{"id":"https://openalex.org/W4416251070","doi":"https://doi.org/10.1109/bcca66705.2025.11229457","title":"Prompt Engineering vs. Fine-Tuning for LLM-Based Vulnerability Detection in Solana and Algorand Smart Contracts","display_name":"Prompt Engineering vs. Fine-Tuning for LLM-Based Vulnerability Detection in Solana and Algorand Smart Contracts","publication_year":2025,"publication_date":"2025-10-14","ids":{"openalex":"https://openalex.org/W4416251070","doi":"https://doi.org/10.1109/bcca66705.2025.11229457"},"language":null,"primary_location":{"id":"doi:10.1109/bcca66705.2025.11229457","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bcca66705.2025.11229457","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 7th International Conference on Blockchain Computing and Applications (BCCA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092349742","display_name":"Biagio Boi","orcid":"https://orcid.org/0000-0003-3044-5345"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Biagio Boi","raw_affiliation_strings":["University of Salerno Fisciano,dept. of Computer Science,Salerno,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Salerno Fisciano,dept. of Computer Science,Salerno,Italy","institution_ids":["https://openalex.org/I131729948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002662575","display_name":"Christian Esposito","orcid":"https://orcid.org/0000-0002-0085-0748"},"institutions":[{"id":"https://openalex.org/I131729948","display_name":"University of Salerno","ror":"https://ror.org/0192m2k53","country_code":"IT","type":"education","lineage":["https://openalex.org/I131729948"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Christian Esposito","raw_affiliation_strings":["University of Salerno Fisciano,dept. of Computer Science,Salerno,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Salerno Fisciano,dept. of Computer Science,Salerno,Italy","institution_ids":["https://openalex.org/I131729948"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I131729948"],"apc_list":null,"apc_paid":null,"fwci":1.9246,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.88634211,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"391","last_page":"398"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.42719998955726624,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.42719998955726624,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.043800000101327896,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.03880000114440918,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.649399995803833},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.628000020980835},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.517799973487854},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.510200023651123},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.45500001311302185},{"id":"https://openalex.org/keywords/smart-contract","display_name":"Smart contract","score":0.3781000077724457}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6794000267982483},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.649399995803833},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.628000020980835},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.517799973487854},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.510200023651123},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.45500001311302185},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44269999861717224},{"id":"https://openalex.org/C2779950589","wikidata":"https://www.wikidata.org/wiki/Q7544035","display_name":"Smart contract","level":3,"score":0.3781000077724457},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.3361999988555908},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3230000138282776},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.2833000123500824},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.262800008058548},{"id":"https://openalex.org/C2777103469","wikidata":"https://www.wikidata.org/wiki/Q1231558","display_name":"Smart city","level":3,"score":0.258899986743927},{"id":"https://openalex.org/C83931994","wikidata":"https://www.wikidata.org/wiki/Q1149653","display_name":"Building automation","level":2,"score":0.25769999623298645}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bcca66705.2025.11229457","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bcca66705.2025.11229457","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 7th International Conference on Blockchain Computing and Applications (BCCA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W2763398287","https://openalex.org/W2970809537","https://openalex.org/W3092748075","https://openalex.org/W3098790323","https://openalex.org/W3210358905","https://openalex.org/W4365509787","https://openalex.org/W4385507108","https://openalex.org/W4386257487","https://openalex.org/W4387908891","https://openalex.org/W4392798762","https://openalex.org/W4393208022","https://openalex.org/W4393406709","https://openalex.org/W4400417542","https://openalex.org/W4401361663","https://openalex.org/W4401719119","https://openalex.org/W4401880082","https://openalex.org/W4402595051","https://openalex.org/W4402595303","https://openalex.org/W4402674251","https://openalex.org/W4403211967","https://openalex.org/W4403628868","https://openalex.org/W4404102264"],"related_works":[],"abstract_inverted_index":{"Smart":[0],"contracts":[1,56],"have":[2],"emerged":[3],"as":[4,147],"key":[5],"components":[6],"within":[7],"decentralized":[8],"environments,":[9],"enabling":[10],"the":[11,30,43,58,71,153,161],"automation":[12],"of":[13,45,73,84,117,156,165],"transactions":[14],"through":[15],"self-executing":[16],"programs.":[17],"While":[18],"these":[19],"innovations":[20],"offer":[21],"significant":[22],"advantages,":[23],"they":[24],"also":[25],"present":[26],"potential":[27],"drawbacks":[28],"if":[29],"smart":[31,55,86,190],"contract":[32,87],"code":[33],"is":[34],"not":[35],"carefully":[36],"designed":[37],"and":[38,68,93,114,139,158,163,195],"implemented.":[39],"This":[40],"paper":[41],"investigates":[42],"capability":[44],"large":[46],"language":[47],"models":[48],"(LLMs)":[49],"to":[50],"detect":[51],"OWASP-inspired":[52],"vulnerabilities":[53],"in":[54,89,173,189],"beyond":[57],"Ethereum":[59],"Virtual":[60],"Machine":[61],"(EVM)":[62],"ecosystem,":[63],"focusing":[64],"specifically":[65],"on":[66,122,141],"Solana":[67,157],"Algorand.":[69],"Given":[70],"lack":[72],"labeled":[74],"datasets":[75],"for":[76,185],"nonEVM":[77],"platforms,":[78],"we":[79,150],"design":[80],"a":[81,99,115],"synthetic":[82],"dataset":[83],"annotated":[85],"snippets":[88],"Rust":[90],"(for":[91,95],"Solana)":[92],"PyTeal":[94],"Algorand),":[96],"structured":[97],"around":[98],"vulnerability":[100,124,187],"taxonomy":[101],"derived":[102],"from":[103],"OWASP.":[104],"We":[105],"evaluate":[106],"LLMs":[107],"under":[108],"three":[109],"configurations:":[110],"prompt":[111,130],"engineering,":[112],"fine-tuning,":[113],"hybrid":[116],"both,":[118],"comparing":[119],"their":[120],"performance":[121],"different":[123],"categories.":[125],"Experimental":[126],"results":[127],"show":[128],"that":[129,170,180],"engineering":[131],"achieves":[132],"general":[133],"robustness,":[134],"while":[135],"fine-tuning":[136],"improves":[137],"precision":[138],"recall":[140],"less":[142],"semantically":[143],"rich":[144],"languages":[145],"such":[146],"TEAL.":[148],"Additionally,":[149],"analyze":[151],"how":[152],"architectural":[154],"differences":[155],"Algorand":[159],"influence":[160],"manifestation":[162],"detectability":[164],"vulnerabilities,":[166],"offering":[167],"platform-specific":[168],"mappings":[169],"highlight":[171],"limitations":[172],"existing":[174],"security":[175],"tooling.":[176],"Our":[177],"findings":[178],"suggest":[179],"LLM-based":[181],"approaches":[182],"are":[183,197],"viable":[184],"static":[186],"detection":[188],"contracts,":[191],"provided":[192],"domain-specific":[193],"data":[194],"categorization":[196],"integrated":[198],"into":[199],"training":[200],"pipelines.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-11-14T00:00:00"}