{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T19:44:06Z","timestamp":1782848646240,"version":"3.54.5"},"reference-count":97,"publisher":"Association for Computing Machinery (ACM)","issue":"FSE","license":[{"start":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T00:00:00Z","timestamp":1782777600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. ACM Softw. Eng."],"published-print":{"date-parts":[[2026,6,30]]},"abstract":"<jats:p>Serving as the first touch point for users to the cryptocurrency world, cryptocurrency wallets allow users to manage, receive, and transmit digital assets on blockchains and interact with emerging decentralized finance (DeFi) applications. Unfortunately, cryptocurrency wallets have always been the prime targets for attackers, and incidents of wallet breaches have been reported from time to time. Although some recent studies have characterized the vulnerabilities and scams related to wallets, they have mostly been studied at a coarse granularity, overlooking potential risks inherent in detailed designs of cryptocurrency wallets, especially from perspectives including user interaction and advanced features. To fill the void, in this paper, we present a fine-grained security analysis of browser-based cryptocurrency wallets. To pinpoint security issues in wallet components, we design WalleTruth, a visual-oriented testing framework specifically for browser-based wallet extensions. We have identified 12 attack vectors that can be abused by attackers to exploit cryptocurrency wallets and exposed 21 concrete attack strategies. By applying WalleTruth on 39 widely-adopted browser-based wallet extensions, we find that all of them can be abused to steal crypto assets from innocent users. Identified potential attack vectors were reported to developers in a timely manner and 26 issues have been patched already. This calls for urgent action from the community to mitigate threats related to cryptocurrency wallets.<\/jats:p>","DOI":"10.1145\/3797150","type":"journal-article","created":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T17:06:14Z","timestamp":1782839174000},"page":"182-204","source":"Crossref","is-referenced-by-count":0,"title":["WalleTruth: Visual-Oriented Software Testing for Web3 Wallet Browser Extensions"],"prefix":"10.1145","volume":"3","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1485-2832","authenticated-orcid":false,"given":"Xiaohui","family":"Hu","sequence":"first","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9980-7298","authenticated-orcid":false,"given":"Ningyu","family":"He","sequence":"additional","affiliation":[{"name":"Hong Kong Polytechnic University, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1100-8633","authenticated-orcid":false,"given":"Haoyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,30]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"Retrieved","year":"2025","unstructured":"2022. Infra: Ethereum Standard API | ETH Nodes as a Service. Retrieved May 11, 2025 from https:\/\/www.infura.io\/ product\/ethereum"},{"key":"e_1_2_1_2_1","unstructured":"2022. Introducing Permit2 & Universal Router. Retrieved May 11 2024 from https:\/\/blog.uniswap.org\/permit2-anduniversal-router"},{"key":"e_1_2_1_3_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Across: A new paradigm in cross-chain experiences, seamlessly connecting users with applications. Retrieved Oct 31, 2024 from https:\/\/across.to\/"},{"key":"e_1_2_1_4_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. AegisWeb3: Safeguard Your Web3 Exploration. Retrieved Oct 31, 2024 from https:\/\/www.aegisweb3.com\/"},{"key":"e_1_2_1_5_1","volume-title":"Anti-Scam