{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,12]],"date-time":"2026-10-12T00:41:27Z","timestamp":1791765687766,"version":"4.3.4"},"reference-count":69,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,1,1]]},"DOI":"10.1109\/tdsc.2022.3141396","type":"journal-article","created":{"date-parts":[[2022,1,7]],"date-time":"2022-01-07T20:34:18Z","timestamp":1641587658000},"page":"650-664","source":"Crossref","is-referenced-by-count":47,"title":["ExGen: Cross-platform, Automated Exploit Generation for Smart Contract Vulnerabilities"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6597-6272","authenticated-orcid":false,"given":"Ling","family":"Jin","sequence":"first","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9618-4830","authenticated-orcid":false,"given":"Yinzhi","family":"Cao","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Johns Hopkins University, Baltimore, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4103-1498","authenticated-orcid":false,"given":"Yan","family":"Chen","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, Northwestern University, Evanston, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Di","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9806-7016","authenticated-orcid":false,"given":"Simone","family":"Campanoni","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, Northwestern University, Evanston, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"SWC-107, Reentrancy."},{"key":"ref2","article-title":"SWC-101, Integer Overflow and Underflow."},{"key":"ref3","article-title":"EOS Smart Contract Security Best Practices","year":"2019"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978309"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23082"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274743"},{"key":"ref7","article-title":"Smashing ethereum smart contracts for fun and real profit","volume-title":"Proc. Hitb Secur. Conf.","author":"Mueller"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274737"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3377644.3377650"},{"key":"ref10","article-title":"Vandal: A scalable security analysis framework for smart contracts","author":"Brent","year":"2018"},{"key":"ref11","first-page":"2793","article-title":"An ever-evolving game: Evaluation of real-world attacks and defenses in ethereum ecosystem","volume-title":"Proc. 29th USENIX Secur. Symp. Assoc.","author":"Zhou"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-Companion.2019.00029"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978326"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238177"},{"key":"ref15","first-page":"1317","article-title":"teEther: Gnawing at ethereum to automatically exploit smart contracts","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Krupp"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-4847-8_6"},{"key":"ref17","article-title":"wasm2c: Convert wasm files to C source and header."},{"key":"ref19","article-title":"llvmlite User Guide."},{"key":"ref20","first-page":"209","article-title":"KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs","volume-title":"Proc. 8th USENIX Conf. Oper. Syst. Des. Implementation","author":"Cadar"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78800-3_24"},{"key":"ref22","article-title":"Ethereum Smart Contract Bug Injection Framework."},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/WETSEB.2019.00008"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243780"},{"key":"ref25","article-title":"The code of Solidity contract \u201dEthsplit\u201d from Etherscan."},{"key":"ref26","article-title":"The account information of EOS contract \u201dGameworldcom\u201d from bloks.io."},{"key":"ref27","article-title":"The code of EOS contract \u201dBlaster\u201d from GitHub."},{"key":"ref28","article-title":"The code of Solidity contract \u201dHmcDistributor\u201d from Etherscan."},{"key":"ref29","article-title":"The code of Solidity contract \u201dNumbersToken2\u201d from Etherscan."},{"key":"ref30","article-title":"The code of Solidity contract \u201dAgricoin\u201d from Etherscan."},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2560217.2560219"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.31"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2014.2299198"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354224"},{"key":"ref35","first-page":"781","article-title":"FUZE: Towards facilitating exploit generation for kernel use-after-free vulnerabilities","volume-title":"Proc. 27th USENIX Secur. Symp. Secur.","author":"Wu"},{"key":"ref36","first-page":"1093","article-title":"KOOBE: Towards facilitating exploit generation of kernel out-of-bounds write vulnerabilities","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Chen"},{"key":"ref37","article-title":"American Fuzzy Lop.","author":"Zalewski"},{"key":"ref38","first-page":"778","article-title":"sFuzz: An efficient adaptive fuzzer for solidity smart contracts","volume-title":"Proc. ACM\/IEEE 42nd Int. Conf. Softw. Eng.","author":"Nguyen"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ASE51524.2021.9678888"},{"key":"ref40","article-title":"Mythril Github Project."},{"key":"ref41","first-page":"1591","article-title":"The art of the scam: Demystifying honeypots in ethereum smart contracts","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Torres"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SANER.2017.7884650"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3276486"},{"key":"ref44","first-page":"1371","article-title":"Erays: Reverse engineering ethereum\u2019s opaque smart contracts","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Zhou"},{"key":"ref45","article-title":"EOSAFE: Security analysis of EOSIO smart contracts","volume-title":"Proc. 30th USENIX Secur. Symp. Assoc.","author":"He"},{"key":"ref46","article-title":"TXSPECTOR: Uncovering attacks in ethereum from transactions","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Zhang"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3158136"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24449"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23413"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24267"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/2993600.2993611"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-89722-6_10"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417250"},{"key":"ref54","first-page":"9","article-title":"SmartCheck: Static analysis of ethereum smart contracts","volume-title":"Proc. IEEE\/ACM 1st Int. Workshop Emerg. Trends Softw. Eng. Blockchain","author":"Tikhomirov"},{"key":"ref55","article-title":"ETHBMC: A bounded model checker for smart contracts","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Frank"},{"key":"ref56","article-title":"EVMPATCH: Timely and automated patching of ethereum smart contracts","volume-title":"Proc. 30th USENIX Secur. Symp. Assoc.","author":"Rodler"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2018.8500488"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-54455-6_8"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/IWBOSE.2018.8327567"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3282373.3282419"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978362"},{"key":"ref62","article-title":"Smart contract vulnerabilities: Does anyone care?","author":"Perez","year":"2019"},{"key":"ref63","article-title":"Who spent my EOS? on the (in) security of resource management of EOS. IO","volume-title":"Proc. 13th USENIX Workshop Offensive Technol.","author":"Lee"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53357-4_6"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243858"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-35746-7_11"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2881246"},{"key":"ref68","first-page":"1335","article-title":"Enter the hydra: Towards principled bug bounties and exploit-resistant smart contracts","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Breindenbach"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243795"},{"key":"ref70","first-page":"1353","article-title":"Arbitrum: Scalable, private smart contracts","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Kalodner"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10016903\/09674230.pdf?arnumber=9674230","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,13]],"date-time":"2024-01-13T22:06:44Z","timestamp":1705183604000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9674230\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1,1]]},"references-count":69,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3141396","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,1,1]]}}}