{"id":"https://openalex.org/W4415707895","doi":"https://doi.org/10.1109/tifs.2025.3626979","title":"Penetrating the Hostile: Detecting DeFi Protocol Exploits Through Cross-Contract Analysis","display_name":"Penetrating the Hostile: Detecting DeFi Protocol Exploits Through Cross-Contract Analysis","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415707895","doi":"https://doi.org/10.1109/tifs.2025.3626979"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2025.3626979","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3626979","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100634702","display_name":"Xiaoqi Li","orcid":"https://orcid.org/0000-0002-6012-9178"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoqi Li","raw_affiliation_strings":["Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0000-0002-6012-9178","affiliations":[{"raw_affiliation_string":"Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053791262","display_name":"Wenkai Li","orcid":"https://orcid.org/0000-0002-4238-8846"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenkai Li","raw_affiliation_strings":["Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0000-0002-4238-8846","affiliations":[{"raw_affiliation_string":"Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062494507","display_name":"Zhiquan Liu","orcid":"https://orcid.org/0000-0002-3934-2177"},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiquan Liu","raw_affiliation_strings":["Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-3934-2177","affiliations":[{"raw_affiliation_string":"Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100401884","display_name":"Yuqing Zhang","orcid":"https://orcid.org/0000-0001-8306-7195"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuqing Zhang","raw_affiliation_strings":["University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8306-7195","affiliations":[{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5104242014","display_name":"Yingjie Mao","orcid":null},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yingjie Mao","raw_affiliation_strings":["Hainan University, Haikou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":15.3783,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.98825035,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"20","issue":null,"first_page":"11759","last_page":"11774"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.3635999858379364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.3635999858379364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.120899997651577,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.08709999918937683,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8924000263214111},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5867000222206116},{"id":"https://openalex.org/keywords/path","display_name":"Path (computing)","score":0.45010000467300415},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4187000095844269},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.37380000948905945},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.37369999289512634},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.35100001096725464},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.34290000796318054}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9143000245094299},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8924000263214111},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5867000222206116},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47130000591278076},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.45010000467300415},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4187000095844269},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.37380000948905945},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.37369999289512634},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.35100001096725464},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.34290000796318054},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.34139999747276306},{"id":"https://openalex.org/C167822520","wikidata":"https://www.wikidata.org/wiki/Q176452","display_name":"Finite-state machine","level":2,"score":0.33550000190734863},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.329800009727478},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3269999921321869},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.32339999079704285},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.29820001125335693},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.29510000348091125},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.27619999647140503},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.27219998836517334},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2667999863624573},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25859999656677246}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3626979","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3626979","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1792305625","display_name":null,"funder_award_id":"HNJG2023-10","funder_id":"https://openalex.org/F4320324882","funder_display_name":"Hainan Provincial Department of Science and Technology"},{"id":"https://openalex.org/G4955479608","display_name":null,"funder_award_id":"62362021","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G969737726","display_name":null,"funder_award_id":"62402146","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324882","display_name":"Hainan Provincial Department of Science and