2025
DITING: A Static Analyzer for Identifying Bad Partitioning Issues in TEE Applications.
CoRR, February, 2025

Towards Secure Program Partitioning for Smart Contracts with LLM's In-Context Learning.
CoRR, February, 2025

AutoTEE: Automated Migration and Protection of Programs in Trusted Execution Environments.
CoRR, February, 2025

Smart Contract Fuzzing Towards Profitable Vulnerabilities.
CoRR, January, 2025

PropertyGPT: LLM-driven Formal Verification of Smart Contracts through Retrieval-Augmented Property Generation.
Proceedings of the 32nd Annual Network and Distributed System Security Symposium, 2025

2024
Demystifying Invariant Effectiveness for Securing Smart Contracts.
Proc. ACM Softw. Eng., 2024

Demystifying the Characteristics for Smart Contract Upgrades.
CoRR, 2024

Specification Mining for Smart Contracts with Trace Slicing and Predicate Abstraction.
CoRR, 2024

Automated Invariant Generation for Solidity Smart Contracts.
CoRR, 2024

OpenTracer: A Dynamic Transaction Trace Analyzer for Smart Contract Invariant Generation and Beyond.
Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering, 2024

DeFort: Automatic Detection and Analysis of Price Manipulation Attacks in DeFi Applications.
Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis, 2024

2023
On security and reliability of smart contracts: the applications of dynamic specification mining on solidity
PhD thesis, 2023

A Comprehensive Study of Governance Issues in Decentralized Finance Applications.
CoRR, 2023

2022
Oracle-Supported Dynamic Exploit Generation for Smart Contracts.
IEEE Trans. Dependable Secur. Comput., 2022

SolSEE: a source-level symbolic execution engine for solidity.
Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2022

InvCon: A Dynamic Invariant Detector for Ethereum Smart Contracts.
Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering, 2022

A Unified Specification Mining Framework for Smart Contracts.
Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering, 2022

Identifying Solidity Smart Contract API Documentation Errors.
Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering, 2022

Finding permission bugs in smart contracts with role mining.
Proceedings of the ISSTA '22: 31st ACM SIGSOFT International Symposium on Software Testing and Analysis, Virtual Event, South Korea, July 18, 2022

2020
ModCon: a model-based testing platform for smart contracts.
Proceedings of the ESEC/FSE '20: 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2020

Towards automated verification of smart contract fairness.
Proceedings of the ESEC/FSE '20: 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2020