{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,23]],"date-time":"2026-06-23T08:49:10Z","timestamp":1782204550879,"version":"3.54.5"},"reference-count":47,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2026,4,25]],"date-time":"2026-04-25T00:00:00Z","timestamp":1777075200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,4,25]],"date-time":"2026-04-25T00:00:00Z","timestamp":1777075200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"The Research Funds","award":["[2023JC02]"],"award-info":[{"award-number":["[2023JC02]"]}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["[2023JKF01ZK14]"],"award-info":[{"award-number":["[2023JKF01ZK14]"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1007\/s10664-026-10863-x","type":"journal-article","created":{"date-parts":[[2026,4,25]],"date-time":"2026-04-25T04:56:40Z","timestamp":1777093000000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["ContractFull: a rapid and comprehensive static analysis tool for Ethereum smart contracts"],"prefix":"10.1007","volume":"31","author":[{"given":"Peilin","family":"Yang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yijun","family":"Gu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Taiyu","family":"Wong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,4,25]]},"reference":[{"key":"10863_CR1","unstructured":"(2014a) Home. In: Solidity Programming Language. https:\/\/soliditylang.org\/. Accessed 27 Nov 2024"},{"key":"10863_CR2","unstructured":"(2014b) Releases \u00b7 ethereum\/solidity. In: GitHub. https:\/\/github.com\/ethereum\/solidity\/releases. Accessed 26 Nov 2024"},{"key":"10863_CR3","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1155\/2021\/2897565","volume":"2021","author":"A Ali","year":"2021","unstructured":"Ali A, Abideen ZU, Ullah K (2021) SESCon: secure Ethereum smart contracts by vulnerable patterns\u2019 detection. Secur Commun Networks 2021:1\u201314. https:\/\/doi.org\/10.1155\/2021\/2897565","journal-title":"Secur Commun Networks"},{"key":"10863_CR4","doi-asserted-by":"crossref","unstructured":"Amani S, B\u00e9gel M, Bortin M, Staples M (2018) Towards verifying ethereum smart contract bytecode in Isabelle\/HOL. In: Proceedings of the 7th ACM SIGPLAN International Conference on Certified Programs and Proofs. ACM, Los Angeles CA USA, pp 66\u201377","DOI":"10.1145\/3167084"},{"key":"10863_CR5","doi-asserted-by":"publisher","unstructured":"Antonino P, Roscoe AW (2020) Formalising and verifying smart contracts with Solidifier: a bounded model checker for Solidity. https:\/\/doi.org\/10.48550\/arXiv.2002.02710","DOI":"10.48550\/arXiv.2002.02710"},{"key":"10863_CR6","doi-asserted-by":"publisher","first-page":"327","DOI":"10.1109\/TSE.2020.2989002","volume":"48","author":"J Chen","year":"2022","unstructured":"Chen J, Xia X, Lo D et al (2022) Defining smart contract defects on Ethereum. IEEE Trans Softw Eng 48:327\u2013345. https:\/\/doi.org\/10.1109\/TSE.2020.2989002","journal-title":"IEEE Trans Softw Eng"},{"key":"10863_CR7","doi-asserted-by":"publisher","DOI":"10.1002\/spy2.393","volume":"7","author":"H Chen","year":"2024","unstructured":"Chen H, Zhao X, Wang Y, Zhen Z (2024) SafeCheck: detecting smart contract vulnerabilities based on static program analysis methods. Secur Privacy 7:e393. https:\/\/doi.org\/10.1002\/spy2.393","journal-title":"Secur Privacy"},{"key":"10863_CR8","unstructured":"Consensys (2019) Consensys\/solidity-parser-antlr: A Solidity parser for JS built on top of a robust ANTLR4 grammar. https:\/\/github.com\/ConsenSys\/solidity-parser-antlr. Accessed 30 Nov 2024"},{"key":"10863_CR9","unstructured":"Consensys (2020) MythX: Smart contract security service for Ethereum. https:\/\/mythx.io\/. Accessed 30 Nov 2024"},{"key":"10863_CR10","unstructured":"Consensys (2022) Smart Contract Security Field Guide. https:\/\/scsfg.io\/. Accessed 26 Nov 2024"},{"key":"10863_CR11","doi-asserted-by":"crossref","unstructured":"Dingman