{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T06:16:09Z","timestamp":1783059369033,"version":"3.54.6"},"reference-count":75,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62202011,62172010"],"award-info":[{"award-number":["62202011,62172010"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3,17]]},"DOI":"10.1109\/saner67736.2026.00074","type":"proceedings-article","created":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T19:41:17Z","timestamp":1783021277000},"page":"642-653","source":"Crossref","is-referenced-by-count":0,"title":["Towards Secure Oracle Usage: Understanding and Detecting the Vulnerabilities in Oracle Contracts"],"prefix":"10.1109","author":[{"given":"Ziming","family":"Chen","sequence":"first","affiliation":[{"name":"School of Computer Science, Peking University,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yue","family":"Li","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Taiyuan University of Technology,Taiyuan,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiashuo","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science, Peking University,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jianbo","family":"Gao","sequence":"additional","affiliation":[{"name":"Beijing Jiaotong University,Beijing Key Laboratory of Security and Privacy in Intelligent Transportation,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Che","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Computer Science, Peking University,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiakun","family":"Hao","sequence":"additional","affiliation":[{"name":"School of Computer Science, Peking University,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anming","family":"Xie","sequence":"additional","affiliation":[{"name":"School of Computer Science, Peking University,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhi","family":"Guan","sequence":"additional","affiliation":[{"name":"Peking University,National Engineering Research Center for Software Engineering,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhong","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Computer Science, Peking University,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.3390\/e25010060"},{"key":"ref2","volume-title":"Vulnerability analysis and stolen funds trace of the polter finance incident","year":"2025"},{"key":"ref3","volume-title":"Blocksec reports","year":"2025"},{"key":"ref4","volume-title":"Analysis of the rikkei finance attack incident","year":"2025"},{"key":"ref5","volume-title":"Additional considerations on data usage and verification","year":"2025"},{"key":"ref6","volume-title":"Basic request model","year":"2025"},{"key":"ref7","volume-title":"The blockchain oracle problem","year":"2025"},{"key":"ref8","volume-title":"Chainlink developer docs","year":"2025"},{"key":"ref9","volume-title":"Data streams liquidity-weighted bid-ask prices (lwba)","year":"2025"},{"key":"ref10","volume-title":"Liquidity indicators: Improving riskmanagement in defi","year":"2025"},{"key":"ref11","volume-title":"Pull oracles vs push oracles","year":"2025"},{"key":"ref12","volume-title":"Risk mitigation","year":"2025"},{"key":"ref13","volume-title":"Twap vs. vwap price algorithms","year":"2025"},{"key":"ref14","volume-title":"Using the streamslookup error handler","year":"2025"},{"key":"ref15","volume-title":"What are flash loans","year":"2025"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639190"},{"key":"ref17","volume-title":"The 3 levels of data aggregation in chainlink price feeds","year":"2025"},{"key":"ref18","volume-title":"Chainlink data feeds - monitoring data feeds","year":"2025"},{"key":"ref19","volume-title":"Chainlink functions","year":"2025"},{"key":"ref20","volume-title":"Chainlinkclient api reference","year":"2025"},{"key":"ref21","volume-title":"Data feed circuit breaker using chainlink automation","year":"2025"},{"key":"ref22","volume-title":"Data feeds api reference","year":"2025"},{"key":"ref23","volume-title":"Getting historical data","year":"2025"},{"key":"ref24","volume-title":"L2 sequencer uptime feeds","year":"2025"},{"key":"ref25","volume-title":"Security","year":"2025"},{"key":"ref26","volume-title":"Selecting quality data feeds","year":"2025"},{"key":"ref27","volume-title":"Updates to proxy and aggregator contracts","year":"2025"},{"key":"ref28","year":"2025","journal-title":"Vrf security considerations"},{"key":"ref29","volume-title":"Total value secured all