52 citations · 77 across the 8 of their papers we have counts for
9 papers
HarnessSecurity-Bench: Do Security Mechanisms Really Protect Coding Agent Harnesses?
Zhengyang Zhu, Liming Huang, Runmin Ji +8
Coding agent harnesses mediate tool use and authorize actions, yet their security mechanisms and runtime effects remain incompletely characterized. We present HarnessSecurity, the…
PolyUQuest: Verifiable Structure-Aware Web RAG over Heterogeneous Graphs
Ying Liu, Yi Ye, Quanyu Feng +5
Existing retrieval-augmented generation (RAG) systems treat web pages as flat text, losing the structural and semantic signals encoded in HTML. We present PolyUQuest, a verifiable,…
ParityFuzz: Finding Inconsistencies across Solidity Compilers via Fine-Grained Mutation and Differential Analysis
Bowei Su, Mingxi Ye, Yuhong Na +2
The Solidity smart contract ecosystem has rapidly grown, leading to multiple compilers targeting different blockchain platforms or improving compilation efficiency. Although many c…
V2E: Validating Smart Contract Vulnerabilities through Profit-driven Exploit Generation and Execution
Jingwen Zhang, Yuhong Nan, Kaiwen Ning +6
Smart contracts are a critical component of blockchain systems. Due to the large amount of digital assets carried by smart contracts, their security is of critical importance. Alth…
Is My RPC Response Reliable? Detecting RPC Bugs in Ethereum Blockchain Client under Context
Zhijie Zhong, Yuhong Nan, Mingxi Ye +5
Blockchain clients are fundamental software for running blockchain nodes. They provide users with various RPC (Remote Procedure Call) interfaces to interact with the blockchain. Th…
SmartReco: Detecting Read-Only Reentrancy via Fine-Grained Cross-DApp Analysis
Jingwen Zhang, Zibin Zheng, Yuhong Nan +4
Despite the increasing popularity of Decentralized Applications (DApps), they are suffering from various vulnerabilities that can be exploited by adversaries for profits. Among suc…
A Survey of Large Language Models for Code: Evolution, Benchmarking, and Future Trends
Zibin Zheng, Kaiwen Ning, Yanlin Wang +4
General large language models (LLMs), represented by ChatGPT, have demonstrated significant potential in tasks such as code generation in software engineering. This has led to the…
DAppSCAN: Building Large-Scale Datasets for Smart Contract Weaknesses in DApp Projects
Zibin Zheng, Jianzhong Su, Jiachi Chen +3
The Smart Contract Weakness Classification Registry (SWC Registry) is a widely recognized list of smart contract weaknesses specific to the Ethereum platform. Despite the SWC Regis…
Turn the Rudder: A Beacon of Reentrancy Detection for Smart Contracts on Ethereum
Zibin Zheng, Neng Zhang, Jianzhong Su +3
Smart contracts are programs deployed on a blockchain and are immutable once deployed. Reentrancy, one of the most important vulnerabilities in smart contracts, has caused millions…