Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/hzysvilla/Academic_Smart_Contract_Papers

Academic Smart Contract Papers. Welcome developers or researchers to add more published papers to this list.
https://github.com/hzysvilla/Academic_Smart_Contract_Papers

Last synced: 3 months ago
JSON representation

Academic Smart Contract Papers. Welcome developers or researchers to add more published papers to this list.

Lists

README

        

# Academic Smart Contract Papers

A curated Smart Contract related academic papers. All papers are sorted based on the conference name and published year.

**Welcome developers or researchers to add more published papers to this list**.

You can find my **[TLDR](TLDR.md)** notes for some papers.

The cryptocurrency donation address: 0xCC28B05fE858CDbc8692E3272A4451111bDCf700.

Welcome to visit my [homepage](https://hzysvilla.github.io/) and [Google Scholar](https://scholar.google.com/citations?user=O_vixKoAAAAJ).

## Table of Listed Conferences
| Security & Crypto | Networking & Database | Software Engineering & Programming Language | System Architecture |
| :---------------------------------: | :-----------------------------------------------: | :-----------------------------------------: | :------------------: |
| [IEEE S&P](#sp) | [SIGMETRICS](#sigmetrics) | [ICSE](#icse) | [EuroSys](#others) |
| [ACM CCS](#ccs) | [ICDE](#others) | [ESEC/FSE](#esecfse) | [ACM SOSP](#sosp) |
| [USENIX Security](#usenix-security) | [VLDB](#others) | [ASE](#ase) | [IEEE ICDCS](#icdcs)|
| [NDSS](#ndss) | [ACM SIGMOD](#others) | [ACM PLDI](#pldi) | [OSDI](#osdi) |
| [IEEE DSN](#dsn) | [IEEE INFOCOM](#infocom) | [ACM OOPSLA](#oopsla) | [Usenix ATC](#others)|
| [SRCS](#others) | [IMC](#imc) | [ISSTA](#issta) | |
| [RAID](#raid) | [WWW](#www) | [ACM POPL](#popl) | |
| [CAV](#cav) | | | |

## Table of Listed Journals
- [TOSEM](#tosem)
- [TSE](#tse)
- [TDSC](#tdsc)
- [TIFS](#tifs)

### Also including:
* [CSFW](#miscellaneous), [CHI](#miscellaneous), [ICPC](#miscellaneous), [TPDS](#miscellaneous), [HPC](#miscellaneous), [POMACS](#miscellaneous), [AsiaCCS](#miscellaneous), [IJCAI](#miscellaneous), [SC](#miscellaneous), [SIGKDD](#miscellaneous), [JSAC](#miscellaneous), [DAC](#miscellaneous), [TOPLAS](#miscellaneous), [ISCA](#miscellaneous).

---

# Conference

-----

## S&P

### 2024

[security] [NURGLE: Exacerbating Resource Consumption in Blockchain State Storage via MPT Manipulation](https://github.com/hzysvilla/Nurgle_Oakland24/blob/main/Nurgle_oakland24.pdf).

[security] [Specular: Towards Secure, Trust-minimized Optimistic Blockchain Execution]().

[security] [Towards Smart Contract Fuzzing on GPUs]().

[security] [SMARTINV: Multimodal Learning for Smart Contract Invariant Inference]()| **[MyTLDR](TLDR.md#24_2_22)**.

[security] [Nyx: Detecting Exploitable Front-Running Vulnerabilities in Smart Contracts](papers/sp24_Nyx.pdf) | **[MyTLDR](TLDR.md#24_2_12)**.

[security] [Optimal Flexible Consensus and its Application to Ethereum]().

### 2023

[security] [Chronos: Finding Timeout Bugs in Practical Distributed Systems by Deep-Priority Fuzzing with Transient Delay](http://www.wingtecher.com/themes/WingTecherResearch/assets/papers/paper_from_24/Chronos_sp24.pdf).

[financail] [WeRLman: To Tackle Whale (Transactions), Go Deep (RL)](https://roibarzur.github.io/assets/pdfs/werlman-systor-poster-2022.pdf) | **[MyTLDR](TLDR.md#sp23_WeRLman)**.

[security] [Clockwork Finance: Automated Analysis of Economic Security in Smart Contracts](https://eprint.iacr.org/2021/1147.pdf) | **[MyTLDR](TLDR.md#sp23_CF)**.

[security] [SoK: Decentralized Finance (DeFi) Attacks](https://arxiv.org/pdf/2208.13035.pdf) | **[MyTLDR](TLDR.md#sp23_CF)**.

[security] [Tyr: Finding Consensus Failure Bugs in Blockchain System with Behaviour Divergent Model](https://csdl-downloads.ieeecomputer.org/proceedings/sp/2023/9336/00/933600b186.pdf).

[security] [Three Birds with One Stone: Efficient Partitioning Attacks on Interdependent Cryptocurrency Networks]() | **[MyTLDR](TLDR.md#23_8_27)**.

### 2022

[security] [Quantifying Blockchain Extractable Value: How dark is the forest?](https://arxiv.org/pdf/2101.05511.pdf) | **[MyTLDR](TLDR.md#23_8_28)**.

[security] [SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds](https://arxiv.org/pdf/2104.08638.pdf).

### 2021

[security] [SmartPulse: Automated Checking of Temporal Properties in Smart Contracts](https://www.microsoft.com/en-us/research/uploads/prod/2021/02/SmartPulse-Oakland21-preprint.pdf) | **[MyTLDR](TLDR.md#23_10_7)**.

[security] [sGUARD: Towards Fixing Vulnerable Smart Contracts Automatically](https://arxiv.org/abs/2101.01917)

[finance] [On the Just-In-Time Discovery of Profit-Generating Transactions in DeFi Protocols](https://arxiv.org/pdf/2103.02228).

[security] [Compositional Security for Reentrant Applications](https://arxiv.org/abs/2103.08577) | **[MyTLDR](TLDR.md#23_10_24)**.

[security] [High-Frequency Trading on Decentralized On-Chain Exchanges](https://arxiv.org/pdf/2009.14021.pdf).

### 2020

[security] [Flash Boys 2.0: Frontrunning in Decentralized Exchanges, Miner Extractable Value, and Consensus Instability](https://par.nsf.gov/servlets/purl/10159474).

[security] [VerX: Safety Verification of Smart Contracts](https://files.sri.inf.ethz.ch/website/papers/sp20-verx.pdf) | **[MyTLDR](TLDR.md#23_10_9)**.

[security] [VeriSmart: A Highly Precise Safety Verifier for Ethereum Smart Contracts](https://arxiv.org/pdf/1908.11227.pdf).

[security] [Executable Operational Semantics of Solidity](https://arxiv.org/pdf/1804.01295.pdf) | **[MyTLDR](TLDR.md#23_11_5)**.

### 2016

[application] [Hawk: The Blockchain Model of Cryptography and Privacy-Preserving Smart Contracts](https://eprint.iacr.org/2015/675.pdf).

---

## CCS

### 2023

[security] [Demystifying DeFi MEV Activities in Flashbots Bundle](https://zzzihao-li.github.io/papers/CCS23_Bundle_MEV_full_version.pdf) | **[MyTLDR](TLDR.md#23_9_25)**.

[security] [The Locality of Memory Checking](/papers/ccs23__Locality_of_Memory_Checking.pdf)

[security] [Lanturn: Measuring Economic Security of Smart Contracts Through Adaptive Learning](https://eprint.iacr.org/2023/1338) | **[MyTLDR](TLDR.md#23_12_6)**.

[security] [Under the Dark: A Systematical Study of Stealthy Mining Pools (Ab)use in the Wild]().

[security] [TxPhishScope: Towards Detecting and Understanding Transaction-based Phishing on Ethereum](https://yajin.org/papers/ccs23_phishing.pdf) | **[MyTLDR](TLDR.md#23_11_25)**.

[security] [How Hard is Takeover in DPoS Blockchains? Understanding the Security of Coin-based Voting Governance]().

[security] [Uncovering Impact of Mental Models towards Adoption of Multi-device Crypto-Wallets]().

[security] [Uncle Maker: (Time)Stamping Out The Competition in Ethereum](https://eprint.iacr.org/2022/1020.pdf) | **[MyTLDR](TLDR.md#24_3_19)**.

[security] [TrustBoost: Boosting Trust among Interoperable Blockchains]().

