28 citations · 70 across the 20 of their papers we have counts for
12 papers · 1 filter
AgentTracer: Tracing Indirect Prompt Injection Attack through Fine-Grained Intention-Execution Alignment
Zitong Yao, Jiangrong Wu, Yixi Lin +3
Large language model (LLM) agents interact with external resources to complete complex user tasks, exposing them to indirect prompt injection (IPI), where malicious instructions re…
SmartMemory: Detecting On-chain-off-chain Communication Inconsistency for Smart Contract via Memory-based Agent
Zeqin Liao, Yuhong Nan, Henglong Liang +7
Smart contracts underpin decentralized finance, where growing demand for on-chain/off-chain communication(OFC) has driven diverse applications such as cross-chain bridges, real-wor…
FlowArk: Boosting Agentic Data-flow Analysis for Android Apps via Context-Aware Knowledge Reuse
Yiming Zhang, Jiangrong Wu, Yuhong Nan
Data-flow analysis is foundational to Android app privacy and security auditing. Recent coding agents can assist with non-trivial source-to-sink data-flow analysis tasks by searchi…
MOSAIC: Knowledge-Guided CLI Command Composition Attack in LLM Coding Agents
Jiangrong Wu, Huaijin Wang, Yihao Zhang +2
LLM coding agents increasingly complete development tasks by issuing ordinary CLI commands. Following the Unix design, these commands cooperate through shared operating-system stat…
VLAMotor: Test-Guided Enhancement of Vision-Language-Action Models via Agent-BasedData Synthesis
Zeqin Liao, Peifan Ren, Zixu Gao +6
Vision-Language-Action (VLA) models follow a data-driven paradigm and are constrained by the coverage of training data, making them prone to failure on edge-case configurations aft…
ParityFuzz: Finding Inconsistencies across Solidity Compilers via Fine-Grained Mutation and Differential Analysis
Bowei Su, Mingxi Ye, Yuhong Na +2
The Solidity smart contract ecosystem has rapidly grown, leading to multiple compilers targeting different blockchain platforms or improving compilation efficiency. Although many c…
SkillScope: Toward Fine-Grained Least-Privilege Enforcement for Agent Skills
Jiangrong Wu, Yuhong Nan, Yixi Lin +4
Agent Skills have become a practical way to extend LLM agents by packaging metadata, natural-language instructions, and executable resources into reusable capability bundles. Howev…
GoAT-X: A Graph of Auditing Thoughts for Securing Token Transactions in Cross-Chain Contracts
Zijun Feng, Yuming Feng, Yu Wang +4
Cross-chain bridges, the critical infrastructure of the multi-chain ecosystem, have become a primary target for attackers, resulting in over $2.8 billion in losses due to subtle im…
V2E: Validating Smart Contract Vulnerabilities through Profit-driven Exploit Generation and Execution
Jingwen Zhang, Yuhong Nan, Kaiwen Ning +6
Smart contracts are a critical component of blockchain systems. Due to the large amount of digital assets carried by smart contracts, their security is of critical importance. Alth…
ChainFuzzer: Greybox Fuzzing for Workflow-Level Multi-Tool Vulnerabilities in LLM Agents
Jiangrong Wu, Zitong Yao, Yuhong Nan +1
Tool-augmented LLM agents increasingly rely on multi-step, multi-tool workflows to complete real tasks. This design expands the attack surface, because data produced by one tool ca…
AgentRaft: Automated Detection of Data Over-Exposure in LLM Agents
Yixi Lin, Jiangrong Wu, Yuhong Nan +3
The rapid integration of Large Language Model (LLM) agents into autonomous task execution has introduced significant privacy concerns within cross-tool data flows. In this paper, w…
Is My RPC Response Reliable? Detecting RPC Bugs in Ethereum Blockchain Client under Context
Zhijie Zhong, Yuhong Nan, Mingxi Ye +5
Blockchain clients are fundamental software for running blockchain nodes. They provide users with various RPC (Remote Procedure Call) interfaces to interact with the blockchain. Th…