{"id":"https://openalex.org/W4417025964","doi":"https://doi.org/10.1007/s10664-025-10780-5","title":"Bridging the gap: a comparative study of academic and developer approaches to smart contract vulnerabilities","display_name":"Bridging the gap: a comparative study of academic and developer approaches to smart contract vulnerabilities","publication_year":2025,"publication_date":"2025-12-05","ids":{"openalex":"https://openalex.org/W4417025964","doi":"https://doi.org/10.1007/s10664-025-10780-5"},"language":"en","primary_location":{"id":"doi:10.1007/s10664-025-10780-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10664-025-10780-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10664-025-10780-5.pdf","source":{"id":"https://openalex.org/S109852484","display_name":"Empirical Software Engineering","issn_l":"1382-3256","issn":["1382-3256","1573-7616"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10664-025-10780-5.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091987471","display_name":"Francesco Salzano","orcid":"https://orcid.org/0000-0002-1029-4861"},"institutions":[{"id":"https://openalex.org/I129627893","display_name":"University of Molise","ror":"https://ror.org/04z08z627","country_code":"IT","type":"education","lineage":["https://openalex.org/I129627893"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Francesco Salzano","raw_affiliation_strings":["University of Molise, Pesche, Italy"],"affiliations":[{"raw_affiliation_string":"University of Molise, Pesche, Italy","institution_ids":["https://openalex.org/I129627893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057548819","display_name":"Lodovica Marchesi","orcid":"https://orcid.org/0000-0002-0627-5043"},"institutions":[{"id":"https://openalex.org/I172446870","display_name":"University of Cagliari","ror":"https://ror.org/003109y17","country_code":"IT","type":"education","lineage":["https://openalex.org/I172446870"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Lodovica Marchesi","raw_affiliation_strings":["University of Cagliari, Cagliari, Italy"],"affiliations":[{"raw_affiliation_string":"University of Cagliari, Cagliari, Italy","institution_ids":["https://openalex.org/I172446870"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120054864","display_name":"Cosmo Kevin Antenucci","orcid":null},"institutions":[{"id":"https://openalex.org/I129627893","display_name":"University of Molise","ror":"https://ror.org/04z08z627","country_code":"IT","type":"education","lineage":["https://openalex.org/I129627893"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Cosmo Kevin Antenucci","raw_affiliation_strings":["University of Molise, Pesche, Italy"],"affiliations":[{"raw_affiliation_string":"University of Molise, Pesche, Italy","institution_ids":["https://openalex.org/I129627893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079406478","display_name":"Simone Scalabrino","orcid":"https://orcid.org/0000-0003-1764-9685"},"institutions":[{"id":"https://openalex.org/I129627893","display_name":"University of Molise","ror":"https://ror.org/04z08z627","country_code":"IT","type":"education","lineage":["https://openalex.org/I129627893"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Simone Scalabrino","raw_affiliation_strings":["University of Molise, Pesche, Italy"],"affiliations":[{"raw_affiliation_string":"University of Molise, Pesche, Italy","institution_ids":["https://openalex.org/I129627893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076859372","display_name":"Roberto Tonelli","orcid":"https://orcid.org/0000-0002-9090-7698"},"institutions":[{"id":"https://openalex.org/I172446870","display_name":"University of Cagliari","ror":"https://ror.org/003109y17","country_code":"IT","type":"education","lineage":["https://openalex.org/I172446870"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Roberto Tonelli","raw_affiliation_strings":["University of Cagliari, Cagliari, Italy"],"affiliations":[{"raw_affiliation_string":"University of Cagliari, Cagliari, Italy","institution_ids":["https://openalex.org/I172446870"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009727039","display_name":"Rocco Oliveto","orcid":"https://orcid.org/0000-0002-7995-8582"},"institutions":[{"id":"https://openalex.org/I129627893","display_name":"University of Molise","ror":"https://ror.org/04z08z627","country_code":"IT","type":"education","lineage":["https://openalex.org/I129627893"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Rocco Oliveto","raw_affiliation_strings":["University of Molise, Pesche, Italy"],"affiliations":[{"raw_affiliation_string":"University of Molise, Pesche, Italy","institution_ids":["https://openalex.org/I129627893"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039062411","display_name":"Remo Pareschi","orcid":"https://orcid.org/0000-0002-4912-582X"},"institutions":[{"id":"https://openalex.org/I129627893","display_name":"University of Molise","ror":"https://ror.org/04z08z627","country_code":"IT","type":"education","lineage":["https://openalex.org/I129627893"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Remo Pareschi","raw_affiliation_strings":["University of Molise, Pesche, Italy"],"affiliations":[{"raw_affiliation_string":"University of