[security] [Analyzing the Real-World Security of the Algorand Blockchain]().

[security] [Phoenix: Detect and Locate Resilience Issues in Blockchain via Context-Sensitive Chaos](http://www.wingtecher.com/themes/WingTecherResearch/assets/papers/CCS23.pdf) | **[MyTLDR](TLDR.md#23_10_18)**.

[security] [Fuzz on the Beach: Fuzzing Solana Smart Contracts](https://arxiv.org/pdf/2309.03006.pdf) | **[MyTLDR](TLDR.md#23_9_28)**.

[security] [Cybercrime Bitcoin Revenue Estimations: Quantifying the Impact of Methodology and Coverage]().

### 2022

[security] [Empirical Analysis of EIP-1559: Transaction Fees, Waiting Time, and Consensus Security](https://arxiv.org/pdf/2201.05574.pdf).

[security] [Towards Automated Safety Vetting of Smart Contracts in Decentralized Applications](https://yueduan.github.io/pub/smart_contracts_analysis__ccs22.pdf) | **[MyTLDR](TLDR.md#23_9_2)**.

[security] [VRust: Automated Vulnerability Detection for Solana Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3548606.3560552) | **[MyTLDR](TLDR.md#ccs22_vrust)**.

[security] [Watch Your Back: Identifying Cybercrime Financial Relationships in Bitcoin through Back-and-Forth Exploration](https://dl.acm.org/doi/pdf/10.1145/3548606.3560587).

[security] [Understanding Security Issues in the NFT Ecosystem](https://arxiv.org/pdf/2305.15829.pdf).

### 2021

[security] [DETER: Denial of Ethereum Txpool sERvices](https://dl.acm.org/doi/pdf/10.1145/3460120.3485369).

[security] [SyncAttack: Double-spending in Bitcoin Without Mining Power](https://dl.acm.org/doi/pdf/10.1145/3460120.3484568).

### 2020

[security] [ACE: Asynchronous and Concurrent Execution of Complex Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3372297.3417243) | **[MyTLDR](TLDR.md#23_11_18)**.

[security] [eThor: Practical and Provably Sound Static Analysis of Ethereum Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3372297.3417250).

[security] [Bdos: Blockchain denial-of-service]().

### 2019

[SoftwareAnalysis] [TokenScope: Automatically Discovering Inconsistent Cryptocurrency Tokens](https://dl.acm.org/doi/pdf/10.1145/3319535.3345664).

[security] [Learning to Fuzz from Symbolic Execution with Application to Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3319535.3363230). | **[MyTLDR](TLDR.md#24_2_6)**.

[security] [Zkay: Specifying and Enforcing Data Privacy in Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3319535.3363222).

### 2018

[security] [Securify: Practical Security Analysis of Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3243734.3243780).

[security] [BitML: a calculus for Bitcoin smart contracts Massimo](https://dl.acm.org/doi/pdf/10.1145/3243734.3243795).

### 2017

[security] [Betrayal, Distrust, and Rationality: Smart Counter-Collusion Contracts for Verifiable Cloud Computing](https://dl.acm.org/doi/pdf/10.1145/3133956.3134032).

### 2016

[security] [Making Smart Contracts Smarter](https://dl.acm.org/doi/pdf/10.1145/2976749.2978309) | **[MyTLDR](TLDR.md#23_11_20)**.

[security] [Formal verification of smart contracts: Short paper](https://dl.acm.org/doi/10.1145/2993600.2993611).

[security] [Town crier: An authenticated data feed for smart contracts](https://dl.acm.org/doi/pdf/10.1145/2976749.2978326).

---

## USENIX Security

### 2024

[security] [Practical Security Analysis of Zero-Knowledge Proof Circuits](https://eprint.iacr.org/2023/190.pdf) | **[MyTLDR](TLDR.md#23_9_30)**.

### 2023

[security] [Smart Learning to Find Dumb Contracts](https://www.usenix.org/system/files/usenixsecurity23-abdelaziz.pdf).

[security] [Confusum Contractum: Confused Deputy Vulnerabilities in Ethereum Smart Contracts](https://www.usenix.org/system/files/usenixsecurity23-gritti.pdf).

[security] [Panda: Security Analysis of Algorand Smart Contracts](https://arxiv.org/pdf/2009.02663).

[security] [Proxy Hunting: Understanding and Characterizing Proxy-based Upgradeable Smart Contracts in Blockchains](https://yueduan.github.io/pub/uschunt_usenix23.pdf).

[security] [The Blockchain Imitation Game](https://www.usenix.org/system/files/sec23fall-prepub-331-qin.pdf).

[security] [A Large Scale Study of the Ethereum Arbitrage Ecosystem](https://www.usenix.org/system/files/sec23fall-prepub-515-mclaughlin.pdf) | **[MyTLDR](TLDR.md#23_8_29)**.

[security] [A Mixed-Methods Study of Security Practices of Smart Contract Developers](https://www.usenix.org/system/files/usenixsecurity23-sharma.pdf) | **[MyTLDR](TLDR.md#23_9_17)**.

[security] [Smart Learning to Find Dumb Contracts](https://www.usenix.org/system/files/usenixsecurity23-abdelaziz.pdf) | **[MyTLDR](TLDR.md#23_9_4)**.

[security] [Snapping Snap Sync: Practical Attacks on Go Ethereum Synchronising Nodes](https://www.usenix.org/system/files/usenixsecurity23-taverna.pdf) | **[MyTLDR](TLDR.md#23_9_3)**.

[security] [Token Spammers, Rug Pulls, and Sniper Bots: An Analysis of the Ecosystem of Tokens in Ethereum and in the Binance Smart Chain (BNB)](https://arxiv.org/pdf/2206.08202.pdf) | **[MyTLDR](TLDR.md#23_9_7)**.

[security] [Automated Inference on Financial Security of Ethereum Smart Contracts](https://www.usenix.org/system/files/usenixsecurity23-wang-wansen.pdf) | **[MyTLDR](TLDR.md#23_9_5)**.

[security] [Your Exploit is Mine: Instantly Synthesizing Counterattack Smart Contract](https://www.usenix.org/system/files/usenixsecurity23-zhang-zhuo-exploit.pdf) | **[MyTLDR](TLDR.md#23_9_18)**.

[security] [Anatomy of a High-Profile Data Breach: Dissecting the Aftermath of a Crypto-Wallet Case](https://www.usenix.org/system/files/sec23_slides_abramova.pdf).

[security] [Mixed Signals: Analyzing Ground-Truth Data on the Users and Economics of a Bitcoin Mixing Service](https://www.usenix.org/system/files/usenixsecurity23-miedema.pdf).

[security] [Is Your Wallet Snitching On You? An Analysis on the Privacy Implications of Web3](https://arxiv.org/pdf/2306.08170).

### 2022

[security] [How to Peel a Million: Validating and Expanding Bitcoin Clusters](https://www.usenix.org/system/files/sec22-kappos.pdf).

[security] [Total Eclipse of the Heart – Disrupting the InterPlanetary File System](https://www.usenix.org/system/files/sec22-prunster.pdf).

### 2021

[security] [Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications](https://www.usenix.org/system/files/sec21summer_su.pdf).

[security] [EOSAFE: Security Analysis of EOSIO Smart Contracts](http://sei.pku.edu.cn/~yaoguo/papers/He-Security-21.pdf).

[security] [SmarTest: Effectively Hunting Vulnerable Transaction Sequences in Smart Contracts through Language Model-Guided Symbolic Execution](http://prl.korea.ac.kr/~ssb920/papers/sec21.pdf) | **[MyTLDR](TLDR.md#23_9_21)**.

[security] [Smart Contract Vulnerabilities: Vulnerable Does Not Imply Exploited](https://www.doc.ic.ac.uk/~livshits/papers/pdf/usenixsec21.pdf).

[security] [EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts](https://www.usenix.org/system/files/sec21summer_rodler.pdf).

[security] [Frontrunner Jones and the Raiders of the Dark Forest: An Empirical Study of Frontrunning on the Ethereum Blockchain](https://arxiv.org/abs/2102.03347).

### 2020

[security] [ETHBMC: A Bounded Model Checker for Smart Contracts](https://www.usenix.org/system/files/sec20-frank.pdf) | **[MyTLDR](TLDR.md#23_11_22)**.

