6 papers
PrivEscalate: Measuring and Augmenting the Threat of LLM-Automated Linux Privilege Escalation
Yixuan Liu, Zilong Zhen, Yin Wu +1
As Large Language Model (LLM) agents increasingly automate offensive operations across the cyber kill chain, their efficacy in complex local post-exploitation tasks remains inadequ…
EventSpec: Defining and Detecting Event-Semantic Issues in Blockchain Ecosystems
Yixuan Liu, Yuxin Dong, Ye Liu +4
In recent years, smart contracts have become the backbone of decentralized applications (DApps), and off-chain systems such as bridges, wallets, and indexers rely heavily on event…
TrapHunter: Exposing Covert Pathways in Trap Token Contracts
Yin Wu, Yixuan Liu, Yi Li +5
Standardized token contracts (e.g., ERC-20) form the foundation of digital assets. However, attackers increasingly abuse this standardization to disguise malicious trap tokens. Unl…
DeepTx: Real-Time Transaction Risk Analysis via Multi-Modal Features and LLM Reasoning
Yixuan Liu, Xinlei Li, Yi Li
Phishing attacks in Web3 ecosystems are increasingly sophisticated, exploiting deceptive contract logic, malicious frontend scripts, and token approval patterns. We present DeepTx,…
Phantom Events: Demystifying the Issues of Log Forgery in Blockchain
Yixuan Liu, Yuxin Dong, Ye Liu +2
With the rapid development of blockchain technology, transaction logs play a central role in various applications, including decentralized exchanges, wallets, cross-chain bridges,…
Specification Mining for Smart Contracts with Trace Slicing and Predicate Abstraction
Ye Liu, Yixuan Liu, Yi Li +1
Smart contracts are computer programs running on blockchains to implement Decentralized Applications. The absence of contract specifications hinders routine tasks, such as contract…