (2023). https:\/\/github.com\/MystenLabs\/awesomemove. Accessed 10 Aug 2024"},{"key":"5439_CR33","unstructured":"BFlyFinance: FAI (2022). https:\/\/github.com\/BFlyFinance\/FAI. Accessed 10 Aug 2024"},{"key":"5439_CR34","unstructured":"Starcoin: Starcoin framework (2023). https:\/\/github.com\/starcoinorg\/starcoin-framework. Accessed 15 Aug 2024"},{"key":"5439_CR35","unstructured":"Elements Studio: Poly Stc contracts (2022). https:\/\/github.com\/Elements-Studio\/poly-stc-contracts. Accessed 15 Aug 2024"},{"key":"5439_CR36","unstructured":"Elements Studio: Starswap core (2022). https:\/\/github.com\/Elements-Studio\/starswap-core. Accessed 15 Aug 2024"},{"key":"5439_CR37","unstructured":"Starcoin: Transactions\u2014Starcoin (2024). https:\/\/stcscan.io\/main\/transactions\/. Accessed 15 Aug 2024"},{"key":"5439_CR38","unstructured":"Chainbase Inc.: Chainbase.com: the #1 Web3 Data Infra (2023). https:\/\/chainbase.com\/. Accessed 15 Aug 2024"},{"key":"5439_CR39","unstructured":"Staketab: Suiscan: Sui Explorer (2023). https:\/\/suiscan.xyz\/mainnet\/home. Accessed 15 Aug 2024"},{"key":"5439_CR40","unstructured":"Aptos Foundation: Move specification language (2024). https:\/\/aptos.dev\/en\/build\/smart-contracts\/prover\/spec-lang. Accessed 15 Aug 2024"},{"key":"5439_CR41","doi-asserted-by":"crossref","unstructured":"Nelaturu, K., Keilty, E., Veneris, A.: Natural language-based model-checking framework for move smart contracts. In: 2023 Tenth International Conference on Software Defined Systems (SDS), pp. 89\u201394. IEEE (2023)","DOI":"10.1109\/SDS59856.2023.10328964"},{"key":"5439_CR42","doi-asserted-by":"crossref","unstructured":"Keilty, E., Nelaturu, K., Wu, B., et al.: A model-checking framework for the verification of move smart contracts. In: 2022 IEEE 13th International Conference on Software Engineering and Service Science (ICSESS), pp. 1\u20137. IEEE (2022)","DOI":"10.1109\/ICSESS54813.2022.9930214"},{"key":"5439_CR43","doi-asserted-by":"crossref","unstructured":"Hajdu, \u00c1, Jovanovi\u0107, D.: solc-verify: a modular verifier for solidity smart contracts. In: International Conference on Verified Software: Theories, Tools, and Experiments, VSTTE, New York City, NY, USA, 13\u201314 July 2019. Revised Selected Papers 11, pp. 161\u2013179. Springer, Cham (2020)","DOI":"10.1007\/978-3-030-41600-3_11"},{"key":"5439_CR44","unstructured":"Zhang, P., Xiao, F., Luo, X.: Soliditycheck: quickly detecting smart contract problems through regular expressions. arXiv preprint (2019). arXiv:1911.09425"},{"key":"5439_CR45","doi-asserted-by":"crossref","unstructured":"Tikhomirov, S., Voskresenskaya, E., Ivanitskiy, I., et al.: Smartcheck: static analysis of ethereum smart contracts. In: Proceedings of the 1st International Workshop on Emerging Trends in Software Engineering for Blockchain, pp. 9\u201316 (2018)","DOI":"10.1145\/3194113.3194115"},{"key":"5439_CR46","doi-asserted-by":"crossref","unstructured":"Torres, C. F., Iannillo, A. K., Gervais, A., et al.: Confuzzius: a data dependency-aware hybrid fuzzer for smart contracts. In: 2021 IEEE European Symposium on Security and Privacy (EuroS &P), pp. 103\u2013119. IEEE (2021)","DOI":"10.1109\/EuroSP51992.2021.00018"},{"key":"5439_CR47","doi-asserted-by":"crossref","unstructured":"Nguyen, T.D., Pham, L.H., Sun, J., et al.: sfuzz: an efficient adaptive fuzzer for solidity smart contracts. In: Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering, pp. 778\u2013788 (2020)","DOI":"10.1145\/3377811.3380334"},{"key":"5439_CR48","doi-asserted-by":"crossref","unstructured":"W\u00fcstholz, V., Christakis, M.: Harvey: a greybox fuzzer for smart contracts. In: Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pp. 1398\u20131409 (2020)","DOI":"10.1145\/3368089.3417064"}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05439-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-025-05439-1\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05439-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,6]],"date-time":"2025-10-06T09:34:31Z","timestamp":1759743271000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-025-05439-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,3]]},"references-count":48,"journal-issue":{"issue":"10","published-print":{"date-parts":[[2025,10]]}},"alternative-id":["5439"],"URL":"https:\/\/doi.org\/10.1007\/s10586-025-05439-1","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,3]]},"assertion":[{"value":"5 December 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"28 April 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 May 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 September 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"We do not have any pertinent financial or nonfinancial interests to declare.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"633"}}