[security] [TXSPECTOR: Uncovering Attacks in Ethereum from Transactions](https://www.usenix.org/system/files/sec20-zhang-mengya.pdf).

[security] [An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem](https://www.usenix.org/system/files/sec20-zhou-shunfan.pdf).

[security] [BlockSci: Design and applications of a blockchain analysis platform](https://www.usenix.org/system/files/sec20-kalodner.pdf)

### 2019

[security] [The art of the scam: Demystifying honeypots in ethereum smart contracts](https://www.usenix.org/system/files/sec19-torres.pdf) | **[MyTLDR](TLDR.md#24_3_2)**.

[application] [FastKitten: Practical Smart Contracts on Bitcoin]().

[security] [Tracing Transactions Across Cryptocurrency Ledgers](https://www.usenix.org/system/files/sec19-yousaf_0.pdf).

### 2018

[security] [Erays: Reverse Engineering Ethereum's Opaque Smart Contracts](https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-zhou.pdf).

[security] [teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts](https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-krupp.pdf).

[application] [Arbitrum: Scalable, private smart contracts](https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-kalodner.pdf).

[security] [Enter the Hydra: Towards principled bug bounties and exploit-resistant smart contracts](https://eprint.iacr.org/2017/1090.pdf).

### 2017

[security] [SmartPool: Practical Decentralized Pooled Mining](https://www.usenix.org/system/files/conference/usenixsecurity17/sec17-luu.pdf).

---

## NDSS

### 2024

[security] [Pisces: Private and Compliable Cryptocurrency Exchange]().

[security] [Front-running Attack in Sharded Blockchains and Fair Cross-shard Consensus]().

[security] [Content Censorship in the InterPlanetary File System]().

[security] [DRAINCLoG: Detecting Rogue Accounts with Illegally-obtained NFTs using Classifiers Learned on Graphs]().

[security] [VETEOS: Statically Vetting EOSIO Contracts for the “Groundhog Day” Vulnerabilities](papers/NDSS24_vetEos.pdf)

[security] [Not your Type! Detecting Storage Collision Vulnerabilities in Ethereum Smart Contracts](https://seclab.cs.ucsb.edu/files/publications/ruaro24crush.pdf) | **[MyTLDR](TLDR.md#23_1_25)**.

[security] [Abusing the Ethereum Smart Contract Verification Services for Fun and Profit](https://arxiv.org/pdf/2307.00549.pdf) | **[MyTLDR](TLDR.md#24_2_2)**.

### 2023

[security] [Double and Nothing: Understanding and Detecting Cryptocurrency Giveaway Scams](https://double-and-nothing.github.io/) | **[MyTLDR](TLDR.md#23_8_30)**.

[security] [Partitioning Ethereum without Eclipsing It](https://www.ndss-symposium.org/wp-content/uploads/2023/02/ndss2023_f465_paper.pdf).

[security] [LOKI: State-Aware Fuzzing Framework for the Implementation of Blockchain Consensus Protocols](https://www.ndss-symposium.org/wp-content/uploads/2023/02/ndss2023_f78_paper.pdf).

[security] [BlockScope: Detecting and Investigating Propagated Vulnerabilities in Forked Blockchain Projects](https://github.com/VPRLab/BlkVulnReport/blob/main/NDSS23_BlockScope.pdf).

[security] [Smarter Contracts: Detecting Vulnerabilities in Smart Contracts with Deep Transfer Learning](https://www.ndss-symposium.org/wp-content/uploads/2023/02/ndss2023_s263_paper.pdf) | **[MyTLDR](TLDR.md#23_8_31)**.

### 2021

[application] [Bitcontracts: Supporting Smart Contracts in Legacy Blockchains](https://eprint.iacr.org/2019/857.pdf).

[Sercurity] [As Strong As Its Weakest Link: How to Break Blockchain DApps at RPC Service](https://www.ndss-symposium.org/wp-content/uploads/ndss2021_3C-1_23108_paper.pdf).

[Sercurity] [SquirRL: Automating Attack Analysis on Blockchain Incentive Mechanisms with Deep Reinforcement Learning](https://arxiv.org/abs/1912.01798).

### 2020

[security] [SODA: A Generic Online Detection Framework for Smart Contracts](https://www.ndss-symposium.org/wp-content/uploads/2020/02/24449-paper.pdf).

[security] [Broken Metre: Attacking Resource Metering in EVM](https://arxiv.org/pdf/1909.07220.pdf).

### 2019

[security] [YODA: Enabling computationally intensive contracts on blockchains with Byzantine and Selfish nodes](https://arxiv.org/pdf/1811.03265.pdf).

[security] [Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks](https://arxiv.org/pdf/1812.05934).

### 2018

[security] ["Zeus": Analyzing Safety of Smart Contracts](http://wp.internetsociety.org/ndss/wp-content/uploads/sites/25/2018/02/ndss2018_09-1_Kalra_paper.pdf).

[security] [Chainspace: A Sharded Smart Contracts Platform](https://arxiv.org/pdf/1708.03778).

---

## CAV

### 2022

[security] [SolCMC: Solidity Compiler’s Model Checker](http://verify.inf.usi.ch/sites/default/files/solcmc.pdf) | **[MyTLDR](TLDR.md#23_10_6)**.

### 2020

[security] [Synthesis of super-optimized smart contracts using max-smt](https://discovery.ucl.ac.uk/id/eprint/10113344/).

### 2018

[security] [TxT: Real-Time Transaction Encapsulation for Ethereum Smart Contracts]()

---

## ESEC/FSE

### 2024

[security] [Efficiently Detecting Reentrancy Vulnerabilities in Complex Smart Contracts](https://arxiv.org/abs/2403.11254). (arxiv)

### 2023

[security] [Demystifying the Composition and Code Reuse in Solidity Smart Contracts](https://kaixuanli-ecnu.github.io/files/fse23-sc-codeclone-kairansun.pdf) | **[MyTLDR](TLDR.md#23_9_20)**.

[security] [Understanding Solidity Event Logging Practices in the Wild]().

[software engineering] [EtherDiffer: Differential Testing on RPC Services of Ethereum Nodes](https://dl.acm.org/doi/pdf/10.1145/3611643.3616251) | **[MyTLDR](TLDR.md#24_2_21)**.

[security] [SmartFix: Fixing Vulnerable Smart Contracts by Accelerating Generate-and-Verify Repair using Statistical Models]()

[security] [TransRacer: Function Dependence-Guided Transaction Race Detection for Smart Contracts]()

[security] [DeepInfer: Deep Type Inference from Smart Contract Bytecode]() | **[MyTLDR](TLDR.md#23_9_9)**.

### 2022

[security] [MANDO-GURU: vulnerability detection for smart contract source code by heterogeneous graph embeddings](https://dl.acm.org/doi/pdf/10.1145/3540250.3558927).

[security] [An Empirical Study of Blockchain System Vulnerabilities: Modules, Types, and Patterns](https://dl.acm.org/doi/pdf/10.1145/3540250.3549105).

[security] [Declarative Smart Contracts](https://arxiv.org/pdf/2207.13827.pdf).

[security] [SolSEE: a source-level symbolic execution engine for solidity](https://personal.ntu.edu.sg/yi_li/files/Lin2022SAS.pdf)

### 2021

[security] [ÐArcher: Detecting On-Chain-Off-Chain Synchronization Bugs in Decentralized Applications](https://dl.acm.org/doi/pdf/10.1145/3468264.3468546).

[application] [Making Smart Contract Development More Secure and Easier](https://dl.acm.org/doi/pdf/10.1145/3468264.3473929).

[application] [iBatch: Saving Ethereum Fees via Secure and Cost-Effective Batching of Smart-Contract Invocations](https://dl.acm.org/doi/pdf/10.1145/3468264.3468568).

### 2020

[security] [Towards Automated Verification of Smart Contract Fairness](https://dl.acm.org/doi/pdf/10.1145/3368089.3409740).

[security] [ModCon: a model-based testing platform for smart contracts](https://dl.acm.org/doi/pdf/10.1145/3368089.3417939).

[security] [HARVEY: A Greybox Fuzzer for Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3368089.3417064).

### 2019

[security] [EVMFuzzer: Detect EVM vulnerabilities via fuzz testing](https://dl.acm.org/doi/pdf/10.1145/3338906.3341175).

