{"id":"https://openalex.org/W4408565443","doi":"https://doi.org/10.1109/tse.2025.3551776","title":"When Crypto Fails: Demystifying Cryptographic Defects in Ethereum Smart Contracts","display_name":"When Crypto Fails: Demystifying Cryptographic Defects in Ethereum Smart Contracts","publication_year":2025,"publication_date":"2025-03-18","ids":{"openalex":"https://openalex.org/W4408565443","doi":"https://doi.org/10.1109/tse.2025.3551776"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2025.3551776","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2025.3551776","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026151248","display_name":"Jiashuo Zhang","orcid":"https://orcid.org/0000-0002-8140-9208"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiashuo Zhang","raw_affiliation_strings":["School of Computer Science, Peking University, Beijing, China","School of Computer Science, Peking University, China"],"raw_orcid":"https://orcid.org/0000-0002-8140-9208","affiliations":[{"raw_affiliation_string":"School of Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"School of Computer Science, Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086118824","display_name":"Jiachi Chen","orcid":"https://orcid.org/0000-0002-0192-9992"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiachi Chen","raw_affiliation_strings":["School of Software Engineering, Sun Yat-sen University, Zhuhai, China","School of Software Engineering, Sun Yat-sen University, China"],"raw_orcid":"https://orcid.org/0000-0002-0192-9992","affiliations":[{"raw_affiliation_string":"School of Software Engineering, Sun Yat-sen University, Zhuhai, China","institution_ids":["https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Software Engineering, Sun Yat-sen University, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113997133","display_name":"Yiming Shen","orcid":null},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiming Shen","raw_affiliation_strings":["School of Software Engineering, Sun Yat-sen University, Zhuhai, China","School of Software Engineering, Sun Yat-sen University, China"],"raw_orcid":"https://orcid.org/0009-0003-9466-6427","affiliations":[{"raw_affiliation_string":"School of Software Engineering, Sun Yat-sen University, Zhuhai, China","institution_ids":["https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Software Engineering, Sun Yat-sen University, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100375823","display_name":"Tao Zhang","orcid":"https://orcid.org/0000-0002-6272-4069"},"institutions":[{"id":"https://openalex.org/I111950717","display_name":"Macau University of Science and Technology","ror":"https://ror.org/03jqs2n27","country_code":"MO","type":"education","lineage":["https://openalex.org/I111950717","https://openalex.org/I4391767947"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Tao Zhang","raw_affiliation_strings":["School of Computer Science and Engineering, Macau University of Science and Technology, Macau, China","School of Computer Science and Engineering, Macau University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0000-0002-6272-4069","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Macau University of Science and Technology, Macau, China","institution_ids":["https://openalex.org/I111950717"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Macau University of Science and Technology, China","institution_ids":["https://openalex.org/I111950717"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100350708","display_name":"Yanlin Wang","orcid":"https://orcid.org/0000-0001-7761-7269"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanlin Wang","raw_affiliation_strings":["School of Software Engineering, Sun Yat-sen University, Zhuhai, China","School of Software Engineering, Sun Yat-sen University, China"],"raw_orcid":"https://orcid.org/0000-0001-7761-7269","affiliations":[{"raw_affiliation_string":"School of Software Engineering, Sun Yat-sen University, Zhuhai, China","institution_ids":["https://openalex.org/I157773358"]},{"raw_affiliation_string":"School of Software Engineering, Sun Yat-sen University, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100443178","display_name":"Ting Chen","orcid":"https://orcid.org/0000-0001-9165-8331"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ting Chen","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","School of Computer Science and Engineering, University of Electronic Science and Technology of China, China"],"raw_orcid":"https://orcid.org/0000-0001-9165-8331","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089030314","display_name":"Jianbo Gao","orcid":"https://orcid.org/0000-0002-6760-5552"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianbo Gao","raw_affiliation_strings":["Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, China"],"raw_orcid":"https://orcid.org/0000-0002-6760-5552","affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]},{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5107170492","display_name":"Zhong Chen","orcid":"https://orcid.org/0000-0002-5785-2912"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhong Chen","raw_affiliation_strings":["School of Computer Science, Peking University, Beijing, China","School of Computer Science, Peking University, China"],"raw_orcid":"https://orcid.org/0000-0002-5785-2912","affiliations":[{"raw_affiliation_string":"School of Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"School of Computer