{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T15:06:47Z","timestamp":1784300807903,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,7,5]],"date-time":"2026-07-05T00:00:00Z","timestamp":1783209600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,7,5]]},"DOI":"10.1145\/3803437.3805223","type":"proceedings-article","created":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T14:27:39Z","timestamp":1784298459000},"page":"507-512","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["AllocScope: Towards Automated Vetting of Allocation Manipulation in Smart Contracts"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-1031-0385","authenticated-orcid":false,"given":"Yu","family":"Pan","sequence":"first","affiliation":[{"name":"CertiK, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0075-9573","authenticated-orcid":false,"given":"Jing","family":"Li","sequence":"additional","affiliation":[{"name":"CertiK, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4763-0774","authenticated-orcid":false,"given":"Qi","family":"Zhang","sequence":"additional","affiliation":[{"name":"CertiK, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7960-4741","authenticated-orcid":false,"given":"Xifeng","family":"Jin","sequence":"additional","affiliation":[{"name":"CertiK, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-7926-2596","authenticated-orcid":false,"given":"Yuannan","family":"Yang","sequence":"additional","affiliation":[{"name":"CertiK, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-7284-7317","authenticated-orcid":false,"given":"Dan","family":"She","sequence":"additional","affiliation":[{"name":"CertiK, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,7,17]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"the Solidity source analyzer. https:\/\/github.com\/crytic\/slither","author":"Slither","year":"2021","unstructured":"Slither, the Solidity source analyzer. https:\/\/github.com\/crytic\/slither, 2021."},{"key":"e_1_3_2_1_2_1","volume-title":"https:\/\/www.mturk.com\/mturk\/welcome","year":"2023","unstructured":"amazon mechanical turk. https:\/\/www.mturk.com\/mturk\/welcome, 2023."},{"key":"e_1_3_2_1_3_1","volume-title":"Simplicity and mass adoption. https:\/\/www.kucoin.com\/news\/flash\/defi-s-next-step-simplicity-and-mass-adoption","author":"Defi's","year":"2025","unstructured":"Defi's next step: Simplicity and mass adoption. https:\/\/www.kucoin.com\/news\/flash\/defi-s-next-step-simplicity-and-mass-adoption, 2025. Accessed: 2026-01-13."},{"key":"e_1_3_2_1_4_1","volume-title":"March","author":"Certi K.","year":"2023","unstructured":"CertiK. How safe is safemoon? analyzing the feta and bevo exploits, March 2023."},{"key":"e_1_3_2_1_5_1","volume-title":"How we audit: A comprehensive guide to certik's auditing methodology. https:\/\/www.certik.com\/resources\/blog\/how-we-audit-a-comprehensive-guide-to-certiks-auditing-methodology","author":"Certi K.","year":"2023","unstructured":"CertiK. How we audit: A comprehensive guide to certik's auditing methodology. https:\/\/www.certik.com\/resources\/blog\/how-we-audit-a-comprehensive-guide-to-certiks-auditing-methodology, 2023."},{"key":"e_1_3_2_1_6_1","volume-title":"Flashsyn: Flash loan attack synthesis via counter example driven approximation. ICSE '24","author":"Chen Z.","unstructured":"Chen, Z., Beillahi, S. M., and Long, F. Flashsyn: Flash loan attack synthesis via counter example driven approximation. ICSE '24, Association for Computing Machinery."},{"key":"e_1_3_2_1_7_1","unstructured":"Duan Y. Zhao X. Pan Y. Li S. Li M. Xu F. and Zhang M. Towards automated safety vetting of smart contracts in decentralized applications."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security '20)","author":"Frank J.","year":"2020","unstructured":"Frank, J., Aschermann, C., and Holz, T. Ethbmc: A bounded model checker for smart contracts. In Proceedings of the 29th USENIX Security Symposium (USENIX Security '20) (2020)."},{"key":"e_1_3_2_1_9_1","volume-title":"Proceedings of the 45th ACM SIGPLAN Symposium on Principles of Programming Languages (POPL '18)","author":"Grossman S.","year":"2018","unstructured":"Grossman, S., Abraham, I., Golan-Gueta, G., Michalevsky, Y., Rinetzky, N., Sagiv, M., and Zohar, Y. Online detection of effectively callback free objects with applications to smart contracts. In Proceedings of the 45th ACM SIGPLAN Symposium on Principles of Programming Languages (POPL '18) (2018)."},{"key":"e_1_3_2_1_10_1","volume-title":"Proceedings of the 2018 Network and Distributed System Security Symposium (NDSS '18)","author":"Kalra S.","year":"2018","unstructured":"Kalra, S., Goel, S., Dhawan, M., and Sharma, S. Zeus: Analyzing safety of smart contracts. In Proceedings of the 2018 Network and Distributed System Security Symposium (NDSS '18) (2018)."},{"key":"e_1_3_2_1_11_1","volume-title":"ISSTA","author":"Kong Q.","year":"2023","unstructured":"Kong, Q., Chen, J., Wang, Y., Jiang, Z., and Zheng, Z. Defitainter: Detecting price manipulation vulnerabilities in defi protocols. ISSTA 2023."