{"id":"https://openalex.org/W4413943341","doi":"https://doi.org/10.1145/3757914","title":"WACANA: A Concolic Analyzer for Detecting On-chain Data Vulnerabilities in WASM Smart Contracts","display_name":"WACANA: A Concolic Analyzer for Detecting On-chain Data Vulnerabilities in WASM Smart Contracts","publication_year":2025,"publication_date":"2025-09-03","ids":{"openalex":"https://openalex.org/W4413943341","doi":"https://doi.org/10.1145/3757914"},"language":"en","primary_location":{"id":"doi:10.1145/3757914","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3757914","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3757914","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3757914","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049039943","display_name":"Wansen Wang","orcid":"https://orcid.org/0000-0002-6892-8767"},"institutions":[{"id":"https://openalex.org/I143868143","display_name":"Anhui University","ror":"https://ror.org/05th6yx34","country_code":"CN","type":"education","lineage":["https://openalex.org/I143868143"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wansen Wang","raw_affiliation_strings":["Anhui University, Hefei, China","Anhui University, China"],"raw_orcid":"https://orcid.org/0000-0002-6892-8767","affiliations":[{"raw_affiliation_string":"Anhui University, Hefei, China","institution_ids":["https://openalex.org/I143868143"]},{"raw_affiliation_string":"Anhui University, China","institution_ids":["https://openalex.org/I143868143"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048493139","display_name":"Caichang Tu","orcid":null},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Caichang Tu","raw_affiliation_strings":["University of Science and Technology of China, Hefei, China","University of Science and Technology of China, China"],"raw_orcid":"https://orcid.org/0009-0000-5358-1943","affiliations":[{"raw_affiliation_string":"University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]},{"raw_affiliation_string":"University of Science and Technology of China, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026367503","display_name":"Zhaoyi Meng","orcid":"https://orcid.org/0000-0003-3788-9643"},"institutions":[{"id":"https://openalex.org/I143868143","display_name":"Anhui University","ror":"https://ror.org/05th6yx34","country_code":"CN","type":"education","lineage":["https://openalex.org/I143868143"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaoyi Meng","raw_affiliation_strings":["Anhui University, Hefei, China","Anhui University, China"],"raw_orcid":"https://orcid.org/0000-0003-3788-9643","affiliations":[{"raw_affiliation_string":"Anhui University, Hefei, China","institution_ids":["https://openalex.org/I143868143"]},{"raw_affiliation_string":"Anhui University, China","institution_ids":["https://openalex.org/I143868143"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015170609","display_name":"Wenchao Huang","orcid":"https://orcid.org/0000-0002-2043-2439"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenchao Huang","raw_affiliation_strings":["University of Science and Technology of China, Hefei, China","University of Science and Technology of China, China"],"raw_orcid":"https://orcid.org/0000-0002-2043-2439","affiliations":[{"raw_affiliation_string":"University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]},{"raw_affiliation_string":"University of Science and Technology of China, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100735350","display_name":"Yan Xiong","orcid":"https://orcid.org/0000-0001-6347-8747"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Xiong","raw_affiliation_strings":["University of Science and Technology of China, Hefei, China","University of Science and Technology of China, China"],"raw_orcid":"https://orcid.org/0000-0001-6347-8747","affiliations":[{"raw_affiliation_string":"University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]},{"raw_affiliation_string":"University of Science and Technology of China, China","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.656,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.70448524,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"35","issue":"6","first_page":"1","last_page":"22"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7750365734100342},{"id":"https://openalex.org/keywords/concolic-testing","display_name":"Concolic testing","score":0.6458972096443176},{"id":"https://openalex.org/keywords/spectrum-analyzer","display_name":"Spectrum analyzer","score":0.42667078971862793},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.18458601832389832},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.10226258635520935},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.09993502497673035},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.08637213706970215}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7750365734100342},{"id":"https://openalex.org/C11219265","wikidata":"https://www.wikidata.org/wiki/Q5158734","display_name":"Concolic testing","level":4,"score":0.6458972096443176},{"id":"https://openalex.org/C158007255","wikidata":"https://www.wikidata.org/wiki/Q1055222","display_name":"Spectrum analyzer","level":2,"score":0.42667078971862793},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.18458601832389832},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.10226258635520935},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.09993502497673035},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.08637213706970215}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3757914","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3757914","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3757914","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3757914","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3757914","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3757914","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3375264604","display_name":null,"funder_award_id":"62402001, 62372422, and 62272434","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7793141733","display_name":null,"funder_award_id":"WK2150110024","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4413943341.pdf"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W2104993088","https://openalex.org/W2888822874","https://openalex.org/W2963723316","https://openalex.org/W2987328450","https://openalex.org/W3007193137","https://openalex.org/W3023082753","https://openalex.org/W3127104553","https://openalex.org/W4206712151","https://openalex.org/W4285490420","https://openalex.org/W4376613318","https://openalex.org/W4388867283","https://openalex.org/W4391724771"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W1992057646","https://openalex.org/W1983849186","https://openalex.org/W2020667931","https://openalex.org/W2527390967","https://openalex.org/W49527103","https://openalex.org/W4285245777","https://openalex.org/W2553223552"],"abstract_inverted_index":{"WebAssembly":[0],"(WASM)":[1],"has":[2],"emerged":[3],"as":[4],"a":[5,108,118],"crucial":[6],"technology":[7],"in":[8,35,129],"smart":[9,21],"contract":[10,32,45],"development":[11],"for":[12,42,72],"several":[13,27],"blockchain":[14],"platforms.":[15],"Unfortunately,":[16],"since":[17],"their":[18,97],"introduction,":[19],"WASM":[20,44,73],"contracts":[22,74,123,136],"have":[23,47],"been":[24],"subject":[25],"to":[26,111],"security":[28],"incidents":[29],"caused":[30],"by":[31],"vulnerabilities,":[33],"resulting":[34],"substantial":[36],"economic":[37],"losses.":[38],"However,":[39],"existing":[40],"tools":[41,128],"detecting":[43],"vulnerabilities":[46,78],"accuracy":[48,113],"limitations,":[49],"one":[50],"of":[51,59,82,92,121],"the":[52,56,60,90],"main":[53],"reasons":[54],"being":[55],"coarse-grained":[57],"emulation":[58,81],"on-chain":[61,83,93],"data":[62,84,94],"APIs.":[63,85],"In":[64],"this":[65],"article,":[66],"we":[67],"introduce":[68],"WACANA,":[69],"an":[70],"analyzer":[71],"that":[75],"accurately":[76],"detects":[77],"through":[79],"fine-grained":[80],"WACANA":[86,125],"precisely":[87],"simulates":[88],"both":[89],"structure":[91],"tables":[95],"and":[96,101,104,114],"corresponding":[98],"API":[99],"functions,":[100],"integrates":[102],"concrete":[103],"symbolic":[105],"execution":[106],"within":[107],"coverage-guided":[109],"loop":[110],"balance":[112],"efficiency.":[115],"Evaluations":[116],"on":[117,133],"vulnerