{"id":"https://openalex.org/W3159819306","doi":"https://doi.org/10.1016/j.bcra.2021.100028","title":"EtherClue: Digital investigation of attacks on Ethereum smart contracts","display_name":"EtherClue: Digital investigation of attacks on Ethereum smart contracts","publication_year":2021,"publication_date":"2021-08-26","ids":{"openalex":"https://openalex.org/W3159819306","doi":"https://doi.org/10.1016/j.bcra.2021.100028","mag":"3159819306"},"language":"en","primary_location":{"id":"doi:10.1016/j.bcra.2021.100028","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.bcra.2021.100028","pdf_url":null,"source":{"id":"https://openalex.org/S4210227578","display_name":"Blockchain Research and Applications","issn_l":"2096-7209","issn":["2096-7209","2666-9536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Blockchain: Research and Applications","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1016/j.bcra.2021.100028","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Simon Joseph Aquilina","orcid":null},"institutions":[{"id":"https://openalex.org/I197854408","display_name":"University of Malta","ror":"https://ror.org/03a62bv60","country_code":"MT","type":"education","lineage":["https://openalex.org/I197854408"]}],"countries":["MT"],"is_corresponding":false,"raw_author_name":"Simon Joseph Aquilina","raw_affiliation_strings":["Department of Computer Science, University of Malta, Msida, MSD 2080, Malta"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Malta, Msida, MSD 2080, Malta","institution_ids":["https://openalex.org/I197854408"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Fran Casino","orcid":null},"institutions":[{"id":"https://openalex.org/I4210156054","display_name":"Athena Research and Innovation Center In Information Communication & Knowledge Technologies","ror":"https://ror.org/0576by029","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210156054"]},{"id":"https://openalex.org/I154757721","display_name":"University of Piraeus","ror":"https://ror.org/02qs84g94","country_code":"GR","type":"education","lineage":["https://openalex.org/I154757721"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Fran Casino","raw_affiliation_strings":["Department of Informatics, University of Piraeus, Piraeus, 18534, Greece","Information Management Systems Institute, Athena Research Center, Marousi, 15125, Greece"],"affiliations":[{"raw_affiliation_string":"Department of Informatics, University of Piraeus, Piraeus, 18534, Greece","institution_ids":["https://openalex.org/I154757721"]},{"raw_affiliation_string":"Information Management Systems Institute, Athena Research Center, Marousi, 15125, Greece","institution_ids":["https://openalex.org/I4210156054"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Mark Vella","orcid":null},"institutions":[{"id":"https://openalex.org/I197854408","display_name":"University of Malta","ror":"https://ror.org/03a62bv60","country_code":"MT","type":"education","lineage":["https://openalex.org/I197854408"]}],"countries":["MT"],"is_corresponding":true,"raw_author_name":"Mark Vella","raw_affiliation_strings":["Department of Computer Science, University of Malta, Msida, MSD 2080, Malta"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Malta, Msida, MSD 2080, Malta","institution_ids":["https://openalex.org/I197854408"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Joshua Ellul","orcid":null},"institutions":[{"id":"https://openalex.org/I197854408","display_name":"University of Malta","ror":"https://ror.org/03a62bv60","country_code":"MT","type":"education","lineage":["https://openalex.org/I197854408"]}],"countries":["MT"],"is_corresponding":false,"raw_author_name":"Joshua Ellul","raw_affiliation_strings":["Centre for Distributed Ledger Technologies, University of Malta, Msida, MSD 2080, Malta","Department of Computer Science, University of Malta, Msida, MSD 2080, Malta"],"affiliations":[{"raw_affiliation_string":"Centre for Distributed Ledger Technologies, University of Malta, Msida, MSD 2080, Malta","institution_ids":["https://openalex.org/I197854408"]},{"raw_affiliation_string":"Department of Computer Science, University of Malta, Msida, MSD 2080, Malta","institution_ids":["https://openalex.org/I197854408"]}]},{"author_position":"last","author":{"id":null,"display_name":"Constantinos Patsakis","orcid":null},"institutions":[{"id":"https://openalex.org/I154757721","display_name":"University of Piraeus","ror":"https://ror.org/02qs84g94","country_code":"GR","type":"education","lineage":["https://openalex.org/I154757721"]},{"id":"https://openalex.org/I4210156054","display_name":"Athena Research and Innovation Center In Information Communication & Knowledge Technologies","ror":"https://ror.org/0576by029","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210156054"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Constantinos Patsakis","raw_affiliation_strings":["Department of Informatics, University of Piraeus, Piraeus, 18534, Greece","Information Management Systems Institute, Athena Research Center, Marousi, 15125, Greece"],"affiliations":[{"raw_affiliation_string":"Department of Informatics, University of Piraeus, Piraeus, 18534, Greece","institution_ids":["https://openalex.org/I154757721"]},{"raw_affiliation_string":"Information Management Systems Institute, Athena Research Center, Marousi, 