{"id":"https://openalex.org/W4290996372","doi":"https://doi.org/10.1109/icc45855.2022.9839252","title":"TokenCat: Detect Flaw of Authentication on ERC20 Tokens","display_name":"TokenCat: Detect Flaw of Authentication on ERC20 Tokens","publication_year":2022,"publication_date":"2022-05-16","ids":{"openalex":"https://openalex.org/W4290996372","doi":"https://doi.org/10.1109/icc45855.2022.9839252"},"language":"en","primary_location":{"id":"doi:10.1109/icc45855.2022.9839252","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc45855.2022.9839252","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2022 - IEEE International Conference on Communications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019899373","display_name":"Zheyuan He","orcid":"https://orcid.org/0000-0003-2131-1046"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zheyuan He","raw_affiliation_strings":["University of Electronic Science and Technology of China,Center Of Cyber Security","Center Of Cyber Security, University of Electronic Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China,Center Of Cyber Security","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"Center Of Cyber Security, University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003370388","display_name":"Zhou Liao","orcid":null},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhou Liao","raw_affiliation_strings":["University of Electronic Science and Technology of China,Center Of Cyber Security","Center Of Cyber Security, University of Electronic Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China,Center Of Cyber Security","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"Center Of Cyber Security, University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101542730","display_name":"Luo Feng","orcid":"https://orcid.org/0009-0004-4594-0394"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feng Luo","raw_affiliation_strings":["University of Electronic Science and Technology of China,Center Of Cyber Security","Center Of Cyber Security, University of Electronic Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China,Center Of Cyber Security","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"Center Of Cyber Security, University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018079677","display_name":"Dijun Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210121321","display_name":"ANT Foundation Italy Onlus","ror":"https://ror.org/02zf60s91","country_code":"IT","type":"nonprofit","lineage":["https://openalex.org/I4210121321"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Dijun Liu","raw_affiliation_strings":["Ant Group,Foundational Security","Foundational Security, Ant Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group,Foundational Security","institution_ids":["https://openalex.org/I4210121321"]},{"raw_affiliation_string":"Foundational Security, Ant Group","institution_ids":["https://openalex.org/I4210121321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100443178","display_name":"Ting Chen","orcid":"https://orcid.org/0000-0001-9165-8331"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ting Chen","raw_affiliation_strings":["University of Electronic Science and Technology of China,Center Of Cyber Security","Center Of Cyber Security, University of Electronic Science and Technology of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China,Center Of Cyber Security","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"Center Of Cyber Security, University of Electronic Science and Technology of China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100342798","display_name":"Zihao Li","orcid":"https://orcid.org/0000-0002-4382-577X"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Zihao Li","raw_affiliation_strings":["The Hong Kong Polytechnic University,Department of Computing","Department of Computing, The Hong Kong Polytechnic University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University,Department of Computing","institution_ids":["https://openalex.org/I14243506"]},{"raw_affiliation_string":"Department of Computing, The Hong Kong Polytechnic University","institution_ids":["https://openalex.org/I14243506"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4999","last_page":"5004"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9789000153541565,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.978600025177002,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.8862663507461548},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8183506727218628},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.7220125794410706},{"id":"https://openalex.org/keywords/bytecode","display_name":"Bytecode","score":0.6336624622344971},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5508487224578857},{"id":"https://openalex.org/keywords/multi-factor-authentication","display_name":"Multi-factor authentication","score":0.45411279797554016},{"id":"https://openalex.org/keywords/authentication-server","display_name":"Authentication server","score":0.42924830317497253},{"id":"https://openalex.org/keywords/message-authentication-code","display_name":"Message authentication