{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T11:38:42Z","timestamp":1791459522287,"version":"4.3.4"},"reference-count":44,"publisher":"Association for Computing Machinery (ACM)","issue":"ISSTA","license":[{"start":{"date-parts":[[2025,6,22]],"date-time":"2025-06-22T00:00:00Z","timestamp":1750550400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/publication-rights-and-licensing-policy"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. ACM Softw. Eng."],"published-print":{"date-parts":[[2025,6,22]]},"abstract":"<jats:p>Smart contract vulnerabilities have led to significant financial losses, with their increasing complexity rendering outright prevention of hacks increasingly challenging. This trend highlights the crucial need for advanced forensic analysis and real-time intrusion detection, where dynamic analysis plays a key role in dissecting smart contract executions. Therefore, there is a pressing need for a unified and generic representation of smart contract executions, complemented by an efficient methodology that enables the modeling and identification of a broad spectrum of emerging attacks<\/jats:p>\n                  <jats:p>\n                    We introduce C\n                    <jats:sc>lue<\/jats:sc>\n                    , a dynamic analysis framework specifically designed for the Ethereum virtual machine. Central to C\n                    <jats:sc>lue<\/jats:sc>\n                    is its ability to capture critical runtime information during contract executions, employing a novel graph-based representation, the Execution Property Graph. A key feature of C\n                    <jats:sc>lue<\/jats:sc>\n                    is its innovative graph traversal technique, which is adept at detecting complex attacks, including (read-only) reentrancy and price manipulation. Evaluation results reveal C\n                    <jats:sc>lue<\/jats:sc>\n                    \u2019s superior performance with high true positive rates and low false positive rates, outperforming state-of-the-art tools. Furthermore, C\n                    <jats:sc>lue<\/jats:sc>\n                    \u2019s efficiency positions it as a valuable tool for both forensic analysis and real-time intrusion detection.\n                  <\/jats:p>","DOI":"10.1145\/3728924","type":"journal-article","created":{"date-parts":[[2025,6,22]],"date-time":"2025-06-22T10:52:56Z","timestamp":1750589576000},"page":"1101-1122","source":"Crossref","is-referenced-by-count":4,"title":["Enhancing Smart Contract Security Analysis with Execution Property Graphs"],"prefix":"10.1145","volume":"2","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2190-3623","authenticated-orcid":false,"given":"Kaihua","family":"Qin","sequence":"first","affiliation":[{"name":"Yale University, New Haven, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6446-5072","authenticated-orcid":false,"given":"Zhe","family":"Ye","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-8576-7337","authenticated-orcid":false,"given":"Zhun","family":"Wang","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-2878-2314","authenticated-orcid":false,"given":"Weilin","family":"Li","sequence":"additional","affiliation":[{"name":"University College London, London, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2820-9872","authenticated-orcid":false,"given":"Liyi","family":"Zhou","sequence":"additional","affiliation":[{"name":"University of Sydney, Sydney, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7894-8828","authenticated-orcid":false,"given":"Chao","family":"Zhang","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9745-6802","authenticated-orcid":false,"given":"Dawn","family":"Song","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3565-3410","authenticated-orcid":false,"given":"Arthur","family":"Gervais","sequence":"additional","affiliation":[{"name":"University College London, London, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,6,22]]},"reference":[{"key":"e_1_3_1_2_2","volume-title":"Compilers: principles, techniques, & tools","author":"Aho Alfred V","year":"2007","unstructured":"Alfred V Aho, Monica S Lam, Ravi Sethi, and Jeffrey D Ullman. 2007. Compilers: principles, techniques, & tools. Pearson Education India."},{"key":"e_1_3_1_3_2","doi-asserted-by":"publisher","DOI":"10.1145\/390013.808479"},{"key":"e_1_3_1_4_2","doi-asserted-by":"crossref","first-page":"104","DOI":"10.1109\/FOSE.2007.27","volume-title":"Future of Software Engineering (FOSE\u201907)","author":"Binkley David","year":"2007","unstructured":"David Binkley. 