[security] [A graph-based framework for analysing the design of smart contracts](https://dl.acm.org/doi/pdf/10.1145/3338906.3342495).

---

## ISSTA

### 2023

[security] [SmartState: Detecting State-Reverting Vulnerabilities in Smart Contracts via Fine-Grained State-Dependency Analysis]() | **[MyTLDR](TLDR.md#23_9_2)**.

[security] [iSyn: Semi-automated Smart Contract Synthesis from Legal Financial Agreements]() | **[MyTLDR](TLDR.md#23_10_2)**.

[security] [Beyond “Protected” and “Private”: An Empirical Security Analysis of Custom Function Modifiers in Smart Contracts](https://daoyuan14.github.io/papers/ISSTA23_SoMo.pdf) | **[MyTLDR](TLDR.md#23_9_8)**.

[security] [Automated Generation of Security-Centric Descriptions for Smart Contract Bytecode]().

[security] [Detecting State Inconsistency Bugs in DApps via On-Chain Transaction Replay and Fuzzing](https://dl.acm.org/doi/pdf/10.1145/3597926.3598057) | **[MyTLDR](TLDR.md#23_9_15)**.

[security] [ItyFuzz: Snapshot-Based Fuzzer for Smart Contract](https://arxiv.org/pdf/2306.17135)

[security] [Toward Automated Detecting Unanticipated Price Feed in Smart Contract](https://dl.acm.org/doi/pdf/10.1145/3548606.3559384) | **[MyTLDR](TLDR.md#23_9_16)**.

[security] [DeFiTainter: Detecting Price Manipulation Vulnerabilities in DeFi Protocols](papers/issta23_DeFiTainter.pdf) | **[MyTLDR](TLDR.md#24_2_11)**.

[security] [Definition and Detection of Defects in NFT Smart Contracts](https://arxiv.org/pdf/2305.15829.pdf) | **[MyTLDR](TLDR.md#24_2_9)**.

### 2022

[security] [WASAI: uncovering vulnerabilities in Wasm smart contracts](https://dl.acm.org/doi/pdf/10.1145/3533767.3534218) | **[MyTLDR](TLDR.md#23_9_23)**.

[security] [Finding permission bugs in smart contracts with role mining](https://dl.acm.org/doi/pdf/10.1145/3533767.3534372) | **[MyTLDR](TLDR.md#issta22_SPCon)**.

[security] [eTainter: detecting gas-related vulnerabilities in smart contracts](https://dl.acm.org/doi/pdf/10.1145/3533767.3534378) | **[MyTLDR](TLDR.md#24_2_4)**.

[security] [Park: accelerating smart contract vulnerability detection via parallel-fork symbolic execution](https://dl.acm.org/doi/pdf/10.1145/3533767.3534395).

[security] [SmartDagger: a bytecode-based static analysis approach for detecting cross-contract vulnerability](https://dl.acm.org/doi/pdf/10.1145/3533767.3534222).

[security] [SpCon: Finding Smart Contract Permission Bugs with Role Mining](https://personal.ntu.edu.sg/yi_li/files/Liu2022FPB.pdf)

### 2021

[security] [Empirical Evaluation of Smart Contract Testing: What Is the Best Choice?](https://dl.acm.org/doi/pdf/10.1145/3460319.3464837).

[security] [SCStudio: A Secure and Efficient Integrated Development Environment for Smart Contracts.]().

### 2020

[security] [How effective are smart contract analysis tools? evaluating smart contract static analysis tools using bug injection](https://dl.acm.org/doi/abs/10.1145/3395363.3397385).

[security] [Echidna: effective, usable, and fast fuzzing for smart contracts](https://dl.acm.org/doi/abs/10.1145/3395363.3404366).

[security] [EShield: protect smart contracts against reverse engineering](https://dl.acm.org/doi/pdf/10.1145/3395363.3404365).

### 2019

[security] [SAFEVM: a safety verifier for Ethereum smart contracts](https://dl.acm.org/doi/pdf/10.1145/3293882.3338999).

[security] [Exploiting the laws of order in smart contracts](https://dl.acm.org/doi/pdf/10.1145/3293882.3330560).

---

## ASE

### 2023

[security] [DeFiWarder: Protecting DeFi Apps from Token Leaking Vulnerabilities]() | **[MyTLDR](TLDR.md#23_9_6)**.

[security] [SmartCoCo: Checking Comment-code Inconsistency in Smart Contracts via Constraint Propagation and Binding]().

### 2022

[security] [A Unified Specification Mining Framework for Smart Contracts]().

[security] [InvCon: A Dynamic Invariant Detector for Ethereum Smart Contracts]().

[security] [Learning Contract Invariants Using Reinforcement Learning](https://www.cs.utexas.edu/~isil/cider.pdf).

[security] [Effectively Generating Vulnerable Transaction Sequences in Smart Contracts with Reinforcement Learning-guided Fuzzing](https://dl.acm.org/doi/pdf/10.1145/3551349.3560429).

[security] [Reentrancy Vulnerability Detection and Localization: A Deep Learning Based Two-phase Approach](https://dl.acm.org/doi/abs/10.1145/3551349.3560428).

[security] [Identifying Solidity Smart Contract API Documentation Errors](https://personal.ntu.edu.sg/yi_li/files/Zhu2022ISS.pdf).

[security] [Xscope: Hunting for Cross-Chain Bridge Attacks](https://arxiv.org/pdf/2208.07119.pdf)

[secutiry] [Property-Based Automated Repair of DeFi Protocols](https://personal.ntu.edu.sg/yi_li/files/Tolmach2022PBA.pdf)

[security] [Towards Effective Static Analysis Approaches for Security Vulnerabilities in Smart Contracts](https://dl.acm.org/doi/abs/10.1145/3551349.3559567)

### 2021

[security] [GASOL: Gas Analysis and Optimization for Ethereum Smart Contracts](https://arxiv.org/pdf/1912.11929.pdf).

[security] [Automating User Notice Generation for Smart Contract Functions](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9678552).

[security] [Characterizing Transaction-Reverting Statements in Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9678597).

[security] [SMARTIAN: Enhancing Smart Contract Fuzzing with Static and Dynamic Analyses](https://ieeexplore.ieee.org/document/9678888).

[security] [SigRec: Automatic Recovery of Function Signatures in Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9426396).

### 2020

[security] [Cross-Contract Static Analysis for Detecting Practical Reentrancy Vulnerabilities in Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9286095).

[security] [Demystifying Loops in Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3324884.3416626).

[security] [Summary-Based Symbolic Evaluation for Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9286081).

[security] [Finding Ethereum Smart Contracts Security Issues by Comparing History Versions](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9286004).

### 2019

[security] [Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8952204).

[security] [MuSC: A Tool for Mutation Testing of Ethereum Smart Contract](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8952206).

[security] [Securing Smart Contracts in Blockchain](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8967424).

### 2018

[security] [ContractFuzzer: Fuzzing Smart Contracts for Vulnerability](https://dl.acm.org/doi/pdf/10.1145/3238147.3238177).

[security] [S-gram: towards semantic-aware security auditing for Ethereum smart contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9000031).

---

## ICSE

### 2024

[security] [SCVHunter: Smart Contract Vulnerability Detection Based on Heterogeneous Graph Attention Network]().

[security] [Stop Pulling my Rug: Exposing Rug Pull Risks in Crypto Token to Investors]().

[security] [Improving Smart Contract Security with Contrastive Learning-based Vulnerability Detection]().

[security] [Towards Finding Accounting Errors in Smart Contracts]().

[security] [Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers]().

[security] [PrettySmart: Detecting Permission Re-delegation Vulnerability for Token Behaviors in Smart Contracts]().

[security] [When Contracts Meets Crypto: Exploring Developers' Struggleswith Ethereum Cryptographic APIs]()

[security] [PonziGuard: Detecting Ponzi Schemes on Ethereum with Contract Runtime Behavior Graph (CRBG)]().

[security] [Revealing Hidden Threats: An Empirical Study of Library Misuse in Smart Contracts]() | [MyTLDR](TLDR.md#23_11_11).

[security] [Uncover the Premeditated Attacks: Detecting Exploitable Reentrancy Vulnerabilities by Identifying Attacker Contracts]().

[security] [Smart Contract and DeFi Security Tools: Do They Meet the Needs of Practitioners?]().