W, Cohen A, Ferrara N, et al (2019) Classification of Smart Contract Bugs Using the NIST Bugs Framework. In: 2019 IEEE 17th International Conference on Software Engineering Research, Management and Applications (SERA). IEEE, Honolulu, HI, USA, pp 116\u2013123","DOI":"10.1109\/SERA.2019.8886793"},{"key":"10863_CR12","doi-asserted-by":"crossref","unstructured":"Durieux T, Ferreira JF, Abreu R, Cruz P (2020) Empirical review of automated analysis tools on 47,587 Ethereum smart contracts. In: Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering. ACM, Seoul South Korea, pp 530\u2013541","DOI":"10.1145\/3377811.3380364"},{"key":"10863_CR13","unstructured":"etherscan.io (2015a) Ethereum (ETH) Blockchain Explorer. In: Ethereum (ETH) Blockchain Explorer. https:\/\/etherscan.io\/. Accessed 25 Nov 2024"},{"key":"10863_CR14","unstructured":"etherscan.io (2015b) Ethereum Verified Contracts | Etherscan. In: Ethereum (ETH) Blockchain Explorer. https:\/\/etherscan.io\/contractsVerified. Accessed 26 Nov 2024"},{"key":"10863_CR15","doi-asserted-by":"crossref","unstructured":"Feist J, Grieco G, Groce A (2019) Slither: A Static Analysis Framework For Smart Contracts. In: 2019 IEEE\/ACM 2nd International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB). pp 8\u201315","DOI":"10.1109\/WETSEB.2019.00008"},{"key":"10863_CR16","doi-asserted-by":"publisher","unstructured":"Gou N, Zhao X, Wang S, et al (2024) FlawCheck: detecting smart contract vulnerabilities based on symbolic execution. Secur Privacy e477. https:\/\/doi.org\/10.1002\/spy2.477","DOI":"10.1002\/spy2.477"},{"key":"10863_CR17","unstructured":"government (1999) NVD - Home. https:\/\/nvd.nist.gov\/. Accessed 27 Dec 2024"},{"key":"10863_CR18","doi-asserted-by":"publisher","first-page":"204","DOI":"10.1109\/CSF.2018.00022","volume-title":"2018 IEEE 31st Computer Security Foundations Symposium (CSF)","author":"E Hildenbrandt","year":"2018","unstructured":"Hildenbrandt E, Saxena M, Rodrigues N et al (2018) KEVM: A Complete Formal Semantics of the Ethereum Virtual Machine. 2018 IEEE 31st Computer Security Foundations Symposium (CSF). IEEE, Oxford, pp 204\u2013217"},{"key":"10863_CR19","doi-asserted-by":"crossref","unstructured":"Jiang B, Liu Y, Chan WK (2018) ContractFuzzer: fuzzing smart contracts for vulnerability detection. In: Proceedings of the 33rd ACM\/IEEE International Conference on Automated Software Engineering. ACM, Montpellier France, pp 259\u2013269","DOI":"10.1145\/3238147.3238177"},{"key":"10863_CR20","unstructured":"Jiu Z (2020) GitHub - xf97\/JiuZhou: JiuZhou is a data set of Ethereum bug smart contracts (ICSME 2020). In: GitHub. https:\/\/github.com\/xf97\/JiuZhou. Accessed 27 Dec 2024"},{"key":"10863_CR21","doi-asserted-by":"crossref","unstructured":"Kalra S, Goel S, Dhawan M, Sharma S (2018) ZEUS: Analyzing Safety of Smart Contracts. In: Proceedings 2018 Network and Distributed System Security Symposium. Internet Society, San Diego, CA","DOI":"10.14722\/ndss.2018.23082"},{"key":"10863_CR23","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-022-10218-2","volume":"27","author":"Z Li","year":"2022","unstructured":"Li Z, Lu S, Zhang R et al (2022) SmartFast: an accurate and robust formal analysis tool for Ethereum smart contracts. Empir Software Eng 27:197. https:\/\/doi.org\/10.1007\/s10664-022-10218-2","journal-title":"Empir Software Eng"},{"key":"10863_CR24","unstructured":"Lianantech (2018) Lianantech\/ETH-Security: Ethereum based smart contract vulnerability checklist. https:\/\/github.com\/Lianantech\/ETH-Security\/tree\/master. Accessed 26 Nov 2024"},{"key":"10863_CR25","doi-asserted-by":"crossref","unstructured":"Luu L, Chu D-H, Olickel H, et al (2016) Making smart contracts smarter. pp 254\u2013269","DOI":"10.1145\/2976749.2978309"},{"key":"10863_CR26","unstructured":"Nakamoto S (2008) Bitcoin: a peer-to-peer electronic cash system. Available at SSRN 3440802."