},{"key":"e_1_3_2_1_12_1","volume-title":"Proceedings of the 27th USENIX Security Symposium (USENIX Security '18)","author":"Krupp J.","year":"2018","unstructured":"Krupp, J., and Rossow, C. Teether: Gnawing at ethereum to automatically exploit smart contracts. In Proceedings of the 27th USENIX Security Symposium (USENIX Security '18) (2018)."},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI '20)","author":"Li A.","year":"2020","unstructured":"Li, A., Choi, J. A., and Long, F. Securing smart contracts with runtime validation. In Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI '20) (2020)."},{"key":"e_1_3_2_1_14_1","volume-title":"Definition and detection of centralization defects in smart contracts, 11","author":"Lin Z.","year":"2024","unstructured":"Lin, Z., Chen, J., Wu, J., Zhang, W., and Zheng, Z. Definition and detection of centralization defects in smart contracts, 11 2024."},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS '16)","author":"Luu L.","year":"2016","unstructured":"Luu, L., Chu, D.-H., Olickel, H., Saxena, P., and Hobor, A. Making smart contracts smarter. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS '16) (2016)."},{"key":"e_1_3_2_1_16_1","volume-title":"Defi protocol balancer suffers major exploit with over $117m drained. https:\/\/www.ccn.com\/news\/crypto\/defi-protocol-balancer-hack-117-m\/","year":"2025","unstructured":"MEXC.FM. Defi protocol balancer suffers major exploit with over $117m drained. https:\/\/www.ccn.com\/news\/crypto\/defi-protocol-balancer-hack-117-m\/, 2025. Balancer v2 pools were exploited to drain approximately $117 million in digital assets."},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings of the 2021 IEEE Symposium on Security and Privacy (IEEE S&P '21)","author":"Nguyen T. D.","year":"2021","unstructured":"Nguyen, T. D., Pham, L. H., and Sun, J. Sguard: Towards fixing vulnerable smart contracts automatically. In Proceedings of the 2021 IEEE Symposium on Security and Privacy (IEEE S&P '21) (2021)."},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 34th USENIX Security Symposium","author":"Pan Y.","year":"2025","unstructured":"Pan, Y., Han, W., Duan, Y., and Zhang, M. CollisionRepair: First-Aid and Automated Patching for Storage Collision Vulnerabilities in Smart Contracts. In Proceedings of the 34th USENIX Security Symposium (2025)."},{"key":"e_1_3_2_1_19_1","unstructured":"Pan Y. Xu Z. Li L. T. Yang Y. and Zhang M. Automated generation of security-centric descriptions for smart contract bytecode."},{"key":"e_1_3_2_1_20_1","volume-title":"Proceedings of the 2020 IEEE Symposium on Security and Privacy (IEEE S&P '20)","author":"Permenev A.","year":"2020","unstructured":"Permenev, A., Dimitrov, D., Tsankov, P., Drachsler-Cohen, D., and Vechev, M. Verx: Safety verification of smart contracts. In Proceedings of the 2020 IEEE Symposium on Security and Privacy (IEEE S&P '20) (2020)."},{"key":"e_1_3_2_1_21_1","volume-title":"Attacking the defi ecosystem with flash loans for fun and profit","author":"Qin K.","unstructured":"Qin, K., Zhou, L., Livshits, B., and Gervais, A. Attacking the defi ecosystem with flash loans for fun and profit. Springer-Verlag."},{"key":"e_1_3_2_1_22_1","volume-title":"Decentralized Applications: Harnessing Bitcoin's Blockchain Technology","author":"Raval S.","year":"2016","unstructured":"Raval, S. Decentralized Applications: Harnessing Bitcoin's Blockchain Technology. O'Reilly Media, Inc., 2016."},{"key":"e_1_3_2_1_23_1","volume-title":"Deus dao - rekt. https:\/\/rekt.news\/deus-dao-r3kt\/","author":"Rekt","year":"2023","unstructured":"Rekt. Deus dao - rekt. https:\/\/rekt.news\/deus-dao-r3kt\/, 2023."},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the 2019 Network and Distributed System Security Symposium (NDSS '19)","author":"Rodler M.","year":"2019","unstructured":"Rodler, M., Li, W., Karame, G. O., and Davi, L. Sereum: Protecting existing smart contracts against re-entrancy attacks. In Proceedings of the 2019 Network and Distributed System Security Symposium (NDSS '19) (2019)."},{"key":"e_1_3_2_1_25_1","volume-title":"Proceedings of the 30th USENIX Security Symposium (USENIX Security '21)","author":"Rodler M.","year":"2021","unstructured":"Rodler, M., Li, W., Karame, G. O., and Davi, L. Evmpatch: Timely and automated patching of ethereum smart contracts. In Proceedings of the 30th USENIX Security Symposium (USENIX Security '21) (2021)."},{"key":"e_1_3_2_1_26_1","volume-title":"Proceedings of the 2024 Network and Distributed System Security Symposium (NDSS '24)","author":"Ruaro N.","year":"2024","unstructured":"Ruaro, N., Gritti, F., McLaughlin, R., Grishchenko, I., Kruegel, C., and Vigna, G. Not your type! detecting storage collision vulnerabilities in ethereum smart contracts. In Proceedings of the 2024 Network and Distributed System Security Symposium (NDSS '24) (2024)."