2007. Source code analysis: A road map. In Future of Software Engineering (FOSE\u201907), 104\u2013119."},{"key":"e_1_3_1_5_2","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238192"},{"key":"e_1_3_1_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00084"},{"key":"e_1_3_1_7_2","unstructured":"CertiK. Curve Conundrum: The dForce Attack via a Read-Only Reentrancy Vector Exploit. https:\/\/www.certik.com\/resources\/blog\/curve-conundrum-the-dforce-attack-via-a-read-only-reentrancy-vector-exploit. Accessed on 10\/31\/2024."},{"key":"e_1_3_1_8_2","volume-title":"NDSS","author":"Chen Ting","year":"2020","unstructured":"Ting Chen, Rong Cao, Ting Li, Xiapu Luo, Guofei Gu, Yufei Zhang, Zhou Liao, Hang Zhu, Gang Chen, Zheyuan He, et al. 2020. SODA: A Generic Online Detection Framework for Smart Contracts.. In NDSS."},{"key":"e_1_3_1_9_2","first-page":"1","volume-title":"Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering","author":"Chen Zhiyang","year":"2024","unstructured":"Zhiyang Chen, Sidi Mohamed Beillahi, and Fan Long. 2024. Flashsyn: Flash loan attack synthesis via counter example driven approximation. In Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering, 1\u201313."},{"key":"e_1_3_1_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC52881.2021.00021"},{"key":"e_1_3_1_11_2","doi-asserted-by":"publisher","DOI":"10.1145\/3463274.3463348"},{"key":"e_1_3_1_12_2","doi-asserted-by":"publisher","DOI":"10.1109\/WETSEB.2019.00008"},{"key":"e_1_3_1_13_2","doi-asserted-by":"publisher","DOI":"10.1145\/24039.24041"},{"key":"e_1_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384756"},{"key":"e_1_3_1_15_2","unstructured":"Jens-Rene Giesen Sebastien Andreina Michael Rodler Ghassan O Karame and Lucas Davi. 2022. Practical Mitigation of Smart Contract Bugs. arXiv preprint arXiv:2203.00364 (2022)."},{"key":"e_1_3_1_16_2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3158136","article-title":"Online detection of effectively callback free objects with applications to smart contracts","volume":"2","author":"Grossman Shelly","year":"2017","unstructured":"Shelly Grossman, Ittai Abraham, Guy Golan-Gueta, Yan Michalevsky, Noam Rinetzky, Mooly Sagiv, and Yoni Zohar. 2017. Online detection of effectively callback free objects with applications to smart contracts. Proceedings of the ACM on Programming Languages 2, POPL (2017), 1\u201328.","journal-title":"Proceedings of the ACM on Programming Languages"},{"key":"e_1_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/143062.143156"},{"key":"e_1_3_1_18_2","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238177"},{"key":"e_1_3_1_19_2","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598124"},{"key":"e_1_3_1_20_2","unstructured":"Wenkai Li Jiuyang Bu Xiaoqi Li Hongli Peng Yuanzheng Niu and Xianyi Chen. 2022. A Survey of DeFi Security: Challenges and Opportunities. arXiv preprint arXiv:2206.11821 (2022)."},{"key":"e_1_3_1_21_2","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978309"},{"key":"e_1_3_1_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00133"},{"key":"e_1_3_1_23_2","unstructured":"Satoshi Nakamoto. 2008. Bitcoin: A peer-to-peer electronic cash system. https:\/\/bitcoin.org\/bitcoin.pdf."},{"key":"e_1_3_1_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380334"},{"issue":"2023","key":"e_1_3_1_25_2","article-title":"Enhancing Ethereum smart-contracts static analysis by computing a precise Control-Flow Graph of Ethereum bytecode","volume":"200","author":"Pasqua Michele","year":"2023","unstructured":"Michele Pasqua, Andrea Benini, Filippo Contro, Marco Crosara, Mila Dalla Preda, and Mariano Ceccato. 2023. Enhancing Ethereum smart-contracts static analysis by computing a precise Control-Flow Graph of Ethereum bytecode. Journal of Systems and Software 200 (2023), 111653.","journal-title":"Journal of Systems and Software"},{"key":"e_1_3_1_26_2","first-page":"1325","volume-title":"USENIX Security Symposium","author":"Perez Daniel","year":"2021","unstructured":"Daniel Perez and Benjamin Livshits. 2021. Smart Contract Vulnerabilities: Vulnerable Does Not Imply Exploited.. In USENIX Security Symposium, 1325\u20131341."},{"key":"e_1_3_1_27_2","first-page":"3961","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Qin Kaihua","year":"2023","unstructured":"Kaihua Qin, Stefanos Chaliasos, Liyi Zhou, Benjamin Livshits, Dawn Song, and Arthur Gervais. 