},{"key":"10863_CR27","unstructured":"NCCGroup (2021) DASP - TOP 10. https:\/\/dasp.co\/#item-1. Accessed 25 Nov 2024"},{"key":"10863_CR28","doi-asserted-by":"crossref","unstructured":"Nikoli\u0107 I, Kolluri A, Sergey I, et al (2018) Finding The Greedy, Prodigal, and Suicidal Contracts at Scale. In: Proceedings of the 34th Annual Computer Security Applications Conference. ACM, San Juan PR USA, pp 653\u2013663","DOI":"10.1145\/3274694.3274743"},{"key":"10863_CR29","doi-asserted-by":"crossref","unstructured":"Permenev A, Dimitrov D, Tsankov P, et al (2020) VerX: Safety Verification of Smart Contracts. In: 2020 IEEE Symposium on Security and Privacy (SP). pp 1661\u20131677","DOI":"10.1109\/SP40000.2020.00024"},{"key":"10863_CR30","unstructured":"Sigma Prime (2018) Solidity Security: Comprehensive list of known attack vectors and common anti-patterns. In: Sigma Prime. https:\/\/blog.sigmaprime.io\/solidity-security.html. Accessed 25 Nov 2024"},{"key":"10863_CR31","unstructured":"slowmist (2018) 2023-Blockchain-Security-and-AML-Annual-Report(CN).pdf. In: slowmist. https:\/\/www.slowmist.com\/report\/2023-Blockchain-Security-and-AML-Annual-Report(CN).pdf. Accessed 26 Nov 2024"},{"key":"10863_CR32","unstructured":"SmartcontractSecurity (2020) Smart Contract Weakness Classification (SWC). https:\/\/swcregistry.io\/. Accessed 25 Nov 2024"},{"key":"10863_CR33","unstructured":"SRI L (2020) eth-sri\/securify2: Securify v2.0. In: GitHub. https:\/\/github.com\/eth-sri\/securify2. Accessed 26 Nov 2024"},{"issue":"2","key":"10863_CR34","first-page":"28","volume":"18","author":"N Szabo","year":"1996","unstructured":"Szabo N (1996) Smart contracts: building blocks for digital markets. EXTROPY 18(2):28","journal-title":"EXTROPY"},{"key":"10863_CR35","doi-asserted-by":"crossref","unstructured":"Tikhomirov S, Voskresenskaya E, Ivanitskiy I, et al (2018) SmartCheck: static analysis of ethereum smart contracts. In: Proceedings of the 1st International Workshop on Emerging Trends in Software Engineering for Blockchain. ACM, Gothenburg Sweden, pp 9\u201316","DOI":"10.1145\/3194113.3194115"},{"key":"10863_CR36","doi-asserted-by":"crossref","unstructured":"Torres CF, Sch\u00fctte J, State R (2018) Osiris: Hunting for Integer Bugs in Ethereum Smart Contracts. In: Proceedings of the 34th Annual Computer Security Applications Conference. ACM, San Juan PR USA, pp 664\u2013676","DOI":"10.1145\/3274694.3274737"},{"key":"10863_CR37","doi-asserted-by":"crossref","unstructured":"Torres CF, Iannillo AK, Gervais A, R. State and Ieee (2021). CONFUZZIUS: A Data Dependency-Aware Hybrid Fuzzer for Smart Contracts. 6th IEEE European Symposium on Security and Privacy (Euro S and P), Electr Network, Ieee.","DOI":"10.36227\/techrxiv.14192459.v1"},{"key":"10863_CR38","doi-asserted-by":"crossref","unstructured":"Tsankov P, Dan A, Cohen DD, et al (2018) Securify: Practical Security Analysis of Smart Contracts. http:\/\/arxiv.org\/abs\/1806.01143","DOI":"10.1145\/3243734.3243780"},{"key":"10863_CR39","doi-asserted-by":"publisher","unstructured":"Vidal FR, Ivaki N, Laranjeiro N (2024) OpenSCV: an open hierarchical taxonomy for smart contract vulnerabilities. Empirical Software Engineering. https:\/\/doi.org\/10.48550\/arXiv.2303.14523","DOI":"10.48550\/arXiv.2303.14523"},{"key":"10863_CR40","doi-asserted-by":"crossref","unstructured":"Wang Y, Zhao J, Zhang Y, et al (2023) Smart Contract Symbol Execution Vulnerability Detection Method Based on CFG Path Pruning. In: Proceedings of the 5th ACM International Symposium on Blockchain and Secure Critical Infrastructure. ACM, Melbourne VIC Australia, pp 132\u2013139","DOI":"10.1145\/3594556.3594618"},{"key":"10863_CR41","doi-asserted-by":"publisher","DOI":"10.1007\/s10515-024-00471-8","volume":"32","author":"S Wang","year":"2025","unstructured":"Wang S, Zhao X (2025) Contractsentry: a static analysis tool for smart contract vulnerability