15125, Greece","institution_ids":["https://openalex.org/I4210156054"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I197854408"],"apc_list":{"value":1600,"currency":"USD","value_usd":1600},"apc_paid":{"value":1600,"currency":"USD","value_usd":1600},"fwci":3.1287,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.92521726,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"2","issue":"4","first_page":"100028","last_page":"100028"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.815500020980835,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.815500020980835,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.062300000339746475,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.017400000244379044,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.9003000259399414},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.603600025177002},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5382999777793884},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.531499981880188},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.4966000020503998},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4546000063419342}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.9003000259399414},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7574999928474426},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7035999894142151},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.603600025177002},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5382999777793884},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.531499981880188},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.4966000020503998},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4546000063419342},{"id":"https://openalex.org/C2779950589","wikidata":"https://www.wikidata.org/wiki/Q7544035","display_name":"Smart contract","level":3,"score":0.45170000195503235},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.31029999256134033},{"id":"https://openalex.org/C164516710","wikidata":"https://www.wikidata.org/wiki/Q1166072","display_name":"Financial transaction","level":3,"score":0.299699991941452},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28850001096725464},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1016/j.bcra.2021.100028","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.bcra.2021.100028","pdf_url":null,"source":{"id":"https://openalex.org/S4210227578","display_name":"Blockchain Research and Applications","issn_l":"2096-7209","issn":["2096-7209","2666-9536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Blockchain: Research and Applications","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2104.05293","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2104.05293","pdf_url":"https://arxiv.org/pdf/2104.05293","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1016/j.bcra.2021.100028","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.bcra.2021.100028","pdf_url":null,"source":{"id":"https://openalex.org/S4210227578","display_name":"Blockchain Research and Applications","issn_l":"2096-7209","issn":["2096-7209","2666-9536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Blockchain: Research and Applications","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2187605037","display_name":null,"funder_award_id":"832735","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W2592810580","https://openalex.org/W2909896785","https://openalex.org/W3006668450","https://openalex.org/W3034459010","https://openalex.org/W6728816433","https://openalex.org/W6736162206","https://openalex.org/W6747107735","https://openalex.org/W6749141336","https://openalex.org/W6753478366","https://openalex.org/W6755456784","https://openalex.org/W6761090449","https://openalex.org/W6763776224","https://openalex.org/W6765553029","https://openalex.org/W6766098275","https://openalex.org/W6767628051","https://openalex.org/W6779992489","https://openalex.org/W6785708386","https://openalex.org/W6793285265","https://openalex.org/W6793954727","https://openalex.org/W6799251971","https://openalex.org/W6817563333"],"related_works":[],"abstract_inverted_index":{"Programming":[0],"errors":[1],"in":[2,8,58,97,110,150],"Ethereum":[3,86,115,164],"smart":[4,123],"contracts":[5,21,31],"can":[6,18,178,205],"result":[7],"catastrophic":[9],"financial":[10],"losses":[11],"from":[12,22,191],"stolen":[13],"cryptocurrency.":[14],"While":[15],"vulnerability":[16],"detectors":[17],"prevent":[19],"vulnerable":[20,38],"being":[23],"deployed,":[24],"this":[25,76],"does":[26],"not":[27,33],"mean":[28],"that":[29,130,170],"such":[30],"will":[32],"be":[34],"deployed.":[35],"Once":[36],"a":[37,120,139,159],"contract":[39,124],"is":[40,216],"instantiated":[41],"on":[42,138],"the":[43,47,51,80,98,105,111,114,132,147,195,210],"blockchain":[44],"and":[45,66,155,189],"becomes":[46,56],"target":[48],"of":[49,53,82,85,90,107,113,135,152,176,212],"attacks,":[50],"identification":[52],"exploit":[54,180],"transactions":[55,177,181],"indispensable":[57],"assessing":[59],"whether":[60],"it":[61],"has":[62],"been":[63],"actually":[64],"exploited":[65],"identifying":[67],"which":[68,215],"malicious":[69],"or":[70],"subverted":[71],"accounts":[72],"were":[73],"involved.":[74],"In":[75],"work,":[77],"we":[78,118,142],"study":[79],"problem":[81],"post-factum":[83],"investigation":[84],"attacks":[87],"using":[88],"Indicators":[89],"Compromise":[91],"(IoC)":[92],"specially":[93],"crafted":[94],"for":[95,122,162,219],"use":[96],"blockchain.":[99,116,140],"IoC":[100],"definitions":[101],"need":[102],"to":[103],"capture":[104],"side-effects":[106],"successful":[108],"exploitation":[109],"context":[112],"Therefore,":[117],"define":[119],"model":[121],"execution,":[125],"comprising":[126],"multiple":[127,133],"abstraction":[128],"levels":[129,149],"mirror":[131],"views":[134],"code":[136],"execution":[137],"Subsequently,":[141],"compare":[143],"IoCs":[144,172,199],"defined":[145,173,200],"across":[146],"different":[148],"terms":[151],"their":[153],"effectiveness":[154],"practicality":[156],"through":[157],"EtherClue,":[158],"prototype":[160],"tool":[161],"investigating":[163],"security":[165],"incidents.":[166],"Our":[167],"results":[168],"illustrate":[169],"coarse-grained":[171],"over":[174,201],"blocks":[175],"detect":[179],"with":[182],"less":[183],"computation.":[184],"However,":[185],"they":[186],"are":[187],"contract-specific":[188],"suffer":[190],"false":[192],"negatives.":[193],"On":[194],"other":[196],"hand,":[197],"fine-grained":[198],"virtual":[202],"machine":[203],"instructions":[204],"avoid":[206],"these":[207],"pitfalls":[208],"at":[209],"expense":[211],"increased":[213],"computation,":[214],"nevertheless":[217],"applicable":[218],"practical":[220],"use.":[221]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2021-05-10T00:00:00"}