3 papers
cs.CR2025
A First Look at the Security Issues in the Model Context Protocol Ecosystem
Xiaofan Li, Xing Gao
The Model Context Protocol (MCP) has emerged as a standard for connecting large language models (LLMs) with external tools. However, this MCP ecosystem introduces new security risk…
cs.CR2025
Investigating Security Implications of Automatically Generated Code on the Software Supply Chain
Xiaofan Li, Xing Gao
In recent years, various software supply chain (SSC) attacks have posed significant risks to the global community. Severe consequences may arise if developers integrate insecure co…
cs.CR2024
Characterizing Ethereum Upgradable Smart Contracts and Their Security Implications
Xiaofan Li, Jin Yang, Jiaqi Chen +2
Upgradeable smart contracts (USCs) have been widely adopted to enable modifying deployed smart contracts. While USCs bring great flexibility to developers, improper usage might int…