{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T19:12:10Z","timestamp":1782846730052,"version":"3.54.5"},"reference-count":69,"publisher":"Association for Computing Machinery (ACM)","issue":"FSE","license":[{"start":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T00:00:00Z","timestamp":1782777600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62572497, 624B2139"],"award-info":[{"award-number":["62572497, 624B2139"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"NSFC-RGC Collaborative Research","award":["62461160332"],"award-info":[{"award-number":["62461160332"]}]},{"name":"Guangdong Zhujiang Talent Program","award":["2023QN10X561"],"award-info":[{"award-number":["2023QN10X561"]}]},{"name":"Major Key Project of Pengcheng Laboratory","award":["PCL2025A07"],"award-info":[{"award-number":["PCL2025A07"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. ACM Softw. Eng."],"published-print":{"date-parts":[[2026,6,30]]},"abstract":"<jats:p>Smart contracts are a critical component of blockchain systems. Due to the large amount of digital assets carried by smart contracts, their security is of critical importance. Although numerous tools have been developed for detecting smart contract vulnerability, their effectiveness remains limited, particularly due to the high false positives included in the reported results. Therefore, developers and auditors are often overwhelmed with manually verifying the reported issues. A fundamental reason behind this is that while a reported vulnerability satisfies specific vulnerable patterns, it may not actually be exploitable, either because the vulnerable code cannot be triggered or it does not result in any financial loss.<\/jats:p>\n                  <jats:p>In this paper, we propose V2E, a new framework for validating whether a reported vulnerability is truly exploitable. The core idea of V2E is to automatically generate executable Proof-of-Concept Exploit (PoC for short), and then assess if the vulnerability could be triggered and incur any real damage (i.e., causing financial loss) by the PoC. While LLMs have shown proficiency in PoC generation, achieving our task is by no means trivial. In detail, it is difficult for LLM to: (1) generate and update PoC to trigger a specific vulnerability, (2) evaluate the PoC\u2019s effectiveness to validate exploitable vulnerability. To this end, V2E automates the whole process through a novel combination of PoC generation, validation, and refinement: (1) Firstly, V2E generates targeted PoCs by analyzing potential vulnerability paths. (2) Then, V2E verifies the validity of PoCs through triggerability and profitability analysis. (3) In addition, V2E iteratively refines the generated PoC based on PoC execution feedback, therefore, increasing the chance to confirm the vulnerability. Evaluation on 264 manually labeled contracts shows that V2E outperforms the baseline approach. Particularly, V2E successfully identifies 102 out of 124 exploitable vulnerabilities, achieving a precision of 91.9% and a recall of 82.3%. In addition, it successfully eliminates 71 out of 140 false alarms (50.7%). Besides, V2E effectively enhances the performance of SOTA tools. It reduces the false positive rates of Slither by 76.9%, Mythril by 56.9% and Confuzzius by 65%.<\/jats:p>","DOI":"10.1145\/3808108","type":"journal-article","created":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T17:06:14Z","timestamp":1782839174000},"page":"2259-2281","source":"Crossref","is-referenced-by-count":0,"title":["V2E: Validating Smart Contract Vulnerabilities through Profit-Driven Exploit Generation and Execution"],"prefix":"10.1145","volume":"3","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-8611-3120","authenticated-orcid":false,"given":"Jingwen","family":"Zhang","sequence":"first","affiliation":[{"name":"Sun Yat-sen University, Zhuhai, China"},{"name":"Peng Cheng