[security] [Safeguarding DeFi Smart Contracts against Oracle Deviations]().

[security] [Verifying Declarative Smart Contracts]().

[security] [GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis](https://arxiv.org/abs/2308.03314) | | **[MyTLDR](TLDR.md#24_2_5)**.

### 2023

[security] [SmartMark: Software Watermarking Scheme for Smart Contracts](https://arxiv.org/pdf/2303.13733).

[security] [AChecker: Statically Detecting Smart Contract Access Control Vulnerabilities](https://people.ece.ubc.ca/~mjulia/publications/ACheckerICSE2023.pdf) | **[MyTLDR](TLDR.md#23_9_14)**.

[security] [BSHUNTER: Detecting and Tracing Defects of Bitcoin Scripts](https://zhengpeilin.com/research/BSHunter.pdf).

[security] [Demystifying Exploitable Bugs in Smart Contracts](https://www.cs.purdue.edu/homes/zhan3299/res/ICSE23.pdf).

[security] [Turn the Rudder: A Beacon of Reentrancy Detection for Smart Contracts on Ethereum](https://arxiv.org/pdf/2303.13770)

### 2022

[security] [Utilizing Parallelism in Smart Contracts on Decentralized Blockchains by Taming Application-Inherent Conflicts](https://dl.acm.org/doi/pdf/10.1145/3510003.3510086).

### 2021

[security] [Smart Contract Security: a Practitioners’ Perspective](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9402082).

### 2020

[security] [Empirical Review of Automated Analysis Tools on 47,587 Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9284023).

[security] [sFuzz-An Efficient Adaptive Fuzzer for Solidity Smart Contracts](https://arxiv.org/pdf/2004.08563.pdf).

[security] [Smart Contract Development: Challenges and Opportunities](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8847638).

[security] [Targeted Greybox Fuzzing with Static Lookahead Analysis](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9284040).

[security] [Gap between Theory and Practice : An Empirical Study of Security Patches in Solidity](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9283944).

[security] [Seraph: Enabling Cross-Platform Security Analysis For EVM and WASM Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=9270363).

### 2019

[security] [Gigahorse: Thorough, Declarative Decompilation of Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8811905).

[security] [VULTRON: Catching Vulnerable Smart Contracts Once and for All](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8805696).

### 2018

[security] [ReGuard: Finding Reentrancy Bugs in Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8805696).

---

## SOSP

### 2021

[security] [Forerunner: Constraint-based Speculative Transaction Execution for Ethereum](https://www.microsoft.com/en-us/research/uploads/prod/2021/09/3477132.3483564.pdf) | **[MyTLDR](TLDR.md#23_11_9)**.

### 2017

[application] [Algorand: Scaling Byzantine Agreements for Cryptocurrencies](https://pdfs.semanticscholar.org/52eb/be753328f3139cbf9dfba7b8d3c78654b561.pdf).

------

## OSDI

### 2023

[performance] [LVMT: An Efficient Authenticated Storage for Blockchain](https://www.usenix.org/system/files/osdi23-li-chenxing.pdf).

### 2021

[security] [Finding Consensus Bugs in Ethereum via Multi-transaction Differential Fuzzing](https://www.usenix.org/system/files/osdi21-yang.pdf).

---

## INFOCOM

### 2024

[security] [ConFuzz: Towards Large Scale Fuzz Testing of Smart Contracts in Ethereum]().

### 2023

[security] [Latency-First Smart Contract: Overclock the Blockchain for a while]().

[security] [A Decentralized Truth Discovery Approach to the Blockchain Oracle Problem]().

### 2022

[application] [S-Store: A Scalable Data Store towards Permissioned Blockchain Sharding](https://ieeexplore.ieee.org/document/9796800/).

### 2021

[security] [Code is the (F)Law: Demystifying and Mitigating Blockchain Inconsistency Attacks Caused by Software Bugs]().

[application] [Counter-Collusion Smart Contracts for Watchtowers in Payment Channel Networks](https://ieeexplore.ieee.org/iel7/9488422/9488423/09488831.pdf).

[mine] [Characterizing Ethereum's Mining Power Decentralization at a Deeper Level](https://www.microsoft.com/en-us/research/uploads/prod/2021/02/infocom-camready.pdf).

### 2020

[application] [ET-DeaL: A P2P Smart Contract-based Secure Energy Trading Scheme for Smart Grid Systems]().

[application] [A Solution for State Conflicts of Smart Contract in Interaction with Non-blockchain]().

[application] [ChainIDE 2.0: Facilitating Smart Contract Development for Consortium Blockchain](https://mypage.cuhk.edu.cn/academics/caiwei/paper/papers/WuQZMC2020.pdf).

[application] [EncELC: Hardening and Enriching Ethereum Light Clients with Trusted Enclaves]().

### 2019

[application] [Interledger Smart Contracts for Decentralized Authorization to Constrained Things](https://arxiv.org/pdf/1905.01671).

### 2018

[graph analysis] [Understanding ethereum via graph analysis](https://www4.comp.polyu.edu.hk/~csxluo/EthereumGraphAnalysis.pdf).

------

## WWW

### 2024

[Finance] [Interface Illusions: Uncovering the Rise of Visual Scams in Cryptocurrency Wallets]().

[Finance] [DenseFlow: Spotting Cryptocurrency Money Laundering in Ethereum Transaction Graphs]().

### 2023

[Finance] [Ready, Aim, Snipe! Analysis of Sniper Bots and their Impact on the DeFi Ecosystem](https://dl.acm.org/doi/pdf/10.1145/3543873.3587612).

[Finance] [On How Zero-Knowledge Proof Blockchain Mixers Improve, and Worsen User Privacy](https://arxiv.org/abs/2201.09035).

[Finance] [Know Your Transactions: Real-time and Generic Transaction Semantic Representation on Blockchain & Web3 Ecosystem](https://github.com/wuzhy1ng/MoTS/blob/master/MoTS_WWW_2023_manuscript.pdf) | **[MyTLDR](TLDR.md#23_9_10)**.

[security] [BERT4ETH: A Pre-trained Transformer for Ethereum Fraud Detection](https://arxiv.org/pdf/2303.18138.pdf) | **[MyTLDR](TLDR.md#23_10_25)**.

### 2022

[Finance] [Cyclic Arbitrage in Decentralized Exchanges](https://arxiv.org/pdf/2105.02784.pdf).

[security] [TTAGN: Temporal Transaction Aggregation Graph Network for Ethereum Phishing Scams Detection](https://dl.acm.org/doi/pdf/10.1145/3442381.3450059).

### 2021

[Finance] [Towards Understanding Cryptocurrency Derivatives:A Case Study of BitMEX](https://dl.acm.org/doi/pdf/10.1145/3442381.3450059).

[graph analysis] [Temporal Analysis of the Entire Ethereum Blockchain Network](https://personal.ntu.edu.sg/arijit.khan/Papers/Ethereum_Blockchain_Temporal_Network.pdf).

[Finance] [Detecting and Quantifying Wash Trading on Decentralized Cryptocurrency Exchanges](https://arxiv.org/pdf/2102.07001.pdf).

[application] [Towards understanding and demystifying bitcoin mixing services](https://dl.acm.org/doi/pdf/10.1145/3442381.3449880).

### 2020

[graph analysis] [Measurements, Analyses, and Insights on the Entire Ethereum Blockchain Network](https://dl.acm.org/doi/fullHtml/10.1145/3366423.3380103).

[graph analysis] [Traveling the token world: A graph analysis of Ethereum ERC20 token ecosystem](https://dl.acm.org/doi/fullHtml/10.1145/3366423.3380103).

------

## DSN

### 2020

[security] [SMACS: Smart Contract Access Control Service](https://arxiv.org/abs/2003.07495).

[security] [Data-Driven Model-Based Analysis of the Ethereum Verifier's Dilemma](https://arxiv.org/pdf/2004.12768.pdf).

[security] [Smart Contracts on the Move](https://arxiv.org/pdf/2004.05933.pdf).

[mine] [Impact of Geo-Distribution and Mining Pools on Blockchains: A Study of Ethereum](https://arxiv.org/pdf/2004.05933.pdf).

### 2019

[application] [FabZK: Supporting Privacy-Preserving, Auditable Smart Contracts in Hyperledger Fabric](http://dance.csc.ncsu.edu/papers/DSN19.pdf).

