9 papers
NotDec: WebAssembly Decompilation With Inter-Procedural Type Recovery
Jikai Wang, Ningyu He, Tianming Liu +2
With WebAssembly widely supported in browsers, containers, IoT devices, and serverless platforms and increasingly adopted as a universal low-level bytecode standard, auditing its h…
CLIR: Liveness-Driven and Structure-Aware Fuzzing for the Cranelift Compiler
Shangtong Cao, Tianlei Song, Qiuping Yi +4
Modern compilers are complex software systems that must correctly translate high-level programming languages into machine code across multiple architectures. Cranelift, a fast and…
When Specifications Meet Reality: Uncovering API Inconsistencies in Ethereum Infrastructure
Jie Ma, Ningyu He, Jinwen Xi +8
The Ethereum ecosystem, which secures over $381 billion in assets, fundamentally relies on client APIs as the sole interface between users and the blockchain. However, these critic…
An Effective and Cost-Efficient Agentic Framework for Ethereum Smart Contract Auditing
Xiaohui Hu, Wun Yu Chan, Yuejie Shi +5
Smart contract security is paramount, but identifying intricate business logic vulnerabilities remains a persistent challenge because existing solutions consistently fall short: ma…
Cybersquatting in Web3: The Case of NFT
Kai Ma, Ningyu He, Jintao Huang +3
Cybersquatting refers to the practice where attackers register a domain name similar to a legitimate one to confuse users for illegal gains. With the growth of the Non-Fungible Tok…
OpDiffer: LLM-Assisted Opcode-Level Differential Testing of Ethereum Virtual Machine
Jie Ma, Ningyu He, Jinwen Xi +4
As Ethereum continues to thrive, the Ethereum Virtual Machine (EVM) has become the cornerstone powering tens of millions of active smart contracts. Intuitively, security issues in…