Laboratory, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9597-9888","authenticated-orcid":false,"given":"Yuhong","family":"Nan","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-6009-8285","authenticated-orcid":false,"given":"Kaiwen","family":"Ning","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Zhuhai, China"},{"name":"Peng Cheng Laboratory, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-6708-4074","authenticated-orcid":false,"given":"Mingxi","family":"Ye","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-1333-4408","authenticated-orcid":false,"given":"Wei","family":"Li","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-4914-5136","authenticated-orcid":false,"given":"Yuming","family":"Xiao","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8922-0496","authenticated-orcid":false,"given":"Yuming","family":"Feng","sequence":"additional","affiliation":[{"name":"Peng Cheng Laboratory, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4783-876X","authenticated-orcid":false,"given":"Weizhe","family":"Zhang","sequence":"additional","affiliation":[{"name":"Harbin Institute of Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7878-4330","authenticated-orcid":false,"given":"Zibin","family":"Zheng","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, Zhuhai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,30]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"anthropic. 2025. Introducing Claude 4. https:\/\/www.anthropic.com\/news\/claude-4."},{"key":"e_1_2_1_2_1","volume-title":"Stephane Sezer, et al.","author":"Blackshear Sam","year":"2019","unstructured":"Sam Blackshear, Evan Cheng, David L Dill, Victor Gao, Ben Maurer, Todd Nowacki, Alistair Pott, Shaz Qadeer, Dario Russi Rain, Stephane Sezer, et al. 2019. Move: A language with programmable resources. Libra Assoc 1 (2019)."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833721"},{"key":"e_1_2_1_4_1","unstructured":"c5huracan. 2025. Experimental exploration of AI-driven smart contract security analysis for educational and defensive research purposes. https:\/\/github.com\/c5huracan\/a1-agent-exploration."},{"key":"e_1_2_1_5_1","volume-title":"Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering. 1-13","author":"Chaliasos Stefanos","year":"2024","unstructured":"Stefanos Chaliasos, Marcos Antonios Charalambous, Liyi Zhou, Rafaila Galanopoulou, Arthur Gervais, Dimitris Mitropoulos, and Benjamin Livshits. 2024. Smart contract and defi security tools: Do they meet the needs of practitioners?. In Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering. 1-13."},{"key":"e_1_2_1_6_1","volume-title":"Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering, ICSE 2024.","author":"Chen Zhiyang","year":"2024","unstructured":"Zhiyang Chen, Sidi Mohamed Beillahi, and Fan Long. 2024. FlashSyn: Flash Loan Attack Synthesis via Counter Example Driven Approximation. In Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering, ICSE 2024."},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-2535-6"},{"key":"e_1_2_1_8_1","volume-title":"Retrieved","year":"2025","unstructured":"DeFiHackLabs. 2025. DeFi Hacks Reproduce -Foundry. Retrieved August 31, 2025 from https:\/\/github.com\/ SunWeb3Sec\/DeFiHackLabs"},{"key":"e_1_2_1_9_1","volume-title":"Retrieved","year":"2025","unstructured":"DefiLlama. 2025. Breakdown by Smart Contract Languages. Retrieved August 31, 2025 from https:\/\/defillama.com\/ languages"},{"key":"e_1_2_1_10_1","volume-title":"Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering. 2240-2248","author":"Eshghie Mojtaba","year":"2024","unstructured":"Mojtaba Eshghie and Cyrille Artho. 2024. Oracle-guided vulnerability diversity and exploit synthesis of smart contracts using llms. In Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering. 2240-2248."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00128"},{"key":"e_1_2_1_12_1","volume-title":"Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis. 1157-1168","author":"Fang Yuzhou","year":"2023","unstructured":"Yuzhou Fang, Daoyuan Wu, Xiao Yi, Shuai Wang, Yufan Chen, Mengjie Chen, Yang Liu, and Lingxiao Jiang. 