### 2018

[security] [Towards Model-Driven Engineering of Smart Contracts for Cyber-Physical Systems](https://ieeexplore.ieee.org/iel7/8415929/8416185/08416237.pdf).

------

## PLDI

### 2023

[security] [Automated Detection of Under-constrained Circuits in Zero-Knowledge Proofs](https://dl.acm.org/doi/pdf/10.1145/3591282) | **[MyTLDR](TLDR.md#23_10_1)**.

### 2021

[security] [Practical Smart Contract Sharding with Ownership and Commutativity Analysis](https://dl.acm.org/doi/pdf/10.1145/3453483.3454112).

### 2020

[security] [Behavioral Simulation for Smart Contracts](https://hal.archives-ouvertes.fr/hal-03597598/document).

[security] [Ethainter: A Smart Contract Security Analyzer for Composite Vulnerabilities](https://www.nevillegrech.com/assets/pdf/ethainter-pldi.pdf).

[security] [Securing Smart Contract with Runtime Validation](https://arxiv.org/pdf/1911.12555.pdf).

------

## ESORICS

### 2023

[security] [n-MVTL Attack: Optimal Transaction Reordering Attack on DeFi]().

[security] [When is Slower Block Propagation More Profitable for Large Miners?]().

### 2020

[security] [PrivacyGuard: Enforcing Private Data Usage Control with Blockchain and Off-chain Contract Execution](https://arxiv.org/abs/2003.06552).

### 2019

[security] [Practical Mutation Testing for Smart Contracts](https://arxiv.org/abs/2003.06552).

[application] [PDFS: Practical Data Feed Service for Smart Contracts](https://arxiv.org/abs/2003.06552).

[security] [The Operational Cost of Ethereum Airdrops]().

[security] [Annotary: A Concolic Execution System for Developing Secure Smart Contracts]().

[security] [An Efficient Micropayment Channel on Ethereum]().

[security] [A Minimal Core Calculus for Solidity Contracts]().

### 2018

[security] [Succinctly Verifiable Sealed-Bid Auction Smart Contract]().

### 2017

[security] [In Code We Trust? - Measuring the Control Flow Immutability of All Smart Contracts Deployed on Ethereum]().

------

## SANER

### 2023

[security] [An Empirical Study of Smart Contract Decompilers]().

[security] [Automatic Identification of Crash-inducing Smart Contracts]().

[security] [Security Code Recommendations for Smart Contract]().

[security] [Combine sliced joint graph with graph neural networks for smart contract vulnerability detection]().

### 2022

[security] [When They Go Low: Automated Replacement of Low-level Functions in Ethereum Smart Contracts]().

[security] [A Bytecode-based Approach for Smart Contract Classification]().

[security] [A Tool to check the Ownership of Solana's Smart Contracts]().

[security] [On the use of Petri Nets in Smart Contracts modeling, generation and verification]().

[security] [Analysis Of The Relationship Between Smart Contracts' Categories and Vulnerabilities]().

[security] [Goal and Policy Based Code Generation and Deployment of Smart Contracts]().

### 2021

[security] [Understanding Code Reuse in Smart Contracts]().

### 2020

[security] [SMARTSHIELD: Automatic Smart Contract Protection Made Easy]().

[security] [EthPloit: From Fuzzing to Efficient Exploit Generation against Smart Contracts]().

### 2019

[security] [Towards Generating Cost-Effective Test-Suite for Ethereum Smart Contract]().

[security] [EVM*: From Offline Detection to Online Reinforcement for Ethereum Virtual Machine]().

### 2018

[security] [SmartInspect: solidity smart contract inspector]().

[security] [Smart contracts vulnerabilities: a call for blockchain software engineering?]().

[security] [The ICO phenomenon and its relationships with ethereum smart contract environment]().

[security] [Smart contracts: security patterns in the ethereum ecosystem and solidity]().

### 2017

[application] [Under-optimized smart contracts devour your money](https://www4.comp.polyu.edu.hk/~csxluo/Gasper.pdf).

------

## OOPSLA

### 2023

[security] [Asparagus: Automated Synthesis of Parametric Gas Upper-bounds for Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3563308) | **[MyTLDR](TLDR.md#23_9_26)**.

### 2022

[security] [Synthesis-powered optimization of smart contracts via data type refactoring](https://dl.acm.org/doi/pdf/10.1145/3563308) | **[MyTLDR](TLDR.md#23_9_27)**.

[security] [Elipmoc: Advanced Decompilation of Ethereum Smart Contracts](https://yanniss.github.io/elipmoc-oopsla22.pdf).

[security] [A Study of Inline Assembly in Solidity Smart Contracts]().

[security] [SigVM: Enabling Event-Driven Execution for Truly Decentralized Smart Contracts]().

### 2021

[security] [Symbolic Value-Flow Static Analysis: Deep, Precise, Complete Modeling of Ethereum Smart Contracts](https://dl.acm.org/doi/10.1145/3485540).

[security] [Rich Specifications for Ethereum Smart Contract Verification](https://dl.acm.org/doi/10.1145/3485523).

[security] [Pluto: Exposing Vulnerabilities in Inter-Contract Scenarios](https://ieeexplore.ieee.org/abstract/document/9562567).

### 2020

[security] [Precise Static Modelling of Ethereum "Memory"](https://dl.acm.org/doi/pdf/10.1145/3428258).

[security] [Taming Callbacks for Smart Contract Modularity]().

### 2019

[security] [Detecting Nondeterministic Payment Bugs in Ethereum Smart Contracts](https://dl.acm.org/doi/10.1145/3360615).

[security] [Safer Smart Contract Programming with Scilla](https://ilyasergey.net/papers/scilla-oopsla19.pdf).

### 2018

[security] [MadMax: surviving out-of-gas conditions in Ethereum smart contracts]().

------

## IMC

### 2023

[security] [Ethereum's Proposer-Builder Separation: Promises and Realities](https://arxiv.org/pdf/2305.19037.pdf) | **[MyTLDR](TLDR.md#23_11_15)**.

[security] [The Cloud Strikes Back: Investigating the Decentralization of IPFS](https://dl.acm.org/doi/abs/10.1145/3618257.3624797).

### 2022

[security] [A flash(bot) in the pan: measuring maximal extractable value in private pools](https://dl.acm.org/doi/abs/10.1145/3517745.3561448).

[security] [Challenges in decentralized name management: the case of ENS](https://dl.acm.org/doi/abs/10.1145/3517745.3561469).

### 2021

[security] [TopoShot: uncovering Ethereum's network topology leveraging replacement transactions](https://dl.acm.org/doi/abs/10.1145/3487552.3487814).

### 2018

[measure] [Measuring ethereum network peers](https://dl.acm.org/doi/pdf/10.1145/3278532.3278542) | **[MyTLDR](TLDR.md#23_11_2)**.

[security] [analyzing ethereum's contract topology](https://dl.acm.org/doi/pdf/10.1145/3278532.3278575).

------

## SIGMETRICS

### 2024

[security] [Miracle or Mirage? A Measurement Study of NFT Rug Pulls](https://dl.acm.org/doi/pdf/10.1145/3626782)

### 2023

[performance] [Strategic Latency Reduction in Blockchain Peer-to-Peer Networks](https://arxiv.org/abs/2205.06837) | **[MyTLDR](TLDR.md#23_10_26)**.

[security] [Characterizing Cryptocurrency-themed Malicious Browser Extensions]().

### 2022

[performance] [Tuxedo: Maximizing Smart Contract computation in PoW Blockchains]().

[security] [Trade or Trick? Detecting and Characterizing Scam Tokens on Uniswap Decentralized Exchange](https://dl.acm.org/doi/pdf/10.1145/3491051).

### 2021

[SIGMETRICS2021] [Tracking Counterfeit Cryptocurrency End-to-end](https://research.polyu.edu.hk/en/publications/tracking-counterfeit-cryptocurrency-end-to-end).

[SIGMETRICS2021] [SADPonzi: Detecting and Characterizing Ponzi Schemes in Ethereum Smart Contracts](https://www4.comp.polyu.edu.hk/~csxluo/SADPonzi.pdf) | **[MyTLDR](TLDR.md#24_3_6)**.

### 2018

[SIGMETRICS2020] [Understanding (Mis)Behavior on the EOSIO Blockchain]().