Solution. Retrieved","author":"One","year":"2024","unstructured":"2024. All-in-One Web3, Anti-Scam Solution. Retrieved September 15, 2024 from https:\/\/www.scamsniffer.io\/"},{"key":"e_1_2_1_6_1","volume-title":"Retrieved","author":"Wallet Bitget","year":"2024","unstructured":"2024. Bitget Wallet: Your Web3 Trading Wallet of The Future. Retrieved Apr 15, 2024 from https:\/\/web3.bitget.com\/en\/"},{"key":"e_1_2_1_7_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Blockchain Transaction Simulation: Insights and Applications. Retrieved May 11, 2024 from https:\/\/bitquery.io\/ blog\/transaction-simulation"},{"key":"e_1_2_1_8_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Blur: NFT Marketplace for Pro Traders. Retrieved Oct 31, 2024 from https:\/\/blur.io\/"},{"key":"e_1_2_1_9_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Braavos Starknet Wallet -Best Smart Contract Wallet. Retrieved Oct 31, 2024 from https:\/\/braavos.app\/"},{"key":"e_1_2_1_10_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Bybit: Your Gateway to Web3. Retrieved Oct 31, 2024 from https:\/\/www.bybit.com\/en\/web3\/home"},{"key":"e_1_2_1_11_1","volume-title":"Retrieved","author":"Wallet Super","year":"2024","unstructured":"2024. Coin98 Super Wallet: The Gateway To The Open Internet. Retrieved Oct 31, 2024 from https:\/\/coin98.com\/"},{"key":"e_1_2_1_12_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Coinbase Wallet -Your key to the world of crypto. Retrieved Oct 31, 2024 from https:\/\/www.coinbase.com\/wallet"},{"key":"e_1_2_1_13_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. CoinGecko: Cryptocurrency Prices by Market Cap. Retrieved September 15, 2024 from https:\/\/www.coingecko.com\/"},{"key":"e_1_2_1_14_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Crypto Hacks 2024: Full List Of Scams, Exploits And Vulnerabilities Including BOGE, NORMIE, & Pump.fun. Retrieved May 11, 2024 from https:\/\/www.ccn.com\/education\/crypto\/crypto-hacks-exploits-full-list-scams-vulnerabilities\/"},{"key":"e_1_2_1_15_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Cryptocurrency statistics by CoinGecko. Retrieved Apr 15, 2024 from https:\/\/www.coingecko.com\/"},{"key":"e_1_2_1_16_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Curve: Swap. Retrieved Oct 31, 2024 from https:\/\/curve.fi\/#\/ethereum\/swap"},{"key":"e_1_2_1_17_1","volume-title":"Retrieved","year":"2024","unstructured":"EIP-712: Typed structured data hashing and signing. Retrieved May 11, 2024 from https:\/\/eips.ethereum.org\/EIPS\/ eip-712"},{"key":"e_1_2_1_18_1","unstructured":"EIP Meaning (Ethereum Improvement Proposal). Retrieved September 15 2024 from https:\/\/www.webopedia. com\/crypto\/learn\/eip-ethereum-improvement-proposal\/"},{"key":"e_1_2_1_19_1","volume-title":"Polkadot and Bitcoin Wallet. Retrieved","year":"2024","unstructured":"2024. Enkrypt: Ethereum, Polkadot and Bitcoin Wallet. Retrieved Oct 31, 2024 from https:\/\/www.enkrypt.com\/"},{"key":"e_1_2_1_20_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. ERC-191: Signed Data Standard. Retrieved May 11, 2024 from https:\/\/eips.ethereum.org\/EIPS\/eip-191"},{"key":"e_1_2_1_21_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. ERC-4361: Sign-In with Ethereum. Retrieved May 11, 2024 from https:\/\/github.com\/ethereum\/ercs\/blob\/master\/ ERCS\/erc-4361.md"},{"key":"e_1_2_1_22_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Exodus Crypto Wallet. Retrieved Oct 31, 2024 from https:\/\/www.exodus.com\/"},{"key":"e_1_2_1_23_1","volume-title":"Fire-Web3 Safety Tool. Retrieved","year":"2024","unstructured":"2024. Fire-Web3 Safety Tool. Retrieved May 11, 2024 from