Technology","ror":"https://ror.org/03rbw2w25"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":63,"referenced_works":["https://openalex.org/W2539190473","https://openalex.org/W2789063661","https://openalex.org/W2907492528","https://openalex.org/W2963610883","https://openalex.org/W2963626623","https://openalex.org/W2970809537","https://openalex.org/W2981088827","https://openalex.org/W2985495886","https://openalex.org/W2994373027","https://openalex.org/W2999378142","https://openalex.org/W3034136313","https://openalex.org/W3035733952","https://openalex.org/W3133932565","https://openalex.org/W3134196592","https://openalex.org/W3137707325","https://openalex.org/W3162209499","https://openalex.org/W3173753074","https://openalex.org/W3182763642","https://openalex.org/W3207487452","https://openalex.org/W3211314335","https://openalex.org/W3213446005","https://openalex.org/W3214248890","https://openalex.org/W4206712151","https://openalex.org/W4211181447","https://openalex.org/W4285490412","https://openalex.org/W4288057718","https://openalex.org/W4296440242","https://openalex.org/W4306406277","https://openalex.org/W4308632432","https://openalex.org/W4311777171","https://openalex.org/W4316022171","https://openalex.org/W4316661173","https://openalex.org/W4324007147","https://openalex.org/W4367046762","https://openalex.org/W4375929685","https://openalex.org/W4384154512","https://openalex.org/W4384155542","https://openalex.org/W4384155611","https://openalex.org/W4384155618","https://openalex.org/W4384302865","https://openalex.org/W4384304916","https://openalex.org/W4384345633","https://openalex.org/W4385080392","https://openalex.org/W4385730452","https://openalex.org/W4388483249","https://openalex.org/W4388857350","https://openalex.org/W4390204305","https://openalex.org/W4393186154","https://openalex.org/W4394769109","https://openalex.org/W4394769500","https://openalex.org/W4396523209","https://openalex.org/W4396844343","https://openalex.org/W4396918181","https://openalex.org/W4400121127","https://openalex.org/W4402264101","https://openalex.org/W4402264471","https://openalex.org/W4402288736","https://openalex.org/W4402442646","https://openalex.org/W4402443213","https://openalex.org/W4403577695","https://openalex.org/W4404060141","https://openalex.org/W4407097963","https://openalex.org/W4411552321"],"related_works":[],"abstract_inverted_index":{"Decentralized":[0],"finance":[1],"(DeFi)":[2],"protocols":[3,71],"are":[4],"crypto":[5],"projects":[6],"developed":[7],"on":[8,16,129],"the":[9,40,55,59,112,120,133,142,151,166,178,183,190,198,210,238],"blockchain":[10],"to":[11,57,86,160,164,196,230],"manage":[12],"digital":[13],"assets.":[14],"Attacks":[15],"DeFi":[17,70,130,143,201],"have":[18,22],"been":[19],"frequent":[20],"and":[21,32,105,138,156,218,263],"resulted":[23],"in":[24,36,74,123,170,215,220],"losses":[25],"exceeding":[26],"$80":[27],"billion.":[28],"Current":[29],"tools":[30,85],"detect":[31,231],"locate":[33],"possible":[34],"vulnerabilities":[35],"contracts":[37],"by":[38,181],"analyzing":[39],"state":[41],"changes":[42],"that":[43,97,127,207],"may":[44],"occur":[45,128],"during":[46],"malicious":[47,125,232],"events.":[48],"However,":[49],"this":[50,91],"victim-only":[51],"approaches":[52],"seldom":[53],"possess":[54],"capability":[56,229],"cover":[58],"attacker\u2019s":[60],"interaction":[61],"intention":[62],"logic.":[63],"Furthermore,":[64,187],"only":[65],"a":[66,79],"minuscule":[67],"percentage":[68],"of":[69,168,200,250],"experience":[72],"attacks":[73],"real-world":[75,124],"scenarios,":[76],"which":[77],"poses":[78],"significant":[80],"challenge":[81],"for":[82,102],"these":[83],"detection":[84],"demonstrate":[87],"practical":[88],"effectiveness.":[89],"In":[90],"paper,":[92],"we":[93,188,245],"propose":[94],"DeFiTail,":[95],"thefirstframework":[96],"utilizes":[98],"deep":[99],"learning":[100],"technology":[101],"access":[103,216],"control":[104,217],"flash":[106,221],"loan":[107,222],"exploit":[108],"detection.":[109],"Through":[110],"feeding":[111],"cross-contract":[113],"static":[114],"data":[115,179,191],"flow,":[116],"DeFiTail":[117,176,208,224],"automatically":[118],"learns":[119],"attack":[121],"logic":[122],"events":[126,145],"protocols,":[131],"capturing":[132],"threat":[134],"patterns":[135],"between":[136],"attacker":[137],"victim":[139],"contracts.":[140],"Since":[141],"protocol":[144],"involve":[146],"interactions":[147],"with":[148,154,213],"multi-account":[149],"transactions,":[150],"execution":[152,185],"path":[153,180],"external":[155],"internal":[157],"transactions":[158],"requires":[159],"be":[161],"unified.":[162],"Moreover,":[163],"mitigate":[165],"impact":[167],"mistakes":[169],"Control":[171],"Flow":[172],"Graph":[173],"(CFG)":[174],"connections,":[175],"validates":[177],"employing":[182],"symbolic":[184],"stack.":[186],"feed":[189],"paths":[192],"through":[193],"our":[194],"model":[195],"achieve":[197],"inspection":[199],"protocols.":[202],"Comparative":[203],"experiment":[204],"results":[205],"indicate":[206],"achieves":[209],"highest":[211],"accuracy,":[212],"98.39%":[214],"97.43%":[219],"exploits.":[223],"also":[225],"demonstrates":[226],"an":[227],"enhanced":[228],"contracts,":[233,244],"identifying":[234],"86.67%":[235],"accuracy":[236],"from":[237],"CVE":[239],"dataset.":[240],"By":[241],"monitoring":[242],"existing":[243],"identified":[246],"five":[247],"distinct":[248],"categories":[249],"vulnerabilities:":[251],"repetition":[252],"abuse,":[253],"unsafe":[254],"unintended":[255],"exploitation,":[256,259,262],"signature":[257],"violated":[258],"insecure":[260],"interfaces":[261],"unrestricted":[264],"token":[265],"transfer.":[266]},"counts_by_year":[{"year":2026,"cited_by_count":8}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-30T00:00:00"}