{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,26]],"date-time":"2026-03-26T16:23:30Z","timestamp":1774542210790,"version":"3.50.1"},"reference-count":57,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,11,16]],"date-time":"2025-11-16T00:00:00Z","timestamp":1763251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,11,16]],"date-time":"2025-11-16T00:00:00Z","timestamp":1763251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001321","name":"National Research Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001321","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001381","name":"National Research Foundation Singapore","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001381","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,11,16]]},"DOI":"10.1109\/ase63991.2025.00166","type":"proceedings-article","created":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T20:54:38Z","timestamp":1769633678000},"page":"1995-2007","source":"Crossref","is-referenced-by-count":1,"title":["Have We Solved Access Control Vulnerability Detection in Smart Contracts? A Benchmark Study"],"prefix":"10.1109","author":[{"given":"Han","family":"Liu","sequence":"first","affiliation":[{"name":"The Hong Kong University of Science and Technology,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daoyuan","family":"Wu","sequence":"additional","affiliation":[{"name":"Lingnan University,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuqiang","family":"Sun","sequence":"additional","affiliation":[{"name":"Nanyang Technological University,Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuai","family":"Wang","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University,Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Defillama","year":"2025"},{"key":"ref2","first-page":"3585","article-title":"Using my functions should follow my checks: Understanding and detecting insecure OpenZeppelin code in smart contracts","volume-title":"Proceedings of the 33rd USENIX Security Symposium (USENIX Security 24)","author":"Liu"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639117"},{"key":"ref4","article-title":"Defillama hacks","year":"2025"},{"key":"ref5","article-title":"Owasp smart contract top 10","year":"2025"},{"key":"ref6","article-title":"Public mint","year":"2025"},{"key":"ref7","article-title":"Public transferownership","year":"2025"},{"key":"ref8","article-title":"Benddao incident","year":"2025"},{"key":"ref9","article-title":"Slither Analyzer","author":"Feist","year":"2023"},{"key":"ref10","article-title":"Mythril","year":"2025"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00087"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534372"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639140"},{"key":"ref14","first-page":"1157","article-title":"Beyond","volume-title":"Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis, ser. ISSTA 2023","author":"Fang"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397385"},{"key":"ref16","first-page":"530","article-title":"Empirical review of automated analysis tools on 47,587 ethereum smart contracts","volume-title":"Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering","author":"Durieux"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464837"},{"key":"ref18","article-title":"A study of static analysis tools for ethereum smart contracts","volume-title":"Ph.D. dissertation, Master\u2019s thesis","author":"Monteiro","year":"2019"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3660772"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00036"},{"key":"ref21","article-title":"Common vulnerabilities and exposures","year":"2025"},{"key":"ref22","article-title":"Past defi incidents","year":"2025"},{"key":"ref23","article-title":"Code4rena audits reports","year":"2025"},{"key":"ref24","article-title":"Study data of the paper","year":"2025"},{"key":"ref25","article-title":"Nemesis: Preventing authentication & [and] access control vulnerabilities in web applications","volume-title":"Proceedings of the18th USENIX Security Symposium (USENIX Security 09)","author":"Dalton"},{"key":"ref26","article-title":"Static detection of access control vulnerabilities in web applications","volume-title":"Proceedings of the 20th USENIX Security Symposium (USENIX Security 11)","author":"Sun"},{"key":"ref27","article-title":"Safemoon incident","year":"2025"},{"key":"ref28","article-title":"Common weakness enumeration","year":"2025"},{"key":"ref29","article-title":"Cwe-284: Improper access control","year":"2025"},{"key":"ref30","author":"Spencer","year":"2009","journal-title":"Card sorting: Designing usable categories"},{"key":"ref31","article-title":"Sourcify","year":"2025"},{"key":"ref32","first-page":"24824","article-title":"Chain-of-thought prompting elicits reasoning in large language models","volume":"35","author":"Wei","year":"2022","journal-title":"Advances in neural information processing systems"},{"key":"ref33","article-title":"Maia dao incident","year":"2025"},{"key":"ref34","article-title":"Cve-2018-10705","year":"2025"},{"key":"ref35","article-title":"Liquidxv2zap incident","year":"2025"},{"key":"ref36","article-title":"Entropygenerator incident","year":"2025"},{"key":"ref37","article-title":"Bego token incident","year":"2025"},{"key":"ref38","article-title":"Cve-2018-10666","year":"2025"},{"key":"ref39","article-title":"Linearvesting incident","year":"2025"},{"key":"ref40","article-title":"Lockmanager incident","year":"2025"},{"key":"ref41","article-title":"Arbitrary send eth","year":"2025"},{"key":"ref42","article-title":"Controlled delegatecall","year":"2025"},{"key":"ref43","article-title":"Dependence on origin","year":"2025"},{"key":"ref44","article-title":"Public burn","year":"2025"},{"key":"ref45","article-title":"Rabbithole incident","year":"2025"},{"key":"ref46","article-title":"Addliquidity incident","year":"2025"},{"key":"ref47","article-title":"Stakingrewards contract","year":"2025"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3169902"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3623302"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639152"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2024.3383422"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243780"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00133"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274737"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978309"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274743"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2025.3590108"}],"event":{"name":"2025 40th IEEE\/ACM International Conference on Automated Software Engineering (ASE)","location":"Seoul, Korea, Republic of","start":{"date-parts":[[2025,11,16]]},"end":{"date-parts":[[2025,11,20]]}},"container-title":["2025 40th IEEE\/ACM International Conference on Automated Software Engineering (ASE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11334056\/11334198\/11334489.pdf?arnumber=11334489","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,29]],"date-time":"2026-01-29T09:59:16Z","timestamp":1769680756000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11334489\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,16]]},"references-count":57,"URL":"https:\/\/doi.org\/10.1109\/ase63991.2025.00166","relation":{},"subject":[],"published":{"date-parts":[[2025,11,16]]}}}