160 citations · 1.2k across the 101 of their papers we have counts for
56 papers · 1 filter
When Agents See Differently: Exposing UI Desynchronization Threats in Mobile Agents
Heng Li, Fulin Zhao, Zhe Geng +3
Mobile agents are increasingly capable of autonomously interacting with mobile applications and performing consequential actions on behalf of users. Effective human oversight of su…
CIG-MIA: Context-Induced Information Gain Membership Inference Attacks against Retrieval-Augmented Generation
Tan Xue, Huo Chang, Wang Changhui +4
Retrieval-augmented generation (RAG) systems ground large language models on external knowledge bases, enabling access to private, domain-specific, and up-to-date knowledge without…
Are Unreachable Nodes Truly Safe? Fully Eclipsing Monero's P2P Network!
Ruisheng Shi, Jiaqi Zeng, Lina Lan +6
Eclipse attacks isolate a blockchain node by monopolizing its network connections. Existing attacks on Monero (NDSS'25), Bitcoin (USENIX'15/21, S&P'20) and Ethereum (WWW'26) implic…
EventSpec: Defining and Detecting Event-Semantic Issues in Blockchain Ecosystems
Yixuan Liu, Yuxin Dong, Ye Liu +4
In recent years, smart contracts have become the backbone of decentralized applications (DApps), and off-chain systems such as bridges, wallets, and indexers rely heavily on event…
Lightweight Detection of Electromagnetic Signal Injection Attacks on Image Sensors
Youqian Zhang, Chunxi Yang, Eugene Yujun Fu +3
Electromagnetic signal injection attacks (ESIA) pose a growing threat to image sensors, which are increasingly used in different intelligent systems. By emitting electromagnetic in…
Blockchain Transaction Simulation Phishing
Xiaocan Wang, Shixuan Guan, Tong Yang +3
Cryptocurrency users have increasingly become targets of phishing and scam attacks. To mitigate these threats, leading crypto wallets (e.g., MetaMask) have introduced transaction s…
Tracing the Shadows: Automatic Tracking and Analysis of Crypto Money Laundering via Transaction Semantic Analysis
Hao Wu, Haijun Wang, Shangwang Li +4
With the rapid advancement of decentralized finance (DeFi), security incidents related to cryptocurrency have become increasingly prevalent. After such incidents, attackers typical…
Belobog: Move Language Fuzzing Framework For Real-World Smart Contracts
Ziqiao Kong, Wanxu Xia, Zhengwei Li +6
Move is a resource-oriented programming language designed for secure and verifiable smart contract development and has been widely used in managing billions of digital assets in bl…
RISKTAGGER: Evidence-Guided LLM Agent for Post-Incident Forensic Analysis of Money Laundering in Web3
Dan Lin, Yanli Ding, Weipeng Zou +5
Cryptocurrency money-laundering forensic analysis after Web3 incidents faces challenges such as fragmented evidence, expanding transaction paths, and cross-chain discontinuity. Exi…
A Simulation Framework for Electromagnetic Signal Injection Attacks on Image Sensors
Youqian Zhang, MK Michael Cheung, Chunxi Yang +6
Image sensors are fundamental to many intelligent systems, allowing visual perception and AI-driven decision-making. However, their integrity can be compromised by electromagnetic…
Understanding Impacts of Electromagnetic Signal Injection Attacks on Object Detection
Youqian Zhang, Chunxi Yang, Eugene Y. Fu +7
Object detection can localize and identify objects in images, and it is extensively employed in critical multimedia applications such as security surveillance and autonomous drivin…
Detect Llama -- Finding Vulnerabilities in Smart Contracts using Large Language Models
Peter Ince, Xiapu Luo, Jiangshan Yu +2
In this paper, we test the hypothesis that although OpenAI's GPT-4 performs well generally, we can fine-tune open-source models to outperform GPT-4 in smart contract vulnerability…
Nurgle: Exacerbating Resource Consumption in Blockchain State Storage via MPT Manipulation
Zheyuan He, Zihao Li, Ao Qiao +6
Blockchains, with intricate architectures, encompass various components, e.g., consensus network, smart contracts, decentralized applications, and auxiliary services. While offerin…
All Your Tokens are Belong to Us: Demystifying Address Verification Vulnerabilities in Solidity Smart Contracts
Tianle Sun, Ningyu He, Jiang Xiao +3
In Ethereum, the practice of verifying the validity of the passed addresses is a common practice, which is a crucial step to ensure the secure execution of smart contracts. Vulnera…
MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack
Jiayi Hua, Kailong Wang, Meizhen Wang +3
Mobile malware has become one of the most critical security threats in the era of ubiquitous mobile computing. Despite the intensive efforts from security experts to counteract it,…
The Devil Behind the Mirror: Tracking the Campaigns of Cryptocurrency Abuses on the Dark Web
Pengcheng Xia, Zhou Yu, Kailong Wang +6
The dark web has emerged as the state-of-the-art solution for enhanced anonymity. Just like a double-edged sword, it also inadvertently becomes the safety net and breeding ground f…
Demystifying DeFi MEV Activities in Flashbots Bundle
Zihao Li, Jianfeng Li, Zheyuan He +6
Decentralized Finance, mushrooming in permissionless blockchains, has attracted a recent surge in popularity. Due to the transparency of permissionless blockchains, opportunistic t…
The Dark Side of NFTs: A Large-Scale Empirical Study of Wash Trading
Shijian Chen, Jiachi Chen, Jiangshan Yu +2
NFTs (Non-Fungible Tokens) have seen significant growth since they first captured public attention in 2021. However, the NFT market is plagued by fake transactions and economic bub…
Are we there yet? An Industrial Viewpoint on Provenance-based Endpoint Detection and Response Tools
Feng Dong, Shaofei Li, Peng Jiang +8
Provenance-Based Endpoint Detection and Response (P-EDR) systems are deemed crucial for future APT defenses. Despite the fact that numerous new techniques to improve P-EDR systems…
Abusing the Ethereum Smart Contract Verification Services for Fun and Profit
Pengxiang Ma, Ningyu He, Yuhua Huang +2
Smart contracts play a vital role in the Ethereum ecosystem. Due to the prevalence of kinds of security issues in smart contracts, the smart contract verification is urgently neede…
Rethinking Mesh Watermark: Towards Highly Robust and Adaptable Deep 3D Mesh Watermarking
Xingyu Zhu, Guanhui Ye, Xiapu Luo +1
The goal of 3D mesh watermarking is to embed the message in 3D meshes that can withstand various attacks imperceptibly and reconstruct the message accurately from watermarked meshe…
On the Security Risks of Knowledge Graph Reasoning
Zhaohan Xi, Tianyu Du, Changjiang Li +6
Knowledge graph reasoning (KGR) -- answering complex logical queries over large knowledge graphs -- represents an important artificial intelligence task, entailing a range of appli…
SigRec: Automatic Recovery of Function Signatures in Smart Contracts
Ting Chen, Zihao Li, Xiapu Luo +9
Millions of smart contracts have been deployed onto Ethereum for providing various services, whose functions can be invoked. For this purpose, the caller needs to know the function…
Exploring Unconfirmed Transactions for Effective Bitcoin Address Clustering
Kai Wang, Maike Tong, Changhao Wu +4
The development of clustering heuristics has demonstrated that Bitcoin is not completely anonymous. Currently, existing clustering heuristics only consider confirmed transactions r…