{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T11:37:16Z","timestamp":1791459436100,"version":"4.3.4"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,9,11]],"date-time":"2024-09-11T00:00:00Z","timestamp":1726012800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2023YFB2704801"],"award-info":[{"award-number":["2023YFB2704801"]}]},{"name":"National Natural Science Foundation of China","award":["62032025, 62332004, 62372485"],"award-info":[{"award-number":["62032025, 62332004, 62372485"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,9,11]]},"DOI":"10.1145\/3650212.3680321","type":"proceedings-article","created":{"date-parts":[[2024,9,11]],"date-time":"2024-09-11T11:44:25Z","timestamp":1726055065000},"page":"794-805","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["Midas: Mining Profitable Exploits in On-Chain Smart Contracts via Feedback-Driven Fuzzing and Differential Analysis"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-6708-4074","authenticated-orcid":false,"given":"Mingxi","family":"Ye","sequence":"first","affiliation":[{"name":"Sun Yat-sen University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-5048-2516","authenticated-orcid":false,"given":"Xingwei","family":"Lin","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9597-9888","authenticated-orcid":false,"given":"Yuhong","family":"Nan","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5155-8547","authenticated-orcid":false,"given":"Jiajing","family":"Wu","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7878-4330","authenticated-orcid":false,"given":"Zibin","family":"Zheng","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,9,11]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Jonathan Becker. 2024. Heimdall - an advanced EVM toolkit. https:\/\/github.com\/Jon-Becker\/heimdall-rs"},{"key":"e_1_3_2_1_2_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"William E","year":"2023","unstructured":"William E Bodell III, Sajad Meisami, and Yue Duan. 2023. Proxy hunting: understanding and characterizing proxy-based upgradeable smart contracts in blockchains. In 32nd USENIX Security Symposium (USENIX Security 23). 1829\u20131846."},{"key":"e_1_3_2_1_3_1","unstructured":"BugCrowd. 2023. BugCrowd: Bug Bounty Platform. https:\/\/www.bugcrowd.com\/"},{"key":"e_1_3_2_1_4_1","volume-title":"A next-generation smart contract and decentralized application platform. white paper, 3, 37","author":"Buterin Vitalik","year":"2014","unstructured":"Vitalik Buterin. 2014. A next-generation smart contract and decentralized application platform. white paper, 3, 37 (2014), 2\u20131."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE51524.2021.9678888"},{"key":"e_1_3_2_1_6_1","volume-title":"Cryptocurrency: A new investment opportunity? The journal of alternative investments, 20, 3","author":"Kuo Chuen David LEE","year":"2017","unstructured":"David LEE Kuo Chuen, Li Guo, and Yu Wang. 2017. Cryptocurrency: A new investment opportunity? The journal of alternative investments, 20, 3 (2017), 16\u201340."},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 32nd ACM\/IEEE International Conference on Software Engineering-Volume 1. 515\u2013524","author":"Clause James","year":"2010","unstructured":"James Clause and Alessandro Orso. 2010. Leakpoint: pinpointing the causes of memory leaks. In Proceedings of the 32nd ACM\/IEEE International Conference on Software Engineering-Volume 1. 515\u2013524."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78800-3_24"},{"key":"e_1_3_2_1_9_1","unstructured":"DeFiHackLabs. 2023. DeFi Hacks Reproduce - Foundry. https:\/\/github.com\/SunWeb3Sec\/DeFiHackLabs\/tree\/c9b3939abaccef5242d36cc6e47cb50c6fb7e3a0"},{"key":"e_1_3_2_1_10_1","unstructured":"M Eddington. [n. d.]. Peach fuzzer. http:\/\/peachfuzzer.com\/"},{"key":"e_1_3_2_1_11_1","unstructured":"Ethereum. 2024. Ethereum - JSON-RPC API. https:\/\/ethereum.org\/en\/developers\/docs\/apis\/json-rpc\/"},{"key":"e_1_3_2_1_12_1","unstructured":"Etherscan. 2023. Etherscan - The Ethereum Blockchain Explorer. https:\/\/etherscan.io\/"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/WETSEB.2019.00008"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560602"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00120"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3404366"},{"key":"e_1_3_2_1_17_1","unstructured":"HackerOne. 2023. HackerOne - Bug Bounty Platform. https:\/\/www.hackerone.com\/"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363230"},{"key":"e_1_3_2_1_19_1","unstructured":"Immunefi. 2023. Immunefi - Explore Bounties. https:\/\/immunefi.com\/explore\/"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238177"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/360248.360252"},{"key":"e_1_3_2_1_22_1","unstructured":"Byoungyoung Lee Chengyu Song Yeongjin Jang Tielei Wang Taesoo Kim Long Lu and Wenke Lee. 2015. Preventing use-after-free with dangling pointers nullification.. In NDSS."