Molise, Pesche, Italy","institution_ids":["https://openalex.org/I129627893"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5091987471"],"corresponding_institution_ids":["https://openalex.org/I129627893"],"apc_list":{"value":2290,"currency":"EUR","value_usd":2890},"apc_paid":{"value":2290,"currency":"EUR","value_usd":2890},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.50431965,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"31","issue":"2","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.4196999967098236,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.4196999967098236,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.05999999865889549,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11675","display_name":"Open Source Software Innovations","score":0.05169999971985817,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/solidity","display_name":"Solidity","score":0.8410000205039978},{"id":"https://openalex.org/keywords/bridging","display_name":"Bridging (networking)","score":0.7483999729156494},{"id":"https://openalex.org/keywords/commit","display_name":"Commit","score":0.6935999989509583},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5063999891281128},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.4810999929904938},{"id":"https://openalex.org/keywords/generalizability-theory","display_name":"Generalizability theory","score":0.4072999954223633},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.3555000126361847}],"concepts":[{"id":"https://openalex.org/C2778362873","wikidata":"https://www.wikidata.org/wiki/Q24909565","display_name":"Solidity","level":2,"score":0.8410000205039978},{"id":"https://openalex.org/C174348530","wikidata":"https://www.wikidata.org/wiki/Q188635","display_name":"Bridging (networking)","level":2,"score":0.7483999729156494},{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.6935999989509583},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5123000144958496},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5063999891281128},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.4810999929904938},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4478999972343445},{"id":"https://openalex.org/C27158222","wikidata":"https://www.wikidata.org/wiki/Q5532422","display_name":"Generalizability theory","level":2,"score":0.4072999954223633},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.37119999527931213},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.3555000126361847},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3546999990940094},{"id":"https://openalex.org/C2780900520","wikidata":"https://www.wikidata.org/wiki/Q100268981","display_name":"Denial","level":2,"score":0.35260000824928284},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.34310001134872437},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3427000045776367},{"id":"https://openalex.org/C2780502288","wikidata":"https://www.wikidata.org/wiki/Q28838156","display_name":"Expansive","level":3,"score":0.34139999747276306},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.31929999589920044},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.30230000615119934},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.2948000133037567},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2831999957561493},{"id":"https://openalex.org/C110354214","wikidata":"https://www.wikidata.org/wiki/Q6314146","display_name":"Engineering management","level":1,"score":0.28220000863075256},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2768000066280365},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.27480000257492065},{"id":"https://openalex.org/C44465351","wikidata":"https://www.wikidata.org/wiki/Q215579","display_name":"Annuity","level":4,"score":0.2734000086784363},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2551000118255615}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s10664-025-10780-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10664-025-10780-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10664-025-10780-5.pdf","source":{"id":"https://openalex.org/S109852484","display_name":"Empirical Software Engineering","issn_l":"1382-3256","issn":["1382-3256","1573-7616"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2504.12443","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2504.12443","pdf_url":"https://arxiv.org/pdf/2504.12443","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1007/s10664-025-10780-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10664-025-10780-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10664-025-10780-5.pdf","source":{"id":"https://openalex.org/S109852484","display_name":"Empirical Software Engineering","issn_l":"1382-3256","issn":["1382-3256","1573-7616"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Empirical Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1857088242","display_name":null,"funder_award_id":"Mission 4","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G2023431758","display_name":null,"funder_award_id":"ECS0000038","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G2974696270","display_name":null,"funder_award_id":"Component 2","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G3018935365","display_name":null,"funder_award_id":"F53C22000430001","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G3979944027","display_name":null,"funder_award_id":"Ecosystems","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8051717526","display_name":null,"funder_award_id":"Grant","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8386731437","display_name":null,"funder_award_id":"Resilience