2023. Beyond \"protected\" and \"private\": An empirical security analysis of custom function modifiers in smart contracts. In Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis. 1157-1168."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/WETSEB.2019.00008"},{"key":"e_1_2_1_14_1","volume-title":"Proceedings of the 35th IEEE\/ACM International Conference on Automated Software Engineering. 1349-1352","author":"Ferreira Jo\u00e3o F.","year":"2021","unstructured":"Jo\u00e3o F. Ferreira, Pedro Cruz, Thomas Durieux, and Rui Abreu. 2021. SmartBugs: a framework to analyze solidity smart contracts. In Proceedings of the 35th IEEE\/ACM International Conference on Automated Software Engineering. 1349-1352."},{"key":"e_1_2_1_15_1","volume-title":"Retrieved","year":"2025","unstructured":"Foundry-rs. 2025. A blazing fast, portable and modular toolkit for Ethereum application. Retrieved September 10, 2025 from https:\/\/github.com\/foundry-rs\/foundry"},{"key":"e_1_2_1_16_1","volume-title":"Retrieved","year":"2025","unstructured":"Foundry-rs. 2025. Foundry support Solidity versions greater than 0.6. Retrieved August 31, 2025 from https: \/\/github.com\/foundry-rs\/forge-std\/blob\/master\/src\/StdToml.sol#L2"},{"key":"e_1_2_1_17_1","volume-title":"Ai agent smart contract exploit generation. arXiv preprint arXiv:2507.05558","author":"Gervais Arthur","year":"2025","unstructured":"Arthur Gervais and Liyi Zhou. 2025. Ai agent smart contract exploit generation. arXiv preprint arXiv:2507.05558 (2025)."},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397385"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534378"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00087"},{"key":"e_1_2_1_21_1","volume-title":"2019 IEEE\/ACM 41st International Conference on Software Engineering (ICSE). IEEE, 1176-1186","author":"Grech Neville","year":"2019","unstructured":"Neville Grech, Lexi Brent, Bernhard Scholz, and Yannis Smaragdakis. 2019. Gigahorse: thorough, declarative decompilation of smart contracts. In 2019 IEEE\/ACM 41st International Conference on Software Engineering (ICSE). IEEE, 1176-1186."},{"key":"e_1_2_1_22_1","unstructured":"Daya Guo Dejian Yang Haowei Zhang Junxiao Song Ruoyu Zhang Runxin Xu Qihao Zhu Shirong Ma Peiyi Wang Xiao Bi et al. 2025. Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning. arXiv preprint arXiv:2501.12948 (2025)."},{"key":"e_1_2_1_23_1","volume-title":"Why smart contracts reported as vulnerable were not exploited? IEEE Transactions on Dependable and Secure Computing","author":"Hu Tianyuan","year":"2024","unstructured":"Tianyuan Hu, Jingyue Li, Bixin Li, and Andre Storhaug. 2024. Why smart contracts reported as vulnerable were not exploited? IEEE Transactions on Dependable and Secure Computing (2024)."},{"key":"e_1_2_1_24_1","volume-title":"Towards Reasoning in Large Language Models: A Survey. In The 61st Annual Meeting Of The Association For Computational Linguistics.","author":"Huang Jie","year":"2023","unstructured":"Jie Huang and Kevin Chen-Chuan Chang. 2023. Towards Reasoning in Large Language Models: A Survey. In The 61st Annual Meeting Of The Association For Computational Linguistics."},{"key":"e_1_2_1_25_1","volume-title":"Automated Exploit Generation for Smart Contract Vulnerabilities","author":"Jin Ling","year":"2023","unstructured":"Ling Jin, Yinzhi Cao, Yan Chen, Di Zhang, and Simone Campanoni. 2023. ExGen: Cross-platform, Automated Exploit Generation for Smart Contract Vulnerabilities. IEEE Trans. Dependable Secur. Comput. (2023)."},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598124"},{"key":"e_1_2_1_27_1","first-page":"153","volume-title":"Proceedings of the ACM on Software Engineering 2, FSE","author":"Kong Ziqiao","year":"2025","unstructured":"Ziqiao Kong, Cen Zhang, Maoyi Xie, Ming Hu, Yue Xue, Ye Liu, Haijun Wang, and Yang Liu. 2025. Smart Contract Fuzzing Towards Profitable Vulnerabilities. Proceedings of the ACM on Software Engineering 2, FSE (2025), 153-175."