https:\/\/www.joinfire.xyz\/"},{"key":"e_1_2_1_24_1","unstructured":"2024. Gate.io | Gate. Retrieved Oct 31 2024 from https:\/\/www.gate.io\/"},{"key":"e_1_2_1_25_1","unstructured":"2024. Hana Wallet. Retrieved Oct 31 2024 from https:\/\/www.hanawallet.io\/"},{"key":"e_1_2_1_26_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Interacting with a Resolver. Retrieved May 11, 2024 from https:\/\/docs.ens.domains\/resolvers\/interacting"},{"key":"e_1_2_1_27_1","volume-title":"Retrieved","author":"Wallet Klever","year":"2024","unstructured":"2024. Klever Wallet: Best Multi-Chain Wallet. Retrieved Oct 31, 2024 from https:\/\/klever.io\/en-us"},{"key":"e_1_2_1_28_1","unstructured":"2024. Liquidity Wallet.io. Retrieved Apr 15 2024 from https:\/\/www.liquality.io\/"},{"key":"e_1_2_1_29_1","volume-title":"Meet Core. Your home for exploring the world of Avalanche and beyond. Retrieved","year":"2024","unstructured":"2024. Meet Core. Your home for exploring the world of Avalanche and beyond. Retrieved Oct 31, 2024 from https: \/\/core.app\/en\/"},{"key":"e_1_2_1_30_1","volume-title":"Retrieved","author":"Documents MetaSleuth","year":"2024","unstructured":"2024. MetaSleuth Documents: Address Label API. Retrieved May 11, 2024 from https:\/\/docs.metasleuth.io\/blocksec-amlapi\/address-label-api"},{"key":"e_1_2_1_31_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. The Most Secure Web3 Wallet | First Wallet With Rewards. Retrieved Oct 31, 2024 from https:\/\/getaurox.com\/wallet"},{"key":"e_1_2_1_32_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Non-Custodial Wallet For Crypto, DeFi, NFTs, Web3 | Frontier. Retrieved Oct 31, 2024 from https:\/\/www.frontier.xyz\/"},{"key":"e_1_2_1_33_1","volume-title":"Retrieved","author":"Wallet OKX","year":"2024","unstructured":"2024. OKX Web3 Wallet -The ultimate self-custody wallet for cryptocurrency. Retrieved Oct 31, 2024 from https: \/\/www.okx.com\/web3\/rewritethesystem"},{"key":"e_1_2_1_34_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. OneKey: Hardware Wallet & Crypto DeFi Wallet | Crypto Security. Retrieved Oct 31, 2024 from https:\/\/onekey.so\/"},{"key":"e_1_2_1_35_1","volume-title":"the largest NFT marketplace. Retrieved","year":"2024","unstructured":"2024. OpenSea, the largest NFT marketplace. Retrieved Apr 15, 2024 from https:\/\/opensea.io\/"},{"key":"e_1_2_1_36_1","unstructured":"2024. Pail Wallet. Retrieved Oct 31 2024 from https:\/\/paliwallet.com\/"},{"key":"e_1_2_1_37_1","unstructured":"2024. Phantom -Crypto & NFT Wallet -Solana | Ethereum | Polygon. Retrieved Oct 31 2024 from https:\/\/phantom.app\/"},{"key":"e_1_2_1_38_1","volume-title":"Retrieved","author":"Universe Pocket","year":"2024","unstructured":"2024. Pocket Universe: Protect your web3 assets. Retrieved Apr 15, 2024 from https:\/\/www.pocketuniverse.app\/"},{"key":"e_1_2_1_39_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Puppeteer: a JavaScript library which provides a high-level API. Retrieved Apr 15, 2024 from https:\/\/pptr.dev\/"},{"key":"e_1_2_1_40_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Rabby: The game-changing wallet. Retrieved Oct 31, 2024 from https:\/\/rabby.io\/"},{"key":"e_1_2_1_41_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Report of the Potential Phishing Transaction. Retrieved May 11, 2024 from https:\/\/metasleuth.io\/report\/ 2ade8c79278dc8fcaa971e7a373959fb"},{"key":"e_1_2_1_42_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. SafePal Crypto Hardware Wallet (Official) | The best wallet to protect your assets. Retrieved Oct 31, 2024 from https:\/\/www.safepal.com\/en\/"},{"key":"e_1_2_1_43_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Sender Wallet -Your