2023. The blockchain imitation game. In 32nd USENIX Security Symposium (USENIX Security 23), 3961\u20133978."},{"key":"e_1_3_1_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487811"},{"key":"e_1_3_1_29_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-64322-8_1"},{"key":"e_1_3_1_30_2","unstructured":"QuillAudits. Decoding Sentiment Protocol\u2019s $1 Million Exploit | QuillAudits. https:\/\/quillaudits.medium.com\/decoding-sentiment-protocols-1-million-exploit-quillaudits-f36bee77d376. Accessed on 10\/31\/2024."},{"key":"e_1_3_1_31_2","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3473929"},{"key":"e_1_3_1_32_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23413"},{"key":"e_1_3_1_33_2","doi-asserted-by":"publisher","DOI":"10.1145\/2815072.2815073"},{"key":"e_1_3_1_34_2","doi-asserted-by":"crossref","first-page":"29","DOI":"10.4018\/978-1-61350-053-8.ch002","volume-title":"Graph data management: Techniques and applications","author":"Rodriguez Marko A","year":"2012","unstructured":"Marko A Rodriguez and Peter Neubauer. 2012. The graph traversal pattern. In Graph data management: Techniques and applications. IGI global, 29\u201346."},{"key":"e_1_3_1_35_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243780"},{"key":"e_1_3_1_36_2","article-title":"DeFiRanger: Detecting DeFi Price Manipulation Attacks","author":"Wu Siwei","year":"2023","unstructured":"Siwei Wu, Zhou Yu, Dabao Wang, Yajin Zhou, Lei Wu, Haoyu Wang, and Xingliang Yuan. 2023. DeFiRanger: Detecting DeFi Price Manipulation Attacks. IEEE Transactions on Dependable and Secure Computing (2023).","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"e_1_3_1_37_2","first-page":"402","volume-title":"Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis","author":"Xie Maoyi","year":"2024","unstructured":"Maoyi Xie, Ming Hu, Ziqiao Kong, Cen Zhang, Yebo Feng, Haijun Wang, Yue Xue, Hao Zhang, Ye Liu, and Yang Liu. 2024. DeFort: Automatic Detection and Analysis of Price Manipulation Attacks in DeFi Applications. In Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis, 402\u2013414."},{"key":"e_1_3_1_38_2","doi-asserted-by":"publisher","DOI":"10.1145\/3570639"},{"key":"e_1_3_1_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.44"},{"key":"e_1_3_1_40_2","first-page":"2775","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Zhang Mengya","year":"2020","unstructured":"Mengya Zhang, Xiaokuan Zhang, Yinqian Zhang, and Zhiqiang Lin. 2020. {TXSPECTOR}: Uncovering attacks in ethereum from transactions. In 29th USENIX Security Symposium (USENIX Security 20), 2775\u20132792."},{"key":"e_1_3_1_41_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00061"},{"key":"e_1_3_1_42_2","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534395"},{"key":"e_1_3_1_43_2","unstructured":"Liyi Zhou Kaihua Qin and Arthur Gervais. 2021. A2mm: Mitigating frontrunning transaction reordering and consensus instability in decentralized exchanges. arXiv preprint arXiv:2106.07371 (2021)."},{"key":"e_1_3_1_44_2","doi-asserted-by":"crossref","unstructured":"Liyi Zhou Xihan Xiong Jens Ernstberger Stefanos Chaliasos Zhipeng Wang Ye Wang Kaihua Qin Roger Wattenhofer Dawn Song and Arthur Gervais. 2022. SoK: Decentralized Finance (DeFi) Attacks. Cryptology ePrint Archive (2022).","DOI":"10.1109\/SP46215.2023.10179435"},{"key":"e_1_3_1_45_2","first-page":"2793","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Zhou Shunfan","year":"2020","unstructured":"Shunfan Zhou, Malte M\u00f6ser, Zhemin Yang, Ben Adida, Thorsten Holz, Jie Xiang, Steven Goldfeder, Yinzhi Cao, Martin Plattner, Xiaojun Qin, et al. 2020. An ever-evolving game: Evaluation of real-world attacks and defenses in ethereum ecosystem. In 29th USENIX Security Symposium (USENIX Security 20), 2793\u20132810."}],"container-title":["Proceedings of the ACM on Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3728924","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,23]],"date-time":"2026-08-23T13:52:05Z","timestamp":1787493125000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3728924"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,22]]},"references-count":44,"journal-issue":{"issue":"ISSTA","published-print":{"date-parts":[[2025,6,22]]}},"alternative-id":["10.1145\/3728924"],"URL":"https:\/\/doi.org\/10.1145\/3728924","relation":{},"ISSN":["2994-970X"],"issn-type":[{"value":"2994-970X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,22]]}}}