},{"key":"e_1_2_1_28_1","volume-title":"27th USENIX security symposium (USENIX Security 18). 1317-1333.","author":"Krupp Johannes","unstructured":"Johannes Krupp and Christian Rossow. 2018. {teEther}: Gnawing at ethereum to automatically exploit smart contracts. In 27th USENIX security symposium (USENIX Security 18). 1317-1333."},{"key":"e_1_2_1_29_1","volume-title":"Jian-Yun Nie, and Ji-Rong Wen.","author":"Li Junyi","year":"2024","unstructured":"Junyi Li, Jie Chen, Ruiyang Ren, Xiaoxue Cheng, Wayne Xin Zhao, Jian-Yun Nie, and Ji-Rong Wen. 2024. The dawn after the dark: An empirical study on factuality hallucination in large language models. arXiv preprint arXiv:2401.03205 (2024)."},{"key":"e_1_2_1_30_1","volume-title":"ASTRO: Detecting Access Control Vulnerabilities in Smart Contracts via Graph Similarity Comparison","author":"Li Wei","year":"2025","unstructured":"Wei Li, Yuhong Nan, Mingxi Ye, Jingwen Zhang, Peilin Zheng, and Zibin Zheng. 2025. ASTRO: Detecting Access Control Vulnerabilities in Smart Contracts via Graph Similarity Comparison. IEEE Transactions on Software Engineering (2025)."},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534222"},{"key":"e_1_2_1_32_1","volume-title":"PropertyGPT: LLM-driven Formal Verification of Smart Contracts through Retrieval-Augmented Property Generation. arXiv preprint arXiv:2405.02580","author":"Liu Ye","year":"2024","unstructured":"Ye Liu, Yue Xue, Daoyuan Wu, Yuqiang Sun, Yi Li, Miaolei Shi, and Yang Liu. 2024. PropertyGPT: LLM-driven Formal Verification of Smart Contracts through Retrieval-Augmented Property Generation. arXiv preprint arXiv:2405.02580 (2024)."},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3237370"},{"key":"e_1_2_1_34_1","volume-title":"Combining fine-tuning and llm-based agents for intuitive smart contract auditing with justifications. arXiv preprint arXiv:2403.16073","author":"Ma Wei","year":"2024","unstructured":"Wei Ma, Daoyuan Wu, Yuqiang Sun, Tianwen Wang, Shangqing Liu, Jian Zhang, Yue Xue, and Yang Liu. 2024. Combining fine-tuning and llm-based agents for intuitive smart contract auditing with justifications. arXiv preprint arXiv:2403.16073 (2024)."},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.4018\/JCIT.2019010102"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-3376-1_5"},{"key":"e_1_2_1_37_1","first-page":"4","article-title":"Smashing ethereum smart contracts for fun and real profit","volume":"9","author":"Mueller Bernhard","year":"2018","unstructured":"Bernhard Mueller. 2018. Smashing ethereum smart contracts for fun and real profit. HITB SECCONF Amsterdam 9, 54 (2018), 4-17.","journal-title":"HITB SECCONF Amsterdam"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380334"},{"key":"e_1_2_1_39_1","volume-title":"FaultLine: Automated Proof-of-Vulnerability Generation Using LLM Agents. arXiv preprint arXiv:2507.15241","author":"Nitin Vikram","year":"2025","unstructured":"Vikram Nitin, Baishakhi Ray, and Roshanak Zilouchian Moghaddam. 2025. FaultLine: Automated Proof-of-Vulnerability Generation Using LLM Agents. arXiv preprint arXiv:2507.15241 (2025)."},{"key":"e_1_2_1_40_1","volume-title":"Retrieved","author":"AI.","year":"2025","unstructured":"OpenAI. 2025. OpenAI Platform. Retrieved August 31, 2025 from https:\/\/platform.openai.com\/docs\/models\/gpt-4o"},{"key":"e_1_2_1_41_1","volume-title":"Retrieved","author":"AI.","year":"2025","unstructured":"OpenAI. 2025. OpenAI Price. Retrieved August 31, 2025 from https:\/\/openai.com\/api\/pricing\/"},{"key":"e_1_2_1_42_1","first-page":"1325","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Perez Daniel","year":"2021","unstructured":"Daniel Perez and Benjamin Livshits. 2021. Smart contract vulnerabilities: Vulnerable does not imply exploited. In 30th USENIX Security Symposium (USENIX Security 21). 