------

## ACSAC

### 2021

[security] [SolSaviour: A Defending Framework for Deployed Defective Smart Contracts](https://www4.comp.polyu.edu.hk/~csbxiao/paper/2021/acsac21_SolSavioiur.pdf).

### 2019

[security] [SmarTor: Smarter Tor with Smart Contracts](https://www.informatik.uni-wuerzburg.de/didaktik/team/andre-greubel/?tx_extbibsonomycsl_publicationlist).

### 2018

[security] [Finding The Greedy, Prodigal, and Suicidal Contracts at Scale](https://arxiv.org/abs/1802.06038).

[security] [Osiris: Hunting for Integer Bugs in Ethereum Smart Contracts]().

------

## APSEC

### 2020

[security] [Source Code Obfuscation for Smart Contracts](https://ieeexplore.ieee.org/document/9359296).

### 2019

[security] [SIF: A Framework for Solidity Contract Instrumentation and Analysis](https://arxiv.org/pdf/1905.01659.pdf).

[security] [SolAnalyser: A Framework for Analysing and Testing Smart Contracts]().

### 2018

[security] [Fuse: An Architecture for Smart Contract Fuzz Testing Service](https://dl.acm.org/doi/pdf/10.1145/3571847).

------

## RAID

### 2022

[security] [Penny Wise and Pound Foolish: Quantifying the Risk of Unlimited Approval of ERC20 Tokens on Ethereum](https://arxiv.org/pdf/2207.01790.pdf) | **[MyTLDR](TLDR.md#23_9_1)**.

[security] [Elysium: Context-Aware Bytecode-Level Patching to Automatically Heal Vulnerable Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3545948.3545975)

### 2019

[security] [Towards a first step to understand the cryptocurrency stealing attack on ethereum](https://www.usenix.org/system/files/raid2019-cheng.pdf).

------

## ICDCS

### 2023

[security] [Detecting Flash Loan Based Attacks in Ethereum]()

[security] [Towards Decentralized Adaptive Control of Cryptocurrency Liquidity via Auction]().

[applicaton] [A Game of NFTs: Characterizing NFT Wash Trading in the Ethereum Blockchain](https://massimolamorgia.com/assets/pdf/NFT_Wash_Trading___ICDCS2023.pdf).

[security] [Smart Contract Parallel Execution with Fine-Grained State Accesses](https://personal.ntu.edu.sg/yi_li/files/Qi2023SCP.pdf) | **[MyTLDR](TLDR.md#23_9_19)**.

### 2022

[Application] [Blockchain Machine: A Network-Attached Hardware Accelerator for Hyperledger Fabric](https://arxiv.org/pdf/2104.06968).

### 2020

[security] [Fair and Efficient Gossip in Hyperledger Fabri](https://dial.uclouvain.be/pr/boreal/object/boreal%3A229465/datastream/PDF_01/view).

[security] [TinyEVM: Off-Chain Smart Contracts on Low-Power IoT Devices](https://www.ds.informatik.uni-kiel.de/en/publications/papers/2020-07-ICDCS-Profentzas-TinyEVM.pdf).

### 2019

[security] [DataEther: Data Exploration Framework For Ethereum](https://www.cs.rice.edu/~angchen/papers/icdcs-2019.pdf).

[security] [Read-Uncommitted Transactions for Smart Contract Performance](https://arxiv.org/pdf/1905.12351.pdf).

### 2018

[security] [MPCSToken: Smart Contract Enabled Fault-Tolerant Incentivisation for Mobile P2P Crowd Services]().

------

## POPL

### 2022

[security] [SolType: Refinement Types for Arithmetic Overflow in Solidity](https://dl.acm.org/doi/abs/10.1145/3498665).

------

### 2018

[security] [Online detection of effectively callback free objects with applications to smart contracts](https://dl.acm.org/doi/pdf/10.1145/3158136).

[security] [Vandal: A Scalable Security Analysis Framework for Smart Contracts](https://arxiv.org/abs/1809.03981).

---

# Journal

------

## TOSEM

[TOSEM] [TokenAware: Accurate and Efficient Bookkeeping Recognition for Token Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3560263).

[TOSEM] [CLFuzz: Vulnerability Detection of Cryptographic Algorithm Implementation via Semantic-Aware Fuzzing]().

[TOSEM] [sGuard+: Machine Learning Guided Rule-based AutomatedVulnerability Repair on Smart Contracts.](https://dl.acm.org/doi/pdf/10.1145/3641846).

[TOSEM] [Is my transaction done yet? an empirical study of transaction processing times in the ethereum blockchain platform](https://dl.acm.org/doi/pdf/10.1145/3549542?).

[TOSEM] [Securing the Ethereum from Smart Ponzi Schemes: Identification Using Static Features](https://dl.acm.org/doi/pdf/10.1145/3571847).

[TOSEM] [TSecuring the Ethereum from Smart Ponzi Schemes: Identification Using Static Features](https://dl.acm.org/doi/pdf/10.1145/3560263).

[TOSEM] [Pied-Piper: Revealing the Backdoor Threats in Ethereum ERC Token Contracts](https://dl.acm.org/doi/pdf/10.1145/3560264).

[TOSEM] [Time-travel Investigation: Toward Building a Scalable Attack Detection Framework on Ethereum](https://arxiv.org/pdf/2005.08278.pdf).

[TOSEM] [Developing Cost-Effective Blockchain-Powered Applications: A Case Study of the Gas Usage of Smart Contract Transactions in the Ethereum Blockchain Platform](https://dl.acm.org/doi/pdf/10.1145/3431726).

[TOSEM] [Why Do Smart Contracts Self-Destruct? Investigating the Selfdestruct Function on Ethereum]().

## TSE

[TSE23] [Combatting Front-Running in Smart Contracts: Attack Mining, Benchmark Construction and Vulnerability Detector Evaluation]()

[TSE] [VulHunter: Hunting Vulnerable Smart Contracts at EVM Bytecode-Level via Multiple Instance Learning]().

[TSE] [Large-Scale Empirical Study of Inline Assembly on 7.6 Million Ethereum Smart Contracts](https://drive.google.com/file/d/111l8_vf7Gt7RxygjuBM8WQWLTQL700jY/view?pli=1).

[TSE] [Demystifying Random Number in Ethereum Smart Contract: Taxonomy, Vulnerability Identification, and Attack Detection](https://arxiv.org/pdf/2304.12645.pdf)

[TSE] [DEFECTCHECKER: Automated Smart Contract Defect Detection by Analyzing EVM Bytecode](https://arxiv.org/pdf/2009.02663).

[TSE] [Checking smart contracts with structural code embedding](https://xin-xia.github.io/publication/tse201.pdf).

[TSE] [Code Cloning in Smart Contracts on the Ethereum Platform: An Extended Replication Study](https://arxiv.org/pdf/2005.08278.pdf).

[TSE] [Defining smart contract defects on ethereum](https://arxiv.org/pdf/1905.01467).

[TSE] [Pluto: Exposing Vulnerabilities in Inter-Contract Scenarios](http://www.wingtecher.com/themes/WingTecherResearch/assets/papers/tse21.pdf).

## TIFS

[TIFS23] [Combatting Front-Running in Smart Contracts: Attack Mining, Benchmark Construction and Vulnerability Detector Evaluation]().

[TIFS23] [Fishing for Fraudsters: Uncovering Ethereum Phishing Gangs With Blockchain Data]().

[TIFS23] [Rethinking Smart Contract Fuzzing: Fuzzing With Invocation Ordering and Important Branch Revisiting](https://arxiv.org/pdf/2301.03943.pdf).

[TIFS23] [EVM-Shield: In-Contract State Access Control for Fast Vulnerability Detection and Prevention]().

[TIFS23] [Towards Understanding Asset Flows in Crypto Money Laundering Through the Lenses of Ethereum Heists]().

[TIFS23] [sChain: An Efficient and Secure Solution for Improving Blockchain Storage]().

[TIFS23] [Breaking the Anonymity of Ethereum Mixing Services Using Graph Feature Learning]().

[TIFS22] [Behavior-aware Account De-anonymization on Ethereum Interaction Graph](https://arxiv.org/pdf/2203.09360.pdf).

[TIFS22] [TxT: Real-Time Transaction Encapsulation for Ethereum Smart Contracts](https://arxiv.org/pdf/2301.08806.pdf).