favorite Web3 wallet. Retrieved Oct 31, 2024 from https:\/\/senderwallet.io\/"},{"key":"e_1_2_1_44_1","unstructured":"2024. Sequence | All-in-One Web3 Wallet. Retrieved Oct 31 2024 from https:\/\/sequence.build\/landing"},{"key":"e_1_2_1_45_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Slowmist Wallet Hacks. Retrieved Apr 15, 2024 from https:\/\/hacked.slowmist.io\/?c=Wallet"},{"key":"e_1_2_1_46_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. SubWallet -Highly secure and comprehensive Web3 wallet. Retrieved Oct 31, 2024 from https:\/\/www.subwallet.app\/"},{"key":"e_1_2_1_47_1","unstructured":"2024. SuperRare | Premier Digital Art Gallery Auction House. Retrieved Oct 31 2024 from https:\/\/superrare.com\/"},{"key":"e_1_2_1_48_1","volume-title":"Retrieved","author":"Pocket Token","year":"2024","unstructured":"2024. Token Pocket: Your secure crypto wallet to explore blockchain. Retrieved Apr 15, 2024 from https:\/\/www. tokenpocket.pro\/"},{"key":"e_1_2_1_49_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Transaction Simulation By Alchemy Devs -a Solution to Crypto Scams? Retrieved May 11, 2024 from https: \/\/www.binance.com\/en\/square\/post\/181786"},{"key":"e_1_2_1_50_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. True crypto ownership. Powerful Web3 experiences. Retrieved Oct 31, 2024 from https:\/\/trustwallet.com\/?utm_ source=cryptwerk"},{"key":"e_1_2_1_51_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Trust Wallet Scams To Watch Out For In 2024 And How To Avoid Them. Retrieved May 11, 2024 from https: \/\/www.thecoinrepublic.com\/2024\/06\/02\/trust-wallet-scams-to-watch-out-for-in-2024-and-how-to-avoid-them\/"},{"key":"e_1_2_1_52_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Virgo: The Rewarding Crypto Wallet. Retrieved Oct 31, 2024 from https:\/\/www.virgo.net\/"},{"key":"e_1_2_1_53_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. The Wallet Guard Application. Retrieved May 11, 2024 from https:\/\/www.walletguard.app\/"},{"key":"e_1_2_1_54_1","volume-title":"Retrieved","author":"Antivirus","year":"2024","unstructured":"2024. Web3 Antivirus | Protecting your digital assets. Retrieved Oct 31, 2024 from https:\/\/web3antivirus.io\/"},{"key":"e_1_2_1_55_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. What is Alchemy Transaction Simulator. Retrieved Apr 15, 2024 from https:\/\/docs.alchemy.com\/reference\/ simulation"},{"key":"e_1_2_1_56_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. What is Argent X? Retrieved May 11, 2024 from https:\/\/www.argent.xyz\/learn\/what-is-argent-x\/"},{"key":"e_1_2_1_57_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. What is ENS? Retrieved Apr 15, 2024 from https:\/\/docs.metamask.io\/wallet\/reference\/personal_sign\/"},{"key":"e_1_2_1_58_1","volume-title":"What is 'eth_sign'. Retrieved","year":"2024","unstructured":"2024. What is 'eth_sign'. Retrieved May 11, 2024 from https:\/\/docs.vechain.org\/core-concepts\/evm-compatibility\/testcoverage\/eth_sign"},{"key":"e_1_2_1_59_1","volume-title":"What is 'eth_signTypedData'. Retrieved","year":"2024","unstructured":"2024. What is 'eth_signTypedData'. Retrieved May 11, 2024 from https:\/\/docs.metamask.io\/wallet\/reference\/json-rpcmethods\/eth_signtypeddata_v4\/"},{"key":"e_1_2_1_60_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. What is message signing and transaction signing. Retrieved Oct 31, 2024 from https:\/\/academy.saakuru.com\/ message-signing-and-transaction-signing\/"},{"key":"e_1_2_1_61_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. What is MetaMask? How to Use the Top Ethereum Wallet. Retrieved Apr 15, 2024 from https:\/\/decrypt.co\/ resources\/metamask"},{"key":"e_1_2_1_62_1","volume-title":"Superior. Retrieved","year":"2024","unstructured":"Wigwam, your go-to Web3 wallet: Secure, Simple, Superior. Retrieved Oct 31, 2024 from https:\/\/wigwam.app\/ [64] 2024. XDEFI Wallet: DeFi Wallet. Retrieved Oct 31, 2024 from https:\/\/www.xdefi.io\/"},{"key":"e_1_2_1_63_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Yeti is a web3 wallet built from the ground up to support the multi-chain future. Retrieved Oct 31, 2024 from https:\/\/github.com\/yetichain\/wallet-extension"},{"key":"e_1_2_1_64_1","volume-title":"Retrieved","author":"Zeal Wallet","year":"2024","unstructured":"2024. Zeal Wallet | The first onchain wallet for real life. Retrieved Oct 31, 2024 from https:\/\/www.zeal.app\/"},{"key":"e_1_2_1_65_1","volume-title":"Retrieved","year":"2024","unstructured":"2024. Zerion: Crypto Wallet for NFTs & DeFi. Retrieved Oct 31, 2024 from https:\/\/zerion.io\/"},{"key":"e_1_2_1_66_1","volume-title":"Retrieved","year":"2025","unstructured":"2025. Chainabuse -View Reports. Retrieved Apr 04, 2025 from https:\/\/www.chainabuse.com\/reports"},{"key":"e_1_2_1_67_1","volume-title":"Crypto Users Lose $1.2M to Address Poisoning Scams","year":"2025","unstructured":"2025. Crypto Users Lose $1.2M to Address Poisoning Scams in Mar 2025 -Stay Vigilant! Retrieved Apr 04, 2025 from https:\/\/www.binance.com\/en\/square\/post\/21795734988513"},{"key":"e_1_2_1_68_1","first-page":"2025","volume-title":"Retrieved","year":"2025","unstructured":"2025. Cryptocurrency Industry Faces Record Losses in February 2025. Retrieved Apr 04, 2025 from https:\/\/www.binance. com\/en\/square\/post\/03-05-2025-cryptocurrency-industry-faces-record-losses-in-february-2025-21133626571961"},{"key":"e_1_2_1_69_1","volume-title":"Retrieved","year":"2025","unstructured":"2025. How Many Cryptocurrencies are There In 2025? Retrieved Apr 05, 2025 from https:\/\/explodingtopics.com\/blog\/ number-of-cryptocurrencies"},{"key":"e_1_2_1_70_1","volume-title":"Retrieved","year":"2025","unstructured":"2026. Introduction of Claude Sonnet 3.7. Retrieved May 11, 2025 from https:\/\/docs.anthropic.com\/en\/docs\/aboutclaude\/models\/overview"},{"key":"e_1_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3123894"},{"key":"e_1_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2020\/621"},{"key":"e_1_2_1_73_1","volume-title":"Dissecting Payload-based Transaction Phishing on Ethereum. arXiv preprint arXiv:2409.02386","author":"Chen Zhuo","year":"2024","unstructured":"Zhuo Chen, Yufeng Hu, Bowen He, Dong Luo, Lei Wu, and Yajin Zhou. 2024. Dissecting Payload-based Transaction Phishing on Ethereum. arXiv preprint arXiv:2409.02386 (2024)."},{"key":"e_1_2_1_74_1","unstructured":"Tianyang Chi Ningyu He Xiaohui Hu and Haoyu Wang. 2024. Remeasuring the Arbitrage and Sandwich Attacks of Maximal Extractable Value in Ethereum. arXiv:2405.17944 [cs.CR] https:\/\/arxiv.org\/abs\/2405.17944"},{"key":"e_1_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559342"},{"key":"e_1_2_1_76_1","volume-title":"SoK: Design, Vulnerabilities and Defense of Cryptocurrency Wallets. arXiv preprint arXiv:2307.12874","author":"Erinle Yimika","year":"2023","unstructured":"Yimika Erinle, Yathin Kethepalli, Yebo Feng, and Jiahua Xu. 2023. SoK: Design, Vulnerabilities and Defense of Cryptocurrency Wallets. arXiv preprint arXiv:2307.12874 (2023)."},{"key":"e_1_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00120"},{"key":"e_1_2_1_78_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3596906","article-title":"Security aspects of cryptocurrency wallets-a systematic literature review","volume":"56","author":"Houy Sabine","year":"2023","unstructured":"Sabine Houy, Philipp Schmid, and Alexandre Bartel. 