Plan (NRRP)","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320327546","display_name":"Universit\u00e0 degli Studi del Molise","ror":"https://ror.org/04z08z627"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4417025964.pdf","grobid_xml":"https://content.openalex.org/works/W4417025964.grobid-xml"},"referenced_works_count":42,"referenced_works":["https://openalex.org/W1969344535","https://openalex.org/W2053154970","https://openalex.org/W2589660059","https://openalex.org/W2805827286","https://openalex.org/W2846896781","https://openalex.org/W2899407111","https://openalex.org/W2945217779","https://openalex.org/W2970196897","https://openalex.org/W2970809537","https://openalex.org/W2975871742","https://openalex.org/W2979376077","https://openalex.org/W2982275082","https://openalex.org/W2995076668","https://openalex.org/W3007045600","https://openalex.org/W3014792488","https://openalex.org/W3026203297","https://openalex.org/W3048559789","https://openalex.org/W3071203689","https://openalex.org/W3084421431","https://openalex.org/W3091512861","https://openalex.org/W3125989628","https://openalex.org/W3155100939","https://openalex.org/W3173543662","https://openalex.org/W4200574850","https://openalex.org/W4206679970","https://openalex.org/W4212799810","https://openalex.org/W4221106574","https://openalex.org/W4226357959","https://openalex.org/W4296338325","https://openalex.org/W4296442576","https://openalex.org/W4313547574","https://openalex.org/W4313563778","https://openalex.org/W4376606573","https://openalex.org/W4380758748","https://openalex.org/W4386699788","https://openalex.org/W4390482470","https://openalex.org/W4391558446","https://openalex.org/W4394769342","https://openalex.org/W4398212001","https://openalex.org/W4400583113","https://openalex.org/W4402442227","https://openalex.org/W4408876802"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"In":[1],"this":[2],"paper,":[3],"we":[4,129,145,186],"investigate":[5],"the":[6,23,79,124,139,165,199,203,236],"strategies":[7,30,134],"adopted":[8],"by":[9,60],"Solidity":[10,39],"developers":[11],"to":[12,69,197],"fix":[13],"security":[14],"vulnerabilities":[15,170,222],"in":[16,138,212,225],"smart":[17,226],"contracts.":[18],"Vulnerabilities":[19],"are":[20,31,223],"categorized":[21],"using":[22,54],"DASP":[24],"TOP":[25],"10":[26],"taxonomy,":[27],"and":[28,96,110,119,156,173,233,241],"fixing":[29,133],"extracted":[32],"from":[33,37,153],"364":[34],"commits":[35,80,196],"collected":[36],"open-source":[38],"projects":[40],"on":[41,192],"GitHub.":[42],"Each":[43],"commit":[44],"was":[45],"selected":[46],"through":[47],"a":[48,147,188],"two-phase":[49],"process:":[50],"an":[51],"initial":[52],"filter":[53],"natural":[55],"language":[56],"processing":[57],"techniques,":[58],"followed":[59],"manual":[61],"validation.":[62],"We":[63],"assessed":[64],"whether":[65],"these":[66],"fixes":[67],"adhere":[68],"established":[70],"academic":[71,116,239],"guidelines.":[72],"Our":[73,215],"analysis":[74,191],"shows":[75],"that":[76],"60.55%":[77],"of":[78,106,164,202],"aligned":[81],"with":[82],"at":[83],"least":[84],"one":[85],"literature-based":[86],"recommendation,":[87],"particularly":[88],"for":[89,102,169],"well-documented":[90],"vulnerability":[91],"types":[92],"such":[93],"as":[94],"Reentrancy":[95,172],"Arithmetic.":[97],"However,":[98],"adherence":[99],"dropped":[100],"significantly":[101],"categories":[103],"like":[104,171],"Denial":[105],"Service,":[107],"Time":[108],"Manipulation,":[109],"Bad":[111],"Randomness,":[112],"highlighting":[113],"gaps":[114],"between":[115,238],"best":[117],"practices":[118],"real-world":[120],"developer":[121,242],"behavior.":[122],"From":[123],"remaining":[125],"143":[126],"non-aligned":[127],"commits,":[128],"identified":[130],"27":[131],"novel":[132],"not":[135],"previously":[136],"discussed":[137],"literature.":[140],"To":[141],"evaluate":[142],"their":[143,210],"quality,":[144],"conducted":[146],"structured":[148],"questionnaire":[149],"involving":[150],"9":[151],"experts":[152],"both":[154],"academia":[155],"industry.":[157],"Their":[158],"feedback":[159],"indicated":[160],"high":[161],"perceived":[162],"effectiveness":[163],"new":[166],"fixes,":[167],"especially":[168],"Unchecked":[174],"Return":[175],"Values.":[176],"Generalizability":[177],"received":[178],"more":[179],"varied":[180],"responses,":[181],"suggesting":[182],"context-specific":[183],"applicability.":[184],"Finally,":[185],"performed":[187],"post-fix":[189],"evolution":[190],"over":[193],"6700":[194],"subsequent":[195],"assess":[198],"long-term":[200],"stability":[201],"fixes.":[204],"Most":[205],"patches":[206],"remained":[207],"unchanged,":[208],"confirming":[209],"persistence":[211],"production":[213],"code.":[214],"findings":[216],"offer":[217],"practical":[218],"insights":[219],"into":[220],"how":[221],"fixed":[224],"contracts":[227],"today,":[228],"reveal":[229],"promising":[230],"emerging":[231],"patterns,":[232],"help":[234],"bridge":[235],"gap":[237],"guidelines":[240],"practices.":[243]},"counts_by_year":[],"updated_date":"2026-04-13T07:58:08.660418","created_date":"2025-12-05T00:00:00"}