[TIFS21] [Hunting Vulnerable Smart Contracts via Graph Embedding Based Bytecode Matching]().

[TIFS22] [Rethinking Smart Contract Fuzzing: Fuzzing With Invocation Ordering and Important Branch Revisiting]().

## TDSC

[TDSC] [DeFiRanger: Detecting DeFi Price Manipulation Attacks]().

[TDSC] [Highly Available Blockchain Nodes With N-Version Design](http://arxiv.org/pdf/2303.14438).

[TDSC] [Correct-by-Design Interacting Smart Contracts and a Systematic Approach for Verifying ERC20 and ERC721 Contracts With VeriSolid]().

[TDSC] [Oracle-Supported Dynamic Exploit Generation for Smart Contracts]().

[TDSC] [Obfuscating verifiable Random Functions for Proof-of-Stake Blockchains]().

[TDSC] [Correct-by-Design Interacting Smart Contracts and a Systematic Approach for Verifying ERC20 and ERC721 Contracts With VeriSolid]().

## Miscellaneous

[arxiv] [Large Language Models for Blockchain Security: A Systematic Literature Review](https://arxiv.org/pdf/2403.14280.pdf).

[TKDE24] [Unravelling Token Ecosystem of EOSIO Blockchain](https://arxiv.org/abs/2202.11201).

[WINE2023] [Routing MEV in Constant Function Market Makers]().

[TCAD 2023] [A Semantic-Integrated LSM-Tree Based Key-Value Storage Engine for Blockchain Systems]().

[FAST23] [COLE: A Column-based Learned Storage for Blockchain Systems](papers/fast23_cole.pdf).

[ISCA23] [An Algorithm and Architecture Co-design for Accelerating Smart Contracts in Blockchain](https://dl.acm.org/doi/pdf/10.1145/3579371.3589067).

[SODA23] [Foundations of Transaction Fee Mechanism Design](https://eprint.iacr.org/2021/1474.pdf).

[IEEE Computer] [The Multibillion Dollar Software Supply Chain of Ethereum](http://arxiv.org/pdf/2202.07029).

[ACM DTL] [Chaos Engineering of Ethereum Blockchain Clients In ACM Distributed Ledger Technologies: Research and Practice](http://oadoi.org/10.1145/3611649).

[SIGKDD23] [Demystifying Fraudulent Transactions and Illicit Nodes in the Bitcoin Network for Financial Forensics](https://dl.acm.org/doi/pdf/10.1145/3580305.3599351).

[SIGKDD23] [Diga: Guided Diffusion Model for Graph Recovery in Anti-Money Laundering](https://dl.acm.org/doi/pdf/10.1145/3580305.3599806).

[ICDE23] [Scaling Blockchain Consensus via a Robust Shared Mempool]().

[SC23] [FISCO-BCOS: An Enterprise-grade Permissioned Blockchain System with High-performance]().

[Usenix ATC22] [An Off-The-Chain Execution Environment for Scalable Testing and Profiling of Smart Contracts](https://www.usenix.org/system/files/atc21-kim-yeonsoo.pdf).

[Usenix ATC21] [RainBlock: Faster Transaction Processing in Public Blockchains](https://www.usenix.org/system/files/atc21-ponnapalli.pdf).

[EORUSYS23] [Diablo: A Benchmark Suite for Blockchains](https://6788543.fs1.hubspotusercontent-na1.net/hubfs/6788543/Eurosys23-Diablo.pdf) | **[MyTLDR](TLDR.md#23_9_29)**.

[EORUSYS21] [Ethanos: efficient bootstrapping for full nodes on account-based blockchain](https://dl.acm.org/doi/pdf/10.1145/3447786.3456231).

[EORUSYS18] [Hyperledger fabric: a distributed operating system for permissioned blockchains](https://dl.acm.org/doi/pdf/10.1145/3190508.3190538).

[JSAC22] [Detecting Arbitrage on Ethereum Through Feature Fusion and Positive-Unlabeled Learning]().

[TPDS] [SmartVM: A Smart Contract Virtual Machine for Fast On-Chain DNN Computations]().

[CHI23] [Code Will Tell: Visual Identification of Ponzi Schemes on Ethereum](https://dl.acm.org/doi/pdf/10.1145/3544549.3585861).

[CHI22] [Impact and User Perception of Sandwich Attacks in the DeFi Ecosystem](https://dl.acm.org/doi/pdf/10.1145/3491102.3517585).

[CHI21] [Efect of the Gas Price Surges on User Activity in the DAOs of the Ethereum Blockchain](https://dl.acm.org/doi/pdf/10.1145/3411763.3451755).

[POMACS2021] [Trade or Trick? Detecting and Characterizing Scam Tokens on Uniswap Decentralized Exchange](https://arxiv.org/pdf/2109.00229.pdf).

[HPCA20] [BBS: Micro-Architecture Benchmarking Blockchain Systems through Machine Learning and Fuzzy Set]().

[VLDB23] [ChainDash: An Ad-Hoc Blockchain Data Analytics System](https://dl.acm.org/doi/pdf/10.1145/3491102.3517585).

[VLDB23] [Auto-Tuning with Reinforcement Learning for Permissioned Blockchain Systems](https://www.vldb.org/pvldb/vol16/p1000-li.pdf).

[VLDB22] [Hybrid Blockchain Database Systems: Design and Performance](https://dl.acm.org/doi/pdf/10.14778/3510397.3510406).

[AsiaCCS22] [Eliminating Sandwich Attacks with the Help of Game Theory](https://dl.acm.org/doi/pdf/10.1145/3488932.3517390).

[TC21] [Precise Dynamic Symbolic Execution for Nonuniform Data Access in Smart Contracts](https://rucsesec.github.io/papers/TC2021b.pdf).

[sigmod23] [ChainKV: A Semantics-Aware Key-Value Store for Ethereum System]().

[sigmod21] [Why Do My Blockchain Transactions Fail? A Study of Hyperledger Fabric]().

[ICPC] [A multi-modal transformer-based code summarization approach for smart contracts](https://arxiv.org/pdf/2103.07164).

[ICPC 2022] [An Empirical Investigation on the Trade-off between Smart Contract Readability and Gas Consumption]().

[ICPC 2022] [Peculiar: Smart Contract Vulnerability Detection Based on Crucial Data Flow Graph and Pre-training Techniques]().

[ICPC 2020] [Inheritance software metrics on smart contracts]().

[ICPC 2019] [Recommending Differentiated Code to Support Smart Contract Update]().

[ICPC 2019] [Enabling clone detection for ethereum via smart contract birthmarks]().

[WETSEB 2018] [SmartCheck: Static Analysis of Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8445052).

[EDCC 2018] [Runtime Verification of Ethereum Smart Contracts](https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8530777).

[ICSCA 2018] [Formal Modeling and Verification of Smart Contracts](https://dl.acm.org/doi/pdf/10.1145/3185089.3185138).

[SRDS 2020] [Protect Your Smart Contract Against Unfair Payment]().

[SRDS 2020] [TZ4Fabric: Executing Smart Contracts with ARM TrustZone (Practical Experience Report)]().

[IJCAI 2020] [Smart Contract Vulnerability Detection Using Graph Neural Networks]().

[ISSRE2019] [MPro: Combining Static and Symbolic Analysis for Scalable Testing of Smart Contract](https://arxiv.org/pdf/1911.00570.pdf).

[CPP2021] [Extracting Smart Contracts Tested and Verified in Coq]().

[SAC2022] [Model checking of vulnerabilities in smart contracts: a solidity-to-CPN approach]().

[Eurosp23] [EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation]().

[CSFW] [Kevm: A complete formal semantics of the ethereum virtual machine](http://www.t-news.cn/Floc2018/FLoC2018-pages/proceedings_paper_513.pdf).

[DAC20] [BPU: A blockchain processing unit for accelerated smart contract execution](https://www.ece.lsu.edu/lpeng/papers/DAC20.pdf).

[TOPLAS20] [Obsidian: Typestate and Assets for Safer Blockchain Programming](https://dl.acm.org/doi/pdf/10.1145/3417516).

## License

[![CC0](http://mirrors.creativecommons.org/presskit/buttons/88x31/svg/cc-zero.svg)](https://creativecommons.org/publicdomain/zero/1.0/)

This list is released into the public domain.