28 citations · 70 across the 20 of their papers we have counts for
16 papers · 1 filter
AgentTracer: Tracing Indirect Prompt Injection Attack through Fine-Grained Intention-Execution Alignment
Zitong Yao, Jiangrong Wu, Yixi Lin +3
Large language model (LLM) agents interact with external resources to complete complex user tasks, exposing them to indirect prompt injection (IPI), where malicious instructions re…
SmartMemory: Detecting On-chain-off-chain Communication Inconsistency for Smart Contract via Memory-based Agent
Zeqin Liao, Yuhong Nan, Henglong Liang +7
Smart contracts underpin decentralized finance, where growing demand for on-chain/off-chain communication(OFC) has driven diverse applications such as cross-chain bridges, real-wor…
FlowArk: Boosting Agentic Data-flow Analysis for Android Apps via Context-Aware Knowledge Reuse
Yiming Zhang, Jiangrong Wu, Yuhong Nan
Data-flow analysis is foundational to Android app privacy and security auditing. Recent coding agents can assist with non-trivial source-to-sink data-flow analysis tasks by searchi…
ParityFuzz: Finding Inconsistencies across Solidity Compilers via Fine-Grained Mutation and Differential Analysis
Bowei Su, Mingxi Ye, Yuhong Na +2
The Solidity smart contract ecosystem has rapidly grown, leading to multiple compilers targeting different blockchain platforms or improving compilation efficiency. Although many c…
V2E: Validating Smart Contract Vulnerabilities through Profit-driven Exploit Generation and Execution
Jingwen Zhang, Yuhong Nan, Kaiwen Ning +6
Smart contracts are a critical component of blockchain systems. Due to the large amount of digital assets carried by smart contracts, their security is of critical importance. Alth…
ChainFuzzer: Greybox Fuzzing for Workflow-Level Multi-Tool Vulnerabilities in LLM Agents
Jiangrong Wu, Zitong Yao, Yuhong Nan +1
Tool-augmented LLM agents increasingly rely on multi-step, multi-tool workflows to complete real tasks. This design expands the attack surface, because data produced by one tool ca…
AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents
Yixi Lin, Jiangrong Wu, Yuhong Nan +3
The rapid integration of Large Language Model (LLM) agents into autonomous task execution has introduced significant privacy concerns within cross-tool data flows. In this paper, w…
Is My RPC Response Reliable? Detecting RPC Bugs in Ethereum Blockchain Client under Context
Zhijie Zhong, Yuhong Nan, Mingxi Ye +5
Blockchain clients are fundamental software for running blockchain nodes. They provide users with various RPC (Remote Procedure Call) interfaces to interact with the blockchain. Th…
Satellite: Detecting and Analyzing Smart Contract Vulnerabilities caused by Subcontract Misuse
Zeqin Liao, Yuhong Nan, Zixu Gao +4
Developers of smart contracts pervasively reuse subcontracts to improve development efficiency. Like any program language, such subcontract reuse may unexpectedly include, or intro…
An Empirical Study on Embodied Artificial Intelligence Robot (EAIR) Software Bugs
Zeqin Liao, Zibin Zheng, Peifan Reng +5
Embodied Artificial Intelligence Robots (EAIR) is an emerging and rapidly evolving technological domain. Ensuring their program correctness is fundamental to their successful deplo…
Understanding the Sneaky Patterns of Pop-up Windows in the Mobile Ecosystem
Dongpeng Wu, Yuhong Nan, Shaojiang Wang +3
In mobile applications, Pop-up window (PoW) plays a crucial role in improving user experience, guiding user actions, and delivering key information. Unfortunately, the excessive us…
Augmenting Smart Contract Decompiler Output through Fine-grained Dependency Analysis and LLM-facilitated Semantic Recovery
Zeqin Liao, Yuhong Nan, Zixu Gao +4
Decompiler is a specialized type of reverse engineering tool extensively employed in program analysis tasks, particularly in program comprehension and vulnerability detection. Howe…
SmartReco: Detecting Read-Only Reentrancy via Fine-Grained Cross-DApp Analysis
Jingwen Zhang, Zibin Zheng, Yuhong Nan +4
Despite the increasing popularity of Decentralized Applications (DApps), they are suffering from various vulnerabilities that can be exploited by adversaries for profits. Among suc…
CONNECTOR: Enhancing the Traceability of Decentralized Bridge Applications via Automatic Cross-chain Transaction Association
Dan Lin, Jiajing Wu, Yuxin Su +5
Decentralized bridge applications are important software that connects various blockchains and facilitates cross-chain asset transfer in the decentralized finance (DeFi) ecosystem…
SmartAxe: Detecting Cross-Chain Vulnerabilities in Bridge Smart Contracts via Fine-Grained Static Analysis
Zeqin Liao, Yuhong Nan, Henglong Liang +4
With the increasing popularity of blockchain, different blockchain platforms coexist in the ecosystem (e.g., Ethereum, BNB, EOSIO, etc.), which prompts the high demand for cross-ch…
SmartState: Detecting State-Reverting Vulnerabilities in Smart Contracts via Fine-Grained State-Dependency Analysis
Zeqin Liao, Sicheng Hao, Yuhong Nan +1
Smart contracts written in Solidity are widely used in different blockchain platforms such as Ethereum, TRON and BNB Chain. One of the unique designs in Solidity smart contracts is…