detection. Autom Softw Eng 32:1. https:\/\/doi.org\/10.1007\/s10515-024-00471-8","journal-title":"Autom Softw Eng"},{"key":"10863_CR42","doi-asserted-by":"publisher","DOI":"10.32604\/jqc.2020.010815","author":"Z Wei","year":"2020","unstructured":"Wei Z, Wang J, Shen X, Luo Q (2020) Smart contract fuzzing based on taint analysis and genetic algorithms. Journal of Quantum Computing. https:\/\/doi.org\/10.32604\/jqc.2020.010815","journal-title":"Journal of Quantum Computing"},{"key":"10863_CR43","doi-asserted-by":"crossref","unstructured":"Wong TY, Zhang C, Ni YD, Luo MS, Chen HY, Yu YF, Li WL, Luo XP, Wang HY, IEEE (2024) ConFuzz: towards large scale fuzz testing of smart contracts in ethereum. In: IEEE Conference on Computer Communications (IEEE INFOCOM), IEEE, Vancouver, Canada.","DOI":"10.1109\/INFOCOM52122.2024.10621414"},{"key":"10863_CR44","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-025-10623-3","author":"J Yang","year":"2025","unstructured":"Yang J, Zhao X, Zhang H, He L, Wang S, Gou N (2025) Csafuzzer: fuzzing smart contracts combining with static analysis. Empir Softw Eng. https:\/\/doi.org\/10.1007\/s10664-025-10623-3","journal-title":"Empir Softw Eng"},{"key":"10863_CR45","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3674725","volume":"33","author":"M Ye","year":"2024","unstructured":"Ye M, Nan Y, Dai H-N et al (2024) FunFuzz: a function-oriented fuzzer for smart contract vulnerability detection with high effectiveness and efficiency. ACM Trans Softw Eng Methodol 33:1\u201320. https:\/\/doi.org\/10.1145\/3674725","journal-title":"ACM Trans Softw Eng Methodol"},{"key":"10863_CR46","doi-asserted-by":"publisher","unstructured":"Zhang P, Xiao F, Luo X (2020) A framework and DataSet for bugs in Ethereum smart contracts. https:\/\/doi.org\/10.48550\/arXiv.2009.02066","DOI":"10.48550\/arXiv.2009.02066"},{"key":"10863_CR47","doi-asserted-by":"publisher","DOI":"10.3390\/fi14110326","volume":"14","author":"Y Zhang","year":"2022","unstructured":"Zhang Y, Liu D (2022) Toward vulnerability detection for Ethereum smart contracts using graph-matching network. Future Internet 14:326. https:\/\/doi.org\/10.3390\/fi14110326","journal-title":"Future Internet"},{"key":"10863_CR48","doi-asserted-by":"crossref","unstructured":"Zhuang Y, Liu Z, Qian P, et al (2020) Smart Contract Vulnerability Detection using Graph Neural Network. In: Proceedings of the Twenty-Ninth International Joint Conference on Artificial Intelligence. International Joint Conferences on Artificial Intelligence Organization, Yokohama, Japan, pp 3283\u20133290","DOI":"10.24963\/ijcai.2020\/454"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-026-10863-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10664-026-10863-x","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-026-10863-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,23]],"date-time":"2026-06-23T08:11:14Z","timestamp":1782202274000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10664-026-10863-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,25]]},"references-count":47,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2026,9]]}},"alternative-id":["10863"],"URL":"https:\/\/doi.org\/10.1007\/s10664-026-10863-x","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"value":"1382-3256","type":"print"},{"value":"1573-7616","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,4,25]]},"assertion":[{"value":"7 January 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 March 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 April 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Approval"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Informed Consent"}},{"value":"Not applicable.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Clinical Trial Number"}},{"value":"The authors declare no conflict of interest.","order":5,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"125"}}