4 papers
Knowdit: Agentic Smart Contract Vulnerability Detection with Auditing Knowledge Summarization
Ziqiao Kong, Wanxu Xia, Chong Wang +6
Smart contracts govern billions of dollars in decentralized finance (DeFi), yet automated vulnerability detection remains challenging because many vulnerabilities are tightly coupl…
Belobog: Move Language Fuzzing Framework For Real-World Smart Contracts
Ziqiao Kong, Wanxu Xia, Zhengwei Li +6
Move is a resource-oriented programming language designed for secure and verifiable smart contract development and has been widely used in managing billions of digital assets in bl…
Smart Contract Fuzzing Towards Profitable Vulnerabilities
Ziqiao Kong, Cen Zhang, Maoyi Xie +5
Billions of dollars are transacted through smart contracts, making vulnerabilities a major financial risk. One focus in the security arms race is on profitable vulnerabilities that…
SAND: Decoupling Sanitization from Fuzzing for Low Overhead
Ziqiao Kong, Shaohua Li, Heqing Huang +1
Sanitizers provide robust test oracles for various software vulnerabilities. Fuzzing on sanitizer-enabled programs has been the best practice to find software bugs. Since sanitizer…