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3213846.3213874"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534222"},{"key":"e_1_3_2_1_25_1","unstructured":"libfuzzer@googlegroups.com. 2019. Libfuzzer - a library for coverage-guided fuzz testing. http:\/\/llvm.org\/docs\/LibFuzzer.html"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3095196"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978309"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3560264"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380334"},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the ACM on Programming Languages, 3, OOPSLA","author":"Padhye Rohan","year":"2019","unstructured":"Rohan Padhye, Caroline Lemieux, Koushik Sen, Laurent Simon, and Hayawardh Vijayakumar. 2019. Fuzzfactory: domain-specific fuzzing with waypoints. Proceedings of the ACM on Programming Languages, 3, OOPSLA (2019), 1\u201329."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134073"},{"key":"e_1_3_2_1_32_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Qin Kaihua","year":"2023","unstructured":"Kaihua Qin, Stefanos Chaliasos, Liyi Zhou, Benjamin Livshits, Dawn Song, and Arthur Gervais. 2023. The blockchain imitation game. In 32nd USENIX Security Symposium (USENIX Security 23). 3961\u20133978."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487811"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"crossref","unstructured":"Mahesh Shirole Maneesh Darisi and Sunil Bhirud. 2020. Cryptocurrency token: An overview. In IC-BCT 2019: Proceedings of the International Conference on Blockchain Technology. 133\u2013140.","DOI":"10.1007\/978-981-15-4542-9_12"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598059"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243780"},{"key":"e_1_3_2_1_37_1","unstructured":"Qin Wang Rujia Li Qi Wang and Shiping Chen. 2021. Non-fungible token (NFT): Overview evaluation opportunities and challenges. arXiv preprint arXiv:2105.07447."},{"key":"e_1_3_2_1_38_1","volume-title":"Ethereum: A secure decentralised generalised transaction ledger. Ethereum project yellow paper, 151","author":"Wood Gavin","year":"2014","unstructured":"Gavin Wood. 2014. Ethereum: A secure decentralised generalised transaction ledger. Ethereum project yellow paper, 151, 2014 (2014), 1\u201332."},{"key":"e_1_3_2_1_39_1","volume-title":"Defiranger: Detecting price manipulation attacks on defi applications. arXiv preprint arXiv:2104.15068.","author":"Wu Siwei","year":"2021","unstructured":"Siwei Wu, Dabao Wang, Jianting He, Yajin Zhou, Lei Wu, Xingliang Yuan, Qinming He, and Kui Ren. 2021. Defiranger: Detecting price manipulation attacks on defi applications. arXiv preprint arXiv:2104.15068."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3417064"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3324884.3416553"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"crossref","unstructured":"Shuo Yang Jiachi Chen and Zibin Zheng. 2023. Definition and Detection of Defects in NFT Smart Contracts. arXiv preprint arXiv:2305.15829.","DOI":"10.1145\/3597926.3598063"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598057"},{"key":"e_1_3_2_1_44_1","unstructured":"Micha\u0142 Zalewski. 2017. Technical \"Whitepaper\" for AFL. https:\/\/lcamtuf.coredump.cx\/afl\/technical_details.txt"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1093\/jfr\/fjaa010"},{"key":"e_1_3_2_1_46_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Zhang Zhuo","year":"2023","unstructured":"Zhuo Zhang, Zhiqiang Lin, Marcelo Morales, Xiangyu Zhang, and Kaiyuan Zhang. 2023. Your exploit is mine: Instantly synthesizing counterattack smart contract. In 32nd USENIX Security Symposium (USENIX Security 23). 1757\u20131774."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"crossref","unstructured":"Zhuo Zhang Brian Zhang Wen Xu and Zhiqiang Lin. 2023. Demystifying Exploitable Bugs in Smart Contracts.","DOI":"10.1109\/ICSE48619.2023.00061"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1504\/IJWGS.2018.095647"},{"key":"e_1_3_2_1_49_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Zhou Shunfan","year":"2020","unstructured":"Shunfan Zhou, Malte M\u00f6ser, Zhemin Yang, Ben Adida, Thorsten Holz, Jie Xiang, Steven Goldfeder, Yinzhi Cao, Martin Plattner, and Xiaojun Qin. 2020. An ever-evolving game: Evaluation of real-world attacks and defenses in ethereum ecosystem. In 29th USENIX Security Symposium (USENIX Security 20). 2793\u20132810."}],"event":{"name":"ISSTA '24: 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis","location":"Vienna Austria","acronym":"ISSTA '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","AITO"]},"container-title":["Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3650212.3680321","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3650212.3680321","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:50:07Z","timestamp":1750287007000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3650212.3680321"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,11]]},"references-count":49,"alternative-id":["10.1145\/3650212.3680321","10.1145\/3650212"],"URL":"https:\/\/doi.org\/10.1145\/3650212.3680321","relation":{},"subject":[],"published":{"date-parts":[[2024,9,11]]},"assertion":[{"value":"2024-09-11","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}