Science, Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.036,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.92874782,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"51","issue":"5","first_page":"1381","last_page":"1398"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9616000056266785,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9616000056266785,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7706352472305298},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.7178621292114258},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5479058623313904},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3293304443359375}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7706352472305298},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.7178621292114258},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5479058623313904},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3293304443359375}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tse.2025.3551776","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2025.3551776","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2795951424","display_name":null,"funder_award_id":"62332004","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3616018988","display_name":null,"funder_award_id":"62202011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4449585094","display_name":null,"funder_award_id":"62172010","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W1605965790","https://openalex.org/W2008810193","https://openalex.org/W2013613544","https://openalex.org/W2070561595","https://openalex.org/W2087288333","https://openalex.org/W2092115639","https://openalex.org/W2104633167","https://openalex.org/W2151460988","https://openalex.org/W2151748484","https://openalex.org/W2496543269","https://openalex.org/W2539190473","https://openalex.org/W2898569715","https://openalex.org/W2908007588","https://openalex.org/W2970809537","https://openalex.org/W3007045600","https://openalex.org/W3016124762","https://openalex.org/W3034459010","https://openalex.org/W3083471387","https://openalex.org/W3089630855","https://openalex.org/W3094062523","https://openalex.org/W3163257481","https://openalex.org/W3182110757","https://openalex.org/W3194076087","https://openalex.org/W3198867963","https://openalex.org/W3205905829","https://openalex.org/W4205689130","https://openalex.org/W4211233231","https://openalex.org/W4242917914","https://openalex.org/W4285490412","https://openalex.org/W4285490458","https://openalex.org/W4307887068","https://openalex.org/W4308219254","https://openalex.org/W4312884376","https://openalex.org/W4313270705","https://openalex.org/W4367359426","https://openalex.org/W4384154512","https://openalex.org/W4384304916","https://openalex.org/W4385012161","https://openalex.org/W4394744877","https://openalex.org/W4396819965","https://openalex.org/W4405954723","https://openalex.org/W6729254871","https://openalex.org/W6793285265","https://openalex.org/W6881262104"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2060145807","https://openalex.org/W4248806346"],"abstract_inverted_index":{"Ethereum":[0,26],"has":[1],"officially":[2],"provided":[3],"a":[4,73,164,195],"set":[5],"of":[6,25,60,89,98,129,192,197,208],"system-level":[7],"cryptographic":[8,15,34,47,81,99,130,216,230],"APIs":[9,18],"to":[10,30,63,124,144,153],"enhance":[11],"smart":[12,84,102,133,171,210],"contracts":[13,103,172,211],"with":[14,104],"capabilities.":[16],"These":[17],"have":[19],"been":[20],"utilized":[21],"in":[22,83,101,132,236],"over":[23],"13.8%":[24],"transactions,":[27],"motivating":[28],"developers":[29,42],"implement":[31],"various":[32],"on-chain":[33],"tasks,":[35],"such":[36],"as":[37],"digital":[38],"signatures.":[39],"However,":[40],"since":[41],"may":[43],"not":[44,219],"always":[45],"be":[46,234],"experts,":[48],"their":[49],"ad-hoc":[50],"and":[51,79,107,140,149,173,194],"potentially":[52],"defective":[53],"implementations":[54,231],"could":[55],"compromise":[56],"the":[57,87,120,126],"theoretical":[58],"guarantees":[59],"cryptography,":[61],"leading":[62],"real-world":[64,91,169,237],"security":[65,92],"issues.":[66],"To":[67],"mitigate":[68],"this":[69,113],"threat,":[70],"we":[71,94,115,162],"conducted":[72],"comprehensive":[74],"study":[75],"aimed":[76],"at":[77,213],"demystifying":[78],"detecting":[80],"defects":[82,100,131,221],"contracts.":[85,134],"Through":[86],"analysis":[88,143,152],"3,762":[90],"reports,":[93],"defined":[95],"12":[96],"types":[97],"detailed":[105],"descriptions":[106],"practical":[108],"detection":[109,128],"patterns.":[110],"Based":[111],"on":[112,179],"categorization,":[114],"proposed":[116],"<sc":[117,135,175,185,200],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[118,136,176,186,201],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">CryptoScan</small>,":[119],"first":[121],"static":[122,142],"analyzer":[123],"automate":[125],"pre-deployment":[127],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">CryptoScan</small>":[137,187,202],"utilizes":[138],"cross-contract":[139],"inter-procedure":[141],"identify":[145],"crypto-related":[146,170],"execution":[147],"paths":[148],"employs":[150],"taint":[151],"extract":[154],"fine-grained":[155],"crypto-specific":[156],"semantics":[157],"for":[158],"defect":[159],"detection.":[160],"Furthermore,":[161],"collected":[163],"large-scale":[165],"dataset":[166],"containing":[167],"79,598":[168,209],"evaluated":[174],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">CryptoScan</small>'s":[177],"effectiveness":[178],"it.":[180],"The":[181],"results":[182],"demonstrated":[183],"that":[184,204,232],"achieves":[188],"an":[189],"overall":[190],"precision":[191],"96.1%":[193],"recall":[196],"93.3%.":[198],"Notably,":[199],"revealed":[203],"19,707":[205],"(24.8%)":[206],"out":[207],"contain":[212],"least":[214],"one":[215],"defect.":[217],"Although":[218],"all":[220],"directly":[222],"cause":[223],"financial":[224],"losses,":[225],"they":[226],"indicate":[227],"prevalent":[228],"non-standard":[229],"should":[233],"addressed":[235],"practices.":[238]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}