28 citations · 70 across the 20 of their papers we have counts for
22 papers
AgentTracer: Tracing Indirect Prompt Injection Attack through Fine-Grained Intention-Execution Alignment
Zitong Yao, Jiangrong Wu, Yixi Lin +3
Large language model (LLM) agents interact with external resources to complete complex user tasks, exposing them to indirect prompt injection (IPI), where malicious instructions re…
SmartMemory: Detecting On-chain-off-chain Communication Inconsistency for Smart Contract via Memory-based Agent
Zeqin Liao, Yuhong Nan, Henglong Liang +7
Smart contracts underpin decentralized finance, where growing demand for on-chain/off-chain communication(OFC) has driven diverse applications such as cross-chain bridges, real-wor…
FlowArk: Boosting Agentic Data-flow Analysis for Android Apps via Context-Aware Knowledge Reuse
Yiming Zhang, Jiangrong Wu, Yuhong Nan
Data-flow analysis is foundational to Android app privacy and security auditing. Recent coding agents can assist with non-trivial source-to-sink data-flow analysis tasks by searchi…
MOSAIC: Knowledge-Guided CLI Command Composition Attack in LLM Coding Agents
Jiangrong Wu, Huaijin Wang, Yihao Zhang +2
LLM coding agents increasingly complete development tasks by issuing ordinary CLI commands. Following the Unix design, these commands cooperate through shared operating-system stat…
VLAMotor: Test-Guided Enhancement of Vision-Language-Action Models via Agent-BasedData Synthesis
Zeqin Liao, Peifan Ren, Zixu Gao +6
Vision-Language-Action (VLA) models follow a data-driven paradigm and are constrained by the coverage of training data, making them prone to failure on edge-case configurations aft…
ParityFuzz: Finding Inconsistencies across Solidity Compilers via Fine-Grained Mutation and Differential Analysis
Bowei Su, Mingxi Ye, Yuhong Na +2
The Solidity smart contract ecosystem has rapidly grown, leading to multiple compilers targeting different blockchain platforms or improving compilation efficiency. Although many c…
SkillScope: Toward Fine-Grained Least-Privilege Enforcement for Agent Skills
Jiangrong Wu, Yuhong Nan, Yixi Lin +4
Agent Skills have become a practical way to extend LLM agents by packaging metadata, natural-language instructions, and executable resources into reusable capability bundles. Howev…
GoAT-X: A Graph of Auditing Thoughts for Securing Token Transactions in Cross-Chain Contracts
Zijun Feng, Yuming Feng, Yu Wang +4
Cross-chain bridges, the critical infrastructure of the multi-chain ecosystem, have become a primary target for attackers, resulting in over $2.8 billion in losses due to subtle im…
V2E: Validating Smart Contract Vulnerabilities through Profit-driven Exploit Generation and Execution
Jingwen Zhang, Yuhong Nan, Kaiwen Ning +6
Smart contracts are a critical component of blockchain systems. Due to the large amount of digital assets carried by smart contracts, their security is of critical importance. Alth…
ChainFuzzer: Greybox Fuzzing for Workflow-Level Multi-Tool Vulnerabilities in LLM Agents
Jiangrong Wu, Zitong Yao, Yuhong Nan +1
Tool-augmented LLM agents increasingly rely on multi-step, multi-tool workflows to complete real tasks. This design expands the attack surface, because data produced by one tool ca…
AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents
Yixi Lin, Jiangrong Wu, Yuhong Nan +3
The rapid integration of Large Language Model (LLM) agents into autonomous task execution has introduced significant privacy concerns within cross-tool data flows. In this paper, w…
Is My RPC Response Reliable? Detecting RPC Bugs in Ethereum Blockchain Client under Context
Zhijie Zhong, Yuhong Nan, Mingxi Ye +5
Blockchain clients are fundamental software for running blockchain nodes. They provide users with various RPC (Remote Procedure Call) interfaces to interact with the blockchain. Th…
Satellite: Detecting and Analyzing Smart Contract Vulnerabilities caused by Subcontract Misuse
Zeqin Liao, Yuhong Nan, Zixu Gao +4
Developers of smart contracts pervasively reuse subcontracts to improve development efficiency. Like any program language, such subcontract reuse may unexpectedly include, or intro…
An Empirical Study on Embodied Artificial Intelligence Robot (EAIR) Software Bugs
Zeqin Liao, Zibin Zheng, Peifan Reng +5
Embodied Artificial Intelligence Robots (EAIR) is an emerging and rapidly evolving technological domain. Ensuring their program correctness is fundamental to their successful deplo…
Your Mailbox Is Mine: Prompt Injection Attacks Against Real-World LLM Email Agents
Jiangrong Wu, Yuhong Nan, Jianliang Wu +4
Large Language Model (LLM) email agents have emerged as pivotal autonomous assistants, serving as a critical root of trust for digital identity by managing sensitive communications…
Understanding the Sneaky Patterns of Pop-up Windows in the Mobile Ecosystem
Dongpeng Wu, Yuhong Nan, Shaojiang Wang +3
In mobile applications, Pop-up window (PoW) plays a crucial role in improving user experience, guiding user actions, and delivering key information. Unfortunately, the excessive us…
Augmenting Smart Contract Decompiler Output through Fine-grained Dependency Analysis and LLM-facilitated Semantic Recovery
Zeqin Liao, Yuhong Nan, Zixu Gao +4
Decompiler is a specialized type of reverse engineering tool extensively employed in program analysis tasks, particularly in program comprehension and vulnerability detection. Howe…
SmartReco: Detecting Read-Only Reentrancy via Fine-Grained Cross-DApp Analysis
Jingwen Zhang, Zibin Zheng, Yuhong Nan +4
Despite the increasing popularity of Decentralized Applications (DApps), they are suffering from various vulnerabilities that can be exploited by adversaries for profits. Among suc…
CONNECTOR: Enhancing the Traceability of Decentralized Bridge Applications via Automatic Cross-chain Transaction Association
Dan Lin, Jiajing Wu, Yuxin Su +5
Decentralized bridge applications are important software that connects various blockchains and facilitates cross-chain asset transfer in the decentralized finance (DeFi) ecosystem…
SmartAxe: Detecting Cross-Chain Vulnerabilities in Bridge Smart Contracts via Fine-Grained Static Analysis
Zeqin Liao, Yuhong Nan, Henglong Liang +4
With the increasing popularity of blockchain, different blockchain platforms coexist in the ecosystem (e.g., Ethereum, BNB, EOSIO, etc.), which prompts the high demand for cross-ch…
SmartState: Detecting State-Reverting Vulnerabilities in Smart Contracts via Fine-Grained State-Dependency Analysis
Zeqin Liao, Sicheng Hao, Yuhong Nan +1
Smart contracts written in Solidity are widely used in different blockchain platforms such as Ethereum, TRON and BNB Chain. One of the unique designs in Solidity smart contracts is…
MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning
Zian Jia, Yun Xiong, Yuhong Nan +3
Advance Persistent Threats (APTs), adopted by most delicate attackers, are becoming increasing common and pose great threat to various enterprises and institutions. Data provenance…