1325-1341."},{"key":"e_1_2_1_43_1","volume-title":"LongHalQA: Long-Context Hallucination Evaluation for MultiModal Large Language Models. arXiv preprint arXiv:2410.09962","author":"Qiu Han","year":"2024","unstructured":"Han Qiu, Jiaxing Huang, Peng Gao, Qin Qi, Xiaoqin Zhang, Ling Shao, and Shijian Lu. 2024. LongHalQA: Long-Context Hallucination Evaluation for MultiModal Large Language Models. arXiv preprint arXiv:2410.09962 (2024)."},{"key":"e_1_2_1_44_1","volume-title":"Llm4fuzz: Guided fuzzing of smart contracts with large language models. arXiv preprint arXiv:2401.11108","author":"Shou Chaofan","year":"2024","unstructured":"Chaofan Shou, Jing Liu, Doudou Lu, and Koushik Sen. 2024. Llm4fuzz: Guided fuzzing of smart contracts with large language models. arXiv preprint arXiv:2401.11108 (2024)."},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598059"},{"key":"e_1_2_1_46_1","volume-title":"PoCGen: Generating Proof-of-Concept Exploits for Vulnerabilities in Npm Packages. arXiv preprint arXiv:2506.04962","author":"Simsek Deniz","year":"2025","unstructured":"Deniz Simsek, Aryaz Eghbali, and Michael Pradel. 2025. PoCGen: Generating Proof-of-Concept Exploits for Vulnerabilities in Npm Packages. arXiv preprint arXiv:2506.04962 (2025)."},{"key":"e_1_2_1_47_1","volume-title":"Retrieved","year":"2025","unstructured":"SmartContractSecurity. 2025. Smart Contract Weakness Classification and Test Cases. Retrieved August 31, 2025 from https:\/\/github.com\/SmartContractSecurity\/SWC-registry"},{"key":"e_1_2_1_48_1","volume-title":"Retrieved","year":"2025","unstructured":"Solidity. 2025. Solidity Source Mappings -Documentation. Retrieved August 31, 2025 from https:\/\/docs.soliditylang. org\/en\/latest\/internals\/source_mappings.html"},{"key":"e_1_2_1_49_1","volume-title":"Retrieved","year":"2025","unstructured":"soliditylang. 2025. Solidity v0.8.0 Breaking Changes. Retrieved September 10, 2025 from https:\/\/docs.soliditylang.org\/ en\/latest\/080-breaking-changes.html"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639117"},{"key":"e_1_2_1_51_1","volume-title":"2021 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE, 103-119","author":"Torres Christof Ferreira","year":"2021","unstructured":"Christof Ferreira Torres, Antonio Ken Iannillo, Arthur Gervais, and Radu State. 2021. Confuzzius: A data dependencyaware hybrid fuzzer for smart contracts. In 2021 IEEE European Symposium on Security and Privacy (EuroS&P). IEEE, 103-119."},{"key":"e_1_2_1_52_1","volume-title":"Retrieved","year":"2025","unstructured":"Vyper. 2025. Vyper Document. Retrieved August 31, 2025 from https:\/\/docs.vyperlang.org\/en\/latest\/"},{"key":"e_1_2_1_53_1","volume-title":"Unity is strength: Enhancing precision in reentrancy vulnerability detection of smart contract analysis tools","author":"Wang Zexu","year":"2024","unstructured":"Zexu Wang, Jiachi Chen, Peilin Zheng, Yu Zhang, Weizhe Zhang, and Zibin Zheng. 2024. Unity is strength: Enhancing precision in reentrancy vulnerability detection of smart contract analysis tools. IEEE Transactions on Software Engineering (2024)."},{"key":"e_1_2_1_54_1","volume-title":"Ethereum: A secure decentralised generalised transaction ledger. Ethereum project yellow paper 151","author":"Gavin Wood","year":"2014","unstructured":"Gavin Wood et al. 2014. Ethereum: A secure decentralised generalised transaction ledger. Ethereum project yellow paper 151, 2014 (2014), 1-32."},{"key":"e_1_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639152"},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3691620.3695482"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3417064"},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680323"},{"key":"e_1_2_1_59_1","volume-title":"Hallucination is inevitable: An innate limitation of large language models. arXiv preprint arXiv:2401.11817","author":"Xu Ziwei","year":"2024","unstructured":"Ziwei Xu, Sanjay Jain, and Mohan Kankanhalli. 