93 citations · 418 across the 40 of their papers we have counts for
41 papers
How Agentic Is Agentic Commerce? A Population-Scale Measurement of x402 Adoption and Authenticity
Shengchen Ling, Yajin Zhou, Lei Wu +1
AI agents are said to be forming an economy in which they pay, on their own, for the data, APIs, and compute they consume. x402, which settles a stablecoin payment on-chain for eac…
Free-Riding the Agentic Web: A Systematic Security Analysis of x402 Payments
Shengchen Ling, Yihang Huang, Yuefeng Du +4
The x402 protocol has crossed from prototype to infrastructure for the agentic web, driving 130 million all-time transactions and embedded in Google Cloud, Cloudflare, and Stripe.…
GenDetect: Generalizing Reactive Detection for Resilience Against Imitative DeFi Attack Cascade
Bowen Cai, Weiheng Bai, Youshui Lu +4
As blockchain ecosystems grow, financially motivated attackers increasingly exploit decentralized finance (DeFi) protocols, causing frequent and severe losses. Unlike conventional…
Re-Evaluating EVMBench: Are AI Agents Ready for Smart Contract Security?
Chaoyuan Peng, Lei Wu, Yajin Zhou
EVMbench, released by OpenAI, Paradigm, and OtterSec, is the first large-scale benchmark for AI agents on smart contract security. Its results -- agents detect up to 45.6% of vulne…
Characteristics, Root Causes, and Detection of Incomplete Security Bug Fixes in the Linux Kernel
Qiang Liu, Wenlong Zhang, Muhui Jiang +2
Security bugs in the Linux kernel emerge endlessly and have attracted much attention. However, fixing security bugs in the Linux kernel could be incomplete due to human mistakes. S…
Esim: EVM Bytecode Similarity Detection Based on Stable-Semantic Graph
Zhuo Chen, Gaoqiang Ji, Yiling He +2
Decentralized finance (DeFi) is experiencing rapid expansion. However, prevalent code reuse and limited open-source contributions have introduced significant challenges to the bloc…
The Dark Side of Upgrades: Uncovering Security Risks in Smart Contract Upgrades
Dingding Wang, Jianting He, Siwei Wu +3
Smart contract upgrades are increasingly common due to their flexibility in modifying deployed contracts, such as fixing bugs or adding new functionalities. Meanwhile, upgrades com…
SoK: Stablecoin Designs, Risks, and the Stablecoin LEGO
Shengchen Ling, Yuefeng Du, Yajin Zhou +4
Stablecoins have become significant assets in modern finance, with a market capitalization exceeding USD 246 billion (May 2025). Yet, despite their systemic importance, a comprehen…
Building Reuse-Sensitive Control Flow Graphs (CFGs) for EVM Bytecode
Dingding Wang, Jianting He, Yizheng Yang +3
The emergence of smart contracts brings security risks, exposing users to the threat of losing valuable cryptocurrencies, underscoring the urgency of meticulous scrutiny. Neverthel…
Dissecting Payload-based Transaction Phishing on Ethereum
Zhuo Chen, Yufeng Hu, Bowen He +3
In recent years, a more advanced form of phishing has arisen on Ethereum, surpassing early-stage, simple transaction phishing. This new form, which we refer to as payload-based tra…
DeFiGuard: A Price Manipulation Detection Service in DeFi using Graph Neural Networks
Dabao Wang, Bang Wu, Xingliang Yuan +3
The prosperity of Decentralized Finance (DeFi) unveils underlying risks, with reported losses surpassing 3.2 billion USD between 2018 and 2022 due to vulnerabilities in Decentraliz…
JNI Global References Are Still Vulnerable: Attacks and Defenses
Yi He, Yuan Zhou, Yacong Gu +4
System services and resources in Android are accessed through IPC based mechanisms. Previous research has demonstrated that they are vulnerable to the denial-of-service attack (DoS…
Demystifying the DAO Governance Process
Junjie Ma, Muhui Jiang, Jinan Jiang +5
Decentralized Autonomous Organization (DAO) becomes a popular governance solution for decentralized applications (dApps) to achieve decentralized governance. In the DAO, no single…
The Devil Behind the Mirror: Tracking the Campaigns of Cryptocurrency Abuses on the Dark Web
Pengcheng Xia, Zhou Yu, Kailong Wang +6
The dark web has emerged as the state-of-the-art solution for enhanced anonymity. Just like a double-edged sword, it also inadvertently becomes the safety net and breeding ground f…
Detecting DBMS Bugs with Context-Sensitive Instantiation and Multi-Plan Execution
Jiaqi Li, Ke Wang, Yaoguang Chen +3
DBMS bugs can cause serious consequences, posing severe security and privacy concerns. This paper works towards the detection of memory bugs and logic bugs in DBMSs, and aims to so…
DxPU: Large Scale Disaggregated GPU Pools in the Datacenter
Bowen He, Xiao Zheng, Yuan Chen +9
The rapid adoption of AI and convenience offered by cloud services have resulted in the growing demands for GPUs in the cloud. Generally, GPUs are physically attached to host serve…
Demystifying Random Number in Ethereum Smart Contract: Taxonomy, Vulnerability Identification, and Attack Detection
Peng Qian, Jianting He, Lingling Lu +5
Recent years have witnessed explosive growth in blockchain smart contract applications. As smart contracts become increasingly popular and carry trillion dollars worth of digital a…
Operation-level Concurrent Transaction Execution for Blockchains
Haoran Lin, Yajin Zhou, Lei Wu
Despite the success in various scenarios, blockchain systems, especially EVM-compatible ones that serially execute transactions, still face the significant challenge of limited thr…
DeUEDroid: Detecting Underground Economy Apps Based on UTG Similarity
Zhuo Chen, Jie Liu, Yubo Hu +7
In recent years, the underground economy is proliferating in the mobile system. These underground economy apps (UEware) make profits from providing non-compliant services, especial…
iLibScope: Reliable Third-Party Library Detection for iOS Mobile Apps
Jingyi Guo, Min Zheng, Yajin Zhou +4
Vetting security impacts introduced by third-party libraries in iOS apps requires a reliable library detection technique. Especially when a new vulnerability (or a privacy-invasive…
Penny Wise and Pound Foolish: Quantifying the Risk of Unlimited Approval of ERC20 Tokens on Ethereum
Dabao Wang, Hang Feng, Siwei Wu +3
The prosperity of decentralized finance motivates many investors to profit via trading their crypto assets on decentralized applications (DApps for short) of the Ethereum ecosystem…
A Systematic Study of Android Non-SDK (Hidden) Service API Security
Yi He, Yacong Gu, Purui Su +4
Android allows apps to communicate with its system services via system service helpers so that these apps can use various functions provided by the system services. Meanwhile, the…
Lifting The Grey Curtain: A First Look at the Ecosystem of CULPRITWARE
Zhuo Chen, Lei Wu, Jing Cheng +6
Mobile apps are extensively involved in cyber-crimes. Some apps are malware which compromise users' devices, while some others may lead to privacy leakage. Apart from them, there a…
A Measurement Study on the (In)security of End-of-Life (EoL) Embedded Devices
Dingding Wang, Muhui Jiang, Rui Chang +5
Embedded devices are becoming popular. Meanwhile, researchers are actively working on improving the security of embedded devices. However, previous work ignores the insecurity caus…