6 papers
Is My RPC Response Reliable? Detecting RPC Bugs in Ethereum Blockchain Client under Context
Zhijie Zhong, Yuhong Nan, Mingxi Ye +5
Blockchain clients are fundamental software for running blockchain nodes. They provide users with various RPC (Remote Procedure Call) interfaces to interact with the blockchain. Th…
Satellite: Detecting and Analyzing Smart Contract Vulnerabilities caused by Subcontract Misuse
Zeqin Liao, Yuhong Nan, Zixu Gao +4
Developers of smart contracts pervasively reuse subcontracts to improve development efficiency. Like any program language, such subcontract reuse may unexpectedly include, or intro…
An Empirical Study on Embodied Artificial Intelligence Robot (EAIR) Software Bugs
Zeqin Liao, Zibin Zheng, Peifan Reng +5
Embodied Artificial Intelligence Robots (EAIR) is an emerging and rapidly evolving technological domain. Ensuring their program correctness is fundamental to their successful deplo…
Control at Stake: Evaluating the Security Landscape of LLM-Driven Email Agents
Jiangrong Wu, Yuhong Nan, Jianliang Wu +2
The increasing capabilities of LLMs have led to the rapid proliferation of LLM agent apps, where developers enhance LLMs with access to external resources to support complex task e…
Understanding the Sneaky Patterns of Pop-up Windows in the Mobile Ecosystem
Dongpeng Wu, Yuhong Nan, Shaojiang Wang +3
In mobile applications, Pop-up window (PoW) plays a crucial role in improving user experience, guiding user actions, and delivering key information. Unfortunately, the excessive us…
Augmenting Smart Contract Decompiler Output through Fine-grained Dependency Analysis and LLM-facilitated Semantic Recovery
Zeqin Liao, Yuhong Nan, Zixu Gao +4
Decompiler is a specialized type of reverse engineering tool extensively employed in program analysis tasks, particularly in program comprehension and vulnerability detection. Howe…