2024. Hallucination is inevitable: An innate limitation of large language models. arXiv preprint arXiv:2401.11817 (2024)."},{"key":"e_1_2_1_60_1","volume-title":"xfuzz: Machine learning guided cross-contract fuzzing","author":"Xue Yinxing","year":"2022","unstructured":"Yinxing Xue, Jiaming Ye, Wei Zhang, Jun Sun, Lei Ma, Haijun Wang, and Jianjun Zhao. 2022. xfuzz: Machine learning guided cross-contract fuzzing. IEEE Transactions on Dependable and Secure Computing (2022)."},{"key":"e_1_2_1_61_1","volume-title":"Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis. 794-805","author":"Ye Mingxi","year":"2024","unstructured":"Mingxi Ye, Xingwei Lin, Yuhong Nan, Jiajing Wu, and Zibin Zheng. 2024. Midas: Mining Profitable Exploits in On-Chain Smart Contracts via Feedback-Driven Fuzzing and Differential Analysis. In Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis. 794-805."},{"key":"e_1_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598057"},{"key":"e_1_2_1_63_1","volume-title":"USENIX Security","author":"Yu Zheng","year":"2025","unstructured":"Zheng Yu, Ziyi Guo, Yuhang Wu, Jiahao Yu, Meng Xu, Dongliang Mu, Yan Chen, and Xinyu Xing. [n. d.]. PATCHAGENT: A Practical Program Repair Agent Mimicking Human Expertise. In USENIX Security 2025."},{"key":"e_1_2_1_64_1","volume-title":"2025 40th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 1529-1540","author":"Zhang Jingwen","year":"2025","unstructured":"Jingwen Zhang, Yuhong Nan, Wei Li, Kaiwen Ning, Zewei Lin, Zitong Yao, Yuming Feng, Weizhe Zhang, and Zibin Zheng. 2025. Finding Insecure State Dependency in DApps via Multi-Source Tracing and Semantic Enrichment. In 2025 40th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 1529-1540."},{"key":"e_1_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00057"},{"key":"e_1_2_1_66_1","first-page":"116","volume-title":"27th IEEE International Conference on Software Analysis, Evolution and Reengineering, SANER 2020","author":"Zhang Qingzhao","year":"2020","unstructured":"Qingzhao Zhang, Yizhuo Wang, Juanru Li, and Siqi Ma. 2020. EthPloit: From Fuzzing to Efficient Exploit Generation against Smart Contracts. In 27th IEEE International Conference on Software Analysis, Evolution and Reengineering, SANER 2020, London, ON, Canada, February 18-21, 2020. 116-126."},{"key":"e_1_2_1_67_1","volume-title":"Nyx: Detecting Exploitable Front-Running Vulnerabilities in Smart Contracts. In 2024 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society, 146-146","author":"Zhang Wuqi","year":"2024","unstructured":"Wuqi Zhang, Zhuo Zhang, Qingkai Shi, Lu Liu, Lili Wei, Yepang Liu, Xiangyu Zhang, and Shing-Chi Cheung. 2024. Nyx: Detecting Exploitable Front-Running Vulnerabilities in Smart Contracts. In 2024 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society, 146-146."},{"key":"e_1_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00061"},{"key":"e_1_2_1_69_1","volume-title":"DAppSCAN: Building Large-Scale Datasets for Smart Contract Weaknesses in DApp Projects","author":"Zheng Zibin","year":"2024","unstructured":"Zibin Zheng, Jianzhong Su, Jiachi Chen, David Lo, Zhijie Zhong, and Mingxi Ye. 2024. DAppSCAN: Building Large-Scale Datasets for Smart Contract Weaknesses in DApp Projects. IEEE Transactions on Software Engineering (2024)."}],"container-title":["Proceedings of the ACM on Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3808108","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T18:36:42Z","timestamp":1782844602000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3808108"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,30]]},"references-count":69,"journal-issue":{"issue":"FSE","published-print":{"date-parts":[[2026,6,30]]}},"alternative-id":["10.1145\/3808108"],"URL":"https:\/\/doi.org\/10.1145\/3808108","relation":{},"ISSN":["2994-970X"],"issn-type":[{"value":"2994-970X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,30]]}}}