code","score":0.4211093485355377},{"id":"https://openalex.org/keywords/authentication-protocol","display_name":"Authentication protocol","score":0.41590791940689087},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.35573601722717285},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3268381357192993},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.16427674889564514}],"concepts":[{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.8862663507461548},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8183506727218628},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.7220125794410706},{"id":"https://openalex.org/C2779818221","wikidata":"https://www.wikidata.org/wiki/Q837330","display_name":"Bytecode","level":3,"score":0.6336624622344971},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5508487224578857},{"id":"https://openalex.org/C194699767","wikidata":"https://www.wikidata.org/wiki/Q7878662","display_name":"Multi-factor authentication","level":4,"score":0.45411279797554016},{"id":"https://openalex.org/C2777331311","wikidata":"https://www.wikidata.org/wiki/Q784561","display_name":"Authentication server","level":3,"score":0.42924830317497253},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.4211093485355377},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.41590791940689087},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.35573601722717285},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3268381357192993},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.16427674889564514},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc45855.2022.9839252","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc45855.2022.9839252","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2022 - IEEE International Conference on Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Partnerships for the goals","score":0.47999998927116394,"id":"https://metadata.un.org/sdg/17"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W1480909796","https://openalex.org/W2888928288","https://openalex.org/W2969328927","https://openalex.org/W2987160260","https://openalex.org/W3012561668","https://openalex.org/W3022662270","https://openalex.org/W3151748982","https://openalex.org/W3152829963","https://openalex.org/W6754519360","https://openalex.org/W6793285265"],"related_works":["https://openalex.org/W3022695109","https://openalex.org/W2183793056","https://openalex.org/W2129970007","https://openalex.org/W4253316174","https://openalex.org/W2161818407","https://openalex.org/W2390304521","https://openalex.org/W2955634016","https://openalex.org/W2021501457","https://openalex.org/W2055255535","https://openalex.org/W3021015816"],"abstract_inverted_index":{"The":[0,12,24],"development":[1],"of":[2,8,14,27,63,71,86,103,114,122,155,214],"blockchain":[3],"has":[4,93],"promoted":[5],"the":[6,9,49,60,69,83,87,100,104,110,115,120,123,153,170,175,181,185,194,204,209,212,221,243],"prosperity":[7],"cryptocurrency":[10],"ecosystem.":[11],"majority":[13],"cryptocurrencies":[15],"are":[16,148],"ERC20":[17,28,90,217,247],"tokens":[18,29,54],"implemented":[19,107],"based":[20],"on":[21,55,169],"Ethereum":[22],"contracts.":[23],"major":[25],"role":[26],"is":[30,66,106,203],"to":[31,52,130,207,236],"carry":[32],"out":[33],"various":[34],"trades":[35],"and":[36,134,152,179,188,233],"loans":[37],"in":[38,44,89,127,211,216,227],"decentralized":[39],"applications":[40],"(DApps).":[41],"To":[42,161,198,219],"participate":[43],"DApps,":[45],"users":[46],"must":[47],"grant":[48],"DApps":[50],"permission":[51],"spend":[53],"user":[56],"behalf.":[57],"However,":[58,138],"if":[59],"authorization":[61],"logic":[62],"token":[64,72,105,128,156,171,248],"contract":[65,129,157],"flawed":[67],"implementation,":[68],"holder":[70],"will":[73],"suffer":[74],"tremendous":[75],"financial":[76],"losses.":[77],"In":[78],"this":[79,202],"work,":[80],"we":[81,118,165,223],"detect":[82,135,190,208],"authentication":[84,101,111,124,132,136,176,191,196,215,249],"implementation":[85,213,250],"flaws":[88,210,251],"token,":[91],"which":[92],"not":[94,140,149],"been":[95],"done":[96],"before.":[97],"We":[98],"find":[99],"process":[102],"by":[108,183],"operating":[109],"data":[112,125,177],"structure":[113,126,178],"token.":[116],"Therefore,":[117],"capture":[119,180],"operations":[121,182],"infer":[131],"behaviors":[133],"defects.":[137],"it\u2019s":[139],"a":[141,228,241],"simple":[142],"task":[143],"as":[144],"most":[145],"smart":[146],"contracts":[147],"open":[150],"source":[151],"bytecode":[154],"lacks":[158],"type":[159],"information.":[160],"tackle":[162],"these":[163],"problems,":[164],"utilize":[166],"symbolic":[167,186],"execution":[168],"bytecode,":[172],"then":[173],"identify":[174],"parsing":[184],"expressions,":[187],"finally":[189],"defects":[192],"through":[193],"inferred":[195],"behavior.":[197],"best":[199],"our":[200,225],"knowledge,":[201],"first":[205],"work":[206],"Token.":[218],"automate":[220],"analysis,":[222],"implement":[224],"approach":[226],"new":[229],"tool":[230],"named":[231],"TokenCat":[232,244],"use":[234],"it":[235],"inspect":[237],"245,822":[238],"tokens.":[239],"As":[240],"result,":[242],"found":[245],"491":[246],"with":[252],"94%":[253],"precision.":[254]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}