oracles","year":"2025"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639225"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/DAPPS57946.2023.00015"},{"key":"ref32","volume-title":"Loopscale - rekt","year":"2025"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3479722.3480994"},{"key":"ref34","author":"Finance","year":"2025","journal-title":"Blizz finance post mortem"},{"key":"ref35","article-title":"Airaclex: Automated detection of price oracle manipulations via 11 m -driven knowledge mining and prompt generation","author":"Gao","year":"2025","journal-title":"arXiv preprint"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00087"},{"key":"ref37","volume-title":"Chainlink - bug bounty program hackerone","year":"2025"},{"key":"ref38","volume-title":"Chainlink bug bounties - immunefi","year":"2025"},{"key":"ref39","article-title":"Guidelines for performing systematic literature reviews in software engineering","author":"Keele","year":"2007","journal-title":"Technical report, ver. 2.3 ebse technical report. ebse, Tech. Rep."},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598124"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3589334.3645640"},{"key":"ref42","first-page":"3585","article-title":"Using my functions should follow my checks: understanding and detecting insecure openzeppelin code in smart contracts","volume-title":"33rd USENIX Security Symposium (USENIX Security 24), USENIX Association","author":"Liu","year":"2024"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICBC54727.2022.9805499"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598133"},{"key":"ref45","volume-title":"Best practices","year":"2025"},{"key":"ref46","volume-title":"Publisher utils","year":"2025"},{"key":"ref47","volume-title":"Pyth network documentation","year":"2025"},{"key":"ref48","volume-title":"Pythonnet","year":"2025"},{"key":"ref49","volume-title":"Security","year":"2025"},{"key":"ref50","volume-title":"Action following the chainswap hack","year":"2021"},{"key":"ref51","year":"2025","journal-title":"Hacker proposes dao vote for immunity after stealing millions from mango"},{"key":"ref52","year":"2025","journal-title":"Rho markets on scroll exploit analysis"},{"key":"ref53","volume-title":"Oracle attacks","year":"2025"},{"key":"ref54","volume-title":"Audits","year":"2025"},{"key":"ref55","year":"2025","journal-title":"Chronicle docs"},{"key":"ref56","year":"2025","journal-title":"Decentralized oracle network"},{"key":"ref57","year":"2025","journal-title":"Audits"},{"key":"ref58","year":"2025","journal-title":"How data flows to the blockchain"},{"key":"ref59","year":"2025","journal-title":"Redstone docs"},{"key":"ref60","volume-title":"Defi protocols that have fallen victim to attack","year":"2025"},{"key":"ref61","volume-title":"Slowmist: Analysis of the fortress protocol hack","year":"2022"},{"key":"ref62","volume-title":"Analysis of the bonqdao exploit","year":"2025"},{"key":"ref63","volume-title":"Analysis of the uwu lend hack","year":"2025"},{"key":"ref64","volume-title":"Slowmist assists kiloex in recovering all stolen funds: Incident review","year":"2025"},{"key":"ref65","volume-title":"Slowmist hacked database","year":"2025"},{"key":"ref66","article-title":"Security analysis of oracle vulnerabilities in ethereum smart contracts","volume-title":"Bachelor\u2019s Thesis","author":"TAT\u00ddREK","year":"2024"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3474374.3486916"},{"key":"ref68","volume-title":"Abstraction layer for smart contract build systems","year":"2025"},{"key":"ref69","volume-title":"External publications"},{"key":"ref70","volume-title":"Slithir","year":"2025"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW54576.2021.00047"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690293"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3346888"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00257"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00061"}],"event":{"name":"2026 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)","location":"Limassol, Cyprus","start":{"date-parts":[[2026,3,17]]},"end":{"date-parts":[[2026,3,20]]}},"container-title":["2026 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11576582\/11576527\/11576705.pdf?arnumber=11576705","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T05:17:37Z","timestamp":1783055857000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11576705\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,17]]},"references-count":75,"URL":"https:\/\/doi.org\/10.1109\/saner67736.2026.00074","relation":{},"subject":[],"published":{"date-parts":[[2026,3,17]]}}}