2023. Security aspects of cryptocurrency wallets-a systematic literature review. Comput. Surveys 56, 1 (2023), 1-31.","journal-title":"Comput. Surveys"},{"key":"e_1_2_1_79_1","volume-title":"2020 25th International Conference on Engineering of Complex Computer Systems (ICECCS). IEEE, 125-134","author":"Ji Ru","year":"2020","unstructured":"Ru Ji, Ningyu He, Lei Wu, Haoyu Wang, Guangdong Bai, and Yao Guo. 2020. Deposafe: Demystifying the fake deposit vulnerability in ethereum smart contracts. In 2020 25th International Conference on Engineering of Complex Computer Systems (ICECCS). IEEE, 125-134."},{"key":"e_1_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24584"},{"key":"e_1_2_1_81_1","article-title":"Understanding the risks associated with wallets, depository services, trading, lending, and borrowing in the crypto space","volume":"7","author":"Mikhaylov Alexey","year":"2023","unstructured":"Alexey Mikhaylov. 2023. Understanding the risks associated with wallets, depository services, trading, lending, and borrowing in the crypto space. Journal of Infrastructure, Policy and Development 7, 3 (2023).","journal-title":"Journal of Infrastructure, Policy and Development"},{"key":"e_1_2_1_82_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Perez Daniel","unstructured":"Daniel Perez and Benjamin Livshits. 2021. Smart Contract Vulnerabilities: Vulnerable Does Not Imply Exploited. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, 1325-1341. https:\/\/www.usenix.org\/ conference\/usenixsecurity21\/presentation\/perez"},{"key":"e_1_2_1_83_1","volume-title":"2020 IEEE international conference on blockchain and cryptocurrency (ICBC). IEEE, 1-8.","author":"Phillips Ross","year":"2020","unstructured":"Ross Phillips and Heidi Wilder. 2020. Tracing cryptocurrency scams: Clustering replicated advance-fee and phishing websites. In 2020 IEEE international conference on blockchain and cryptocurrency (ICBC). IEEE, 1-8."},{"key":"e_1_2_1_84_1","volume-title":"Analysis on Blockchain Vulnerabilities & Attacks on Wallet. In 2021 3rd international conference on advances in computing, communication control and networking (ICAC3N). IEEE, 1515-1521","author":"Deepak","unstructured":"Deepak Prashar et al. 2021. Analysis on Blockchain Vulnerabilities & Attacks on Wallet. In 2021 3rd international conference on advances in computing, communication control and networking (ICAC3N). IEEE, 1515-1521."},{"key":"e_1_2_1_85_1","volume-title":"An Empirical Analysis of Security and Privacy Risks in Android Cryptocurrency Wallet Apps. In International Conference on Applied Cryptography and Network Security. Springer, 699-725","author":"Sentana I Wayan Budi","year":"2023","unstructured":"I Wayan Budi Sentana, Muhammad Ikram, and Mohamed Ali Kaafar. 2023. An Empirical Analysis of Security and Privacy Risks in Android Cryptocurrency Wallet Apps. In International Conference on Applied Cryptography and Network Security. Springer, 699-725."},{"key":"e_1_2_1_86_1","first-page":"1307","volume-title":"Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications. In 30th USENIX Security Symposium (USENIX Security 21)","author":"Su Liya","year":"2021","unstructured":"Liya Su, Xinyue Shen, Xiangyu Du, Xiaojing Liao, XiaoFeng Wang, Luyi Xing, and Baoxu Liu. 2021. Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications. In 30th USENIX Security Symposium (USENIX Security 21). USENIX Association, 1307-1324. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/ presentation\/su"},{"key":"e_1_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCSP49186.2020.9315193"},{"key":"e_1_2_1_88_1","first-page":"779","volume-title":"Proceedings of Second Doctoral Symposium on Computational Intelligence, Deepak Gupta, Ashish Khanna, Vineet Kansal, Giancarlo Fortino, and Aboul Ella Hassanien (Eds.)","author":"Rishabh Taruna","year":"2022","unstructured":"Taruna and Rishabh. 2022. Analysis of Security Issues in Blockchain Wallet. In Proceedings of Second Doctoral Symposium on Computational Intelligence, Deepak Gupta, Ashish Khanna, Vineet Kansal, Giancarlo Fortino, and Aboul Ella Hassanien (Eds.). Springer Singapore, Singapore, 779-792."},{"key":"e_1_2_1_89_1","first-page":"769","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Torres Christof Ferreira","year":"2023","unstructured":"Christof Ferreira Torres, Fiona Willi, and Shweta Shinde. 2023. Is Your Wallet Snitching On You? An Analysis on the Privacy Implications of Web3. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, Anaheim, CA, 769-786. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/torres"},{"key":"e_1_2_1_90_1","volume-title":"Horus: A Security Assessment Framework for Android Crypto Wallets. In Security and Privacy in Communication Networks, Joaquin Garcia-Alfaro, Shujun Li, Radha Poovendran, Herv\u00e9 Debar","author":"Uddin Md Shahab","year":"2021","unstructured":"Md Shahab Uddin, Mohammad Mannan, and Amr Youssef. 2021. Horus: A Security Assessment Framework for Android Crypto Wallets. In Security and Privacy in Communication Networks, Joaquin Garcia-Alfaro, Shujun Li, Radha Poovendran, Herv\u00e9 Debar, and Moti Yung (Eds.). Springer International Publishing, Cham, 120-139."},{"key":"e_1_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10515-024-00430-3"},{"key":"e_1_2_1_92_1","volume-title":"2020 APWG Symposium on Electronic Crime Research (eCrime). IEEE, 1-14","author":"Xia Pengcheng","year":"2020","unstructured":"Pengcheng Xia, Haoyu Wang, Xiapu Luo, Lei Wu, Yajin Zhou, Guangdong Bai, Guoai Xu, Gang Huang, and Xuanzhe Liu. 2020. Don't fish in troubled waters! characterizing coronavirus-themed cryptocurrency scams. In 2020 APWG Symposium on Electronic Crime Research (eCrime). IEEE, 1-14."},{"key":"e_1_2_1_93_1","first-page":"1585","volume-title":"Proceedings of the ACM on Web Conference","author":"Ye Guoyi","year":"2024","unstructured":"Guoyi Ye, Geng Hong, Yuan Zhang, and Min Yang. 2024. Interface Illusions: Uncovering the Rise of Visual Scams in Cryptocurrency Wallets. In Proceedings of the ACM on Web Conference 2024. 1585-1595."},{"key":"e_1_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.1145\/3603165.3607444"},{"key":"e_1_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598057"},{"key":"e_1_2_1_96_1","volume-title":"Following devils' footprint: towards real-time detection of price manipulation attacks","author":"Zhang Bosi","unstructured":"Bosi Zhang, Ningyu He, Xiaohui Hu, Kai Ma, and Haoyu Wang. 2025. Following devils' footprint: towards real-time detection of price manipulation attacks. USENIX Association, USA."},{"key":"e_1_2_1_97_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179435"}],"container-title":["Proceedings of the ACM on Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3797150","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T18:49:23Z","timestamp":1782845363000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3797150"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,30]]},"references-count":97,"journal-issue":{"issue":"FSE","published-print":{"date-parts":[[2026,6,30]]}},"alternative-id":["10.1145\/3797150"],"URL":"https:\/\/doi.org\/10.1145\/3797150","relation":{},"ISSN":["2994-970X"],"issn-type":[{"value":"2994-970X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,30]]}}}