{"id":"https://openalex.org/W7125924983","doi":"https://doi.org/10.1109/ase63991.2025.00166","title":"Have We Solved Access Control Vulnerability Detection in Smart Contracts? A Benchmark Study","display_name":"Have We Solved Access Control Vulnerability Detection in Smart Contracts? A Benchmark Study","publication_year":2025,"publication_date":"2025-11-16","ids":{"openalex":"https://openalex.org/W7125924983","doi":"https://doi.org/10.1109/ase63991.2025.00166"},"language":"en","primary_location":{"id":"doi:10.1109/ase63991.2025.00166","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase63991.2025.00166","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5124117555","display_name":"Han Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Han Liu","raw_affiliation_strings":["The Hong Kong University of Science and Technology,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology,China","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124070033","display_name":"Daoyuan Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I165488957","display_name":"Lingnan University","ror":"https://ror.org/0563pg902","country_code":"HK","type":"education","lineage":["https://openalex.org/I165488957"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Daoyuan Wu","raw_affiliation_strings":["Lingnan University,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lingnan University,China","institution_ids":["https://openalex.org/I165488957"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101573905","display_name":"Yi Sun","orcid":"https://orcid.org/0000-0002-8345-5734"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yuqiang Sun","raw_affiliation_strings":["Nanyang Technological University,Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124102736","display_name":"Shuai Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Shuai Wang","raw_affiliation_strings":["The Hong Kong University of Science and Technology,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology,China","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5124104031","display_name":"Yang Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technological University,Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.9996,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.96267563,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1995","last_page":"2007"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.13050000369548798,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.13050000369548798,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.10189999639987946,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.046799998730421066,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6966999769210815},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.65420001745224},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.5425000190734863},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5335000157356262},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.4153999984264374},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.40709999203681946}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6966999769210815},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.65420001745224},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6513000130653381},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6287999749183655},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5425000190734863},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5335000157356262},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.4153999984264374},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.40709999203681946},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4050000011920929},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.3321000039577484},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.3093999922275543},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3075000047683716},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.3027999997138977},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2996000051498413},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2833000123500824},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.262800008058548},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2578999996185303},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.2554999887943268}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ase63991.2025.00166","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase63991.2025.00166","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-170374","is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-170374","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2539190473","https://openalex.org/W2805052744","https://openalex.org/W2908007588","https://openalex.org/W2963610883","https://openalex.org/W2999378142","https://openalex.org/W3026203297","https://openalex.org/W3181957689","https://openalex.org/W4226292196","https://openalex.org/W4285490412","https://openalex.org/W4384302865","https://openalex.org/W4384345844","https://openalex.org/W4391558507","https://openalex.org/W4393307116","https://openalex.org/W4394745749","https://openalex.org/W4394746135","https://openalex.org/W4394769342","https://openalex.org/W4396819965","https://openalex.org/W4412567570"],"related_works":[],"abstract_inverted_index":{"Access":[0],"control":[1],"(AC)":[2],"vulnerabilities":[3,48],"are":[4],"among":[5],"the":[6,23,30,77,133,166,181],"most":[7],"critical":[8],"security":[9],"threats":[10],"to":[11,102,179],"smart":[12],"contracts.":[13],"Despite":[14],"extensive":[15],"research,":[16],"they":[17],"remain":[18],"widespread":[19],"and":[20,28,54,75,79,94,104,118,144,161],"damaging":[21],"in":[22,34,122],"Ethereum":[24],"ecosystem.":[25],"To":[26,108],"understand":[27,109],"advance":[29],"current":[31],"state-of-the-art":[32],"(SOTA)":[33],"AC":[35,47,82,123,141,185],"vulnerability":[36,142],"detection,":[37],"we":[38,60,70,85,112,131],"first":[39],"curate":[40],"a":[41,62,72],"diverse":[42],"dataset":[43],"of":[44,81,135,150,183],"180":[45],"real-world":[46],"from":[49,92,96],"CVE":[50],"entries,":[51],"DeFiHackLabs":[52],"incidents,":[53],"Code4rena":[55],"audit":[56],"reports.Using":[57],"this":[58],"dataset,":[59],"conduct":[61],"systematic":[63],"benchmark":[64],"study":[65],"along":[66],"three":[67],"dimensions.":[68],"First,":[69],"develop":[71],"cause-based":[73],"taxonomy":[74],"analyze":[76],"prevalence":[78],"evolution":[80],"vulnerabilities.":[83,186],"Second,":[84],"evaluate":[86],"six":[87],"SOTA":[88],"tools,":[89],"including":[90],"two":[91],"industry":[93],"four":[95],"academia,":[97],"revealing":[98],"low":[99],"recall":[100],"(3%":[101],"8%)":[103],"significant":[105],"blind":[106],"spots.":[107],"these":[110],"failures,":[111],"examine":[113],"1.2":[114],"million":[115],"deployed":[116],"contracts":[117],"uncover":[119],"practical":[120],"gaps":[121],"protection":[124],"mechanisms":[125],"overlooked":[126],"by":[127],"existing":[128],"tools.":[129],"Finally,":[130],"assess":[132],"potential":[134],"large":[136],"language":[137],"models":[138],"(LLMs)":[139],"for":[140,168],"detection":[143],"show":[145],"that":[146,171],"LLMs":[147],"detect":[148],"53\u201375%":[149],"vulnerabilities,":[151],"outperforming":[152],"traditional":[153],"tools":[154],"but":[155],"facing":[156],"challenges":[157],"such":[158],"as":[159],"hallucinations":[160],"scalability.":[162],"Our":[163],"findings":[164],"highlight":[165],"need":[167],"hybrid":[169],"approaches":[170],"combine":[172],"static":[173],"analysis":[174],"with":[175],"LLM-based":[176],"semantic":[177],"reasoning":[178],"address":[180],"complexity":[182],"modern":[184]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-01-29T00:00:00"}