{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:43:42Z","timestamp":1763192622545,"version":"3.45.0"},"reference-count":80,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,14]],"date-time":"2025-10-14T00:00:00Z","timestamp":1760400000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,14]],"date-time":"2025-10-14T00:00:00Z","timestamp":1760400000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,14]]},"DOI":"10.1109\/bcca66705.2025.11229689","type":"proceedings-article","created":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T18:46:17Z","timestamp":1763145977000},"page":"708-720","source":"Crossref","is-referenced-by-count":0,"title":["SoK: Security and Privacy of AI Agents for Blockchain"],"prefix":"10.1109","author":[{"given":"Nicol\u00f2","family":"Romandini","sequence":"first","affiliation":[{"name":"University of Bologna,Bologna,Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Carlo","family":"Mazzocca","sequence":"additional","affiliation":[{"name":"University of Salerno,Fisciano,Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kai","family":"Otsuki","sequence":"additional","affiliation":[{"name":"NTT Digital, Inc. and NTT DOCOMO, Inc.,Tokyo,Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rebecca","family":"Montanari","sequence":"additional","affiliation":[{"name":"University of Bologna,Bologna,Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583537"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2025.3543197"},{"key":"ref3","doi-asserted-by":"crossref","first-page":"e00151","DOI":"10.1016\/j.jbvi.2019.e00151","article-title":"Blockchain disruption and decentralized finance: The rise of decentralized business models","volume":"13","author":"Chen","year":"2020","journal-title":"Journal of Business Venturing Insights"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2018.8343163"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3580305.3599572"},{"key":"ref6","article-title":"LLMSmartAudit: Advanced Smart Contract Vulnerability Detection","author":"Wei","year":"2024","journal-title":"arXiv preprint arXiv:2410.09381"},{"key":"ref7","article-title":"A Multi-Agent Framework for Automated Vulnerability Detection and Repair in Solidity and Move Smart Contracts","author":"Karanjai","year":"2025","journal-title":"arXiv preprint arXiv:2502.18515"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/icse55347.2025.00027"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVCBT50464.2020.00007"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-97457-2_14"},{"key":"ref11","article-title":"A survey of ai agent protocols","author":"Yang","year":"2025","journal-title":"arXiv preprint arXiv:2504.16736"},{"key":"ref12","article-title":"Multi-Agent Collaboration Mechanisms: A Survey of LLMs","author":"Tran","year":"2025","journal-title":"arXiv preprint arXiv:2501.06322"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TCCN.2025.3623369"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/OJCS.2025.3589638"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3716628"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909924"},{"key":"ref17","first-page":"801","article-title":"FastKitten: Practical smart contracts on bitcoin","volume-title":"28th USENIX Security Symposium (USENIX Security 19","author":"Das"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s42786-022-00044-x"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.4324\/9781003449607-11"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-54455-6_8"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref22","first-page":"1877","article-title":"Language models are few-shot learners","volume":"33","author":"Brown","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref23","article-title":"Gpt-4 technical report","volume-title":"arXiv preprint arXiv:2303.08774","author":"Achiam","year":"2023"},{"key":"ref24","article-title":"Llama: Open and efficient foundation language models","author":"Touvron","year":"2023","journal-title":"arXiv preprint arXiv:2302.13971"},{"key":"ref25","article-title":"Mixtral of experts","author":"Jiang","year":"2024","journal-title":"arXiv preprint arXiv:2401.04088"},{"year":"2023","key":"ref26","article-title":"Model card and evaluations for claude models"},{"key":"ref27","first-page":"27730","article-title":"Training language models to follow instructions with human feedback","volume":"35","author":"Ouyang","year":"2022","journal-title":"Advances in neural information processing systems"},{"key":"ref28","first-page":"9459","article-title":"Retrievalaugmented generation for knowledge-intensive nlp tasks","volume":"33","author":"Lewis","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref29","article-title":"Augmented language models: a survey","author":"Mialon","year":"2023","journal-title":"arXiv preprint arXiv:2302.07842"},{"first-page":"2024","article-title":"Model context protocol (mcp)","year":"2025","key":"ref30"},{"article-title":"A2a protocol: Agent-to-agent communication framework","year":"2025","author":"Contributors","key":"ref31"},{"article-title":"Agent network protocol","year":"2025","author":"Project","key":"ref32"},{"article-title":"Agora protocol","year":"2025","author":"Project","key":"ref33"},{"article-title":"Nanda: A platform for agentic ai research","year":"2024","author":"Lab","key":"ref34"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3715073.3715075"},{"key":"ref36","article-title":"Exploring large language model based intelligent agents: Definitions, methods, and prospects","author":"Cheng","year":"2024","journal-title":"arXiv preprint arXiv:2401.03428"},{"key":"ref37","article-title":"Eliza: A web3 friendly ai agent operating system","author":"Walters","year":"2025","journal-title":"arXiv preprint arXiv:2501.06781"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-96-4288-5_33"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3481641"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2025.02.126"},{"key":"ref41","article-title":"Llm-powered multi-agent system for automated crypto portfolio management","author":"Luo","year":"2025","journal-title":"arXiv preprint arXiv:2501.00826"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.3390\/app14198856"},{"key":"ref43","article-title":"Blockchain data analysis in the era of large-language models","author":"Toyoda","year":"2024","journal-title":"arXiv preprint arXiv:2412.09640"},{"key":"ref44","article-title":"Agentdao: Synthesis of proposal transactions via abstract dao semantics","author":"Ao","year":"2025","journal-title":"arXiv preprint arXiv:2503.10099"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.emnlp-main.63"},{"year":"2025","key":"ref46","article-title":"Fetch.ai-Build. Discover. Transact.-fetch.ai"},{"year":"2025","key":"ref47","article-title":"Olas I Co-own AI-olas.network"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.3390\/ai5020041"},{"article-title":"AI agents are coming for DeFi-Wallets are the weakest link-cointelegraph.com","year":"2025","author":"Li","key":"ref49"},{"key":"ref50","article-title":"Prompt injection attack against 1lm-integrated applications","author":"Liu","year":"2023","journal-title":"arXiv preprint arXiv:2306.05499"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3605764.3623985"},{"key":"ref52","article-title":"Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents","author":"Patlan","year":"2025","journal-title":"arXiv preprint arXiv:2503.16248"},{"key":"ref53","first-page":"20750","article-title":"Propile: Probing privacy leakage in large language models","volume":"36","author":"Kim","year":"2023","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref54","article-title":"Agentdam: Privacy leakage evaluation for autonomous web agents","author":"Zharmagambetov","year":"2025","journal-title":"arXiv preprint arXiv:2503.09780"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1177\/03063127211048515"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/WSC40007.2019.9004675"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/BotSE52550.2021.00015"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SSE60056.2023.00018"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-40579-2_37"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00061"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/Blockchain62396.2024.00021"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3237370"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2024.3491578"},{"year":"2025","key":"ref64","article-title":"Ethereum (ETH) Blockchain Explorer-etherscan.io"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2025\/653"},{"year":"2025","key":"ref66","article-title":"GitHub-crytic\/not-so-smart-contracts: Examples of Solidity security issues \u201cgithub.com"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i1.32026"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2024.3383422"},{"key":"ref69","first-page":"530","article-title":"Empirical review of automated analysis tools on 47,587 ethereum smart contracts","volume-title":"Proceedings of the ACM\/IEEE 42nd International conference on software engineering","author":"Durieux"},{"issue":"2","key":"ref70","first-page":"28","article-title":"Smart contracts: building blocks for digital markets","volume":"18","author":"Szabo","year":"1996","journal-title":"The Journal of Transhumanist Thought"},{"key":"ref71","first-page":"1307","article-title":"Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Su"},{"key":"ref72","article-title":"Autogen: Enabling next-gen 1 lm applications via multi-agent conversation","author":"Wu","year":"2023","journal-title":"arXiv preprint arXiv:2308.08155"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2942301"},{"key":"ref74","article-title":"Quantifying multilingual performance of large language models across languages","author":"Li","year":"2024","journal-title":"arXiv e-prints, pp. arXiv-2404"},{"year":"2024","key":"ref75","article-title":"GitHub-smartbugs\/smartbugs-curated: SB Curated is a curated dataset of Solidity smart contracts annotated with tagged vulnerabilities. The dataset was created to evaluate the accuracy of automated analysis tools.-github.com"},{"year":"2024","key":"ref76","article-title":"GitHub-smartbugs\/smartbugs-wild: This repository contains 47,398 smart contracts extracted from the Ethereum network.-github.com"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/BRAINS63024.2024.10732686"},{"key":"ref78","article-title":"Authenticated delegation and authorized ai agents","author":"South","year":"2025","journal-title":"arXiv preprint arXiv:2501.09674"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3497298"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/DSN58367.2023.00026"}],"event":{"name":"2025 7th International Conference on Blockchain Computing and Applications (BCCA)","start":{"date-parts":[[2025,10,14]]},"location":"Durbovnic, Croatia","end":{"date-parts":[[2025,10,17]]}},"container-title":["2025 7th International Conference on Blockchain Computing and Applications (BCCA)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11229428\/11227167\/11229689.pdf?arnumber=11229689","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:40:45Z","timestamp":1763192445000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11229689\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,14]]},"references-count":80,"URL":"https:\/\/doi.org\/10.1109\/bcca66705.2025.11229689","relation":{},"subject":[],"published":{"date-parts":[[2025,10,14]]}}}