},{"key":"e_1_3_2_1_27_1","volume-title":"Debugging smart contract's business logic using symbolic model checking. Programming and Computer Software","author":"Shishkin E.","year":"2019","unstructured":"Shishkin, E. Debugging smart contract's business logic using symbolic model checking. Programming and Computer Software (2019)."},{"key":"e_1_3_2_1_28_1","volume-title":"Proceedings of the 30th USENIX Security Symposium (USENIX Security '21)","author":"So S.","year":"2021","unstructured":"So, S., Hong, S., and Oh, H. Smartest: Effectively hunting vulnerable transaction sequences in smart contracts through language model-guided symbolic execution. In Proceedings of the 30th USENIX Security Symposium (USENIX Security '21) (2021)."},{"key":"e_1_3_2_1_29_1","volume-title":"Proceedings of the 2020 IEEE Symposium on Security and Privacy (IEEE S&P '20)","author":"So S.","year":"2020","unstructured":"So, S., Lee, M., Park, J., Lee, H., and Oh, H. Verismart: A highly precise safety verifier for ethereum smart contracts. In Proceedings of the 2020 IEEE Symposium on Security and Privacy (IEEE S&P '20) (2020)."},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE '2023)","author":"So S.","year":"2023","unstructured":"So, S., and Oh, H. Smartfix: Fixing vulnerable smart contracts by accelerating generate-and-verify repair using statistical models. In Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE '2023) (2023)."},{"key":"e_1_3_2_1_31_1","volume-title":"Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (CCS '18)","author":"Tsankov P.","year":"2018","unstructured":"Tsankov, P., Dan, A., Drachsler-Cohen, D., Gervais, A., B\u00fcnzli, F., and Vechev, M. Securify: Practical security analysis of smart contracts. In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (CCS '18) (2018)."},{"key":"e_1_3_2_1_32_1","first-page":"09","volume":"202","author":"Uniswap","unstructured":"Uniswap. Understanding liquidity provision in defi. https:\/\/blog.uniswap.org\/how-liquidity-provision-in-defi-works, 2025. Accessed 2025-09-22.","journal-title":"Accessed"},{"key":"e_1_3_2_1_33_1","volume-title":"Defiguard: A price manipulation detection service in defi using graph neural networks","author":"Wang D.","year":"2024","unstructured":"Wang, D., Wu, B., Yuan, X., Wu, L., Zhou, Y., and Cui, H. Defiguard: A price manipulation detection service in defi using graph neural networks. IEEE Transactions on Services Computing (2024)."},{"key":"e_1_3_2_1_34_1","volume-title":"Formal specification and verification of smart contracts for azure blockchain. arXiv preprint arXiv:1812.08829","author":"Wang Y.","year":"2018","unstructured":"Wang, Y., Lahiri, S. K., Chen, S., Pan, R., Dillig, I., Born, C., and Naseer, I. Formal specification and verification of smart contracts for azure blockchain. arXiv preprint arXiv:1812.08829 (2018)."},{"key":"e_1_3_2_1_35_1","volume-title":"DeFiRanger: Detecting DeFi Price Manipulation Attacks","author":"Wu S.","year":"2024","unstructured":"Wu, S., Yu, Z., Wang, D., Zhou, Y., Wu, L., Wang, H., and Yuan, X. DeFiRanger: Detecting DeFi Price Manipulation Attacks. IEEE Transactions on Dependable and Secure Computing (July 2024)."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"crossref","unstructured":"Yu X. L. Al-Bataineh O. Lo D. and Roychoudhury A. Smart contract repair. ACM Trans. Softw. Eng. Methodol. (2020).","DOI":"10.1145\/3402450"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3539194"},{"key":"e_1_3_2_1_38_1","volume-title":"Following devils' footprint: towards real-time detection of price manipulation attacks","author":"Zhang B.","year":"2025","unstructured":"Zhang, B., He, N., Hu, X., Ma, K., and Wang, H. Following devils' footprint: towards real-time detection of price manipulation attacks. USENIX Association, USA, 2025."},{"key":"e_1_3_2_1_39_1","volume-title":"2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER)","author":"Zhang Y.","year":"2020","unstructured":"Zhang, Y., Ma, S., Li, J., Li, K., Nepal, S., and Gu, D. Smartshield: Automatic smart contract protection made easy. In 2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER) (2020)."}],"event":{"name":"FSE Companion '26: 34th ACM International Conference on the Foundations of Software Engineering","location":"Concordia University Montreal QC Canada","acronym":"FSE Companion '26","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3803437.3805223","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T14:43:49Z","timestamp":1784299429000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3803437.3805223"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,5]]},"references-count":39,"alternative-id":["10.1145\/3803437.3805223","10.1145\/3803437"],"URL":"https:\/\/doi.org\/10.1145\/3803437.3805223","relation":{},"subject":[],"published":{"date-parts":[[2026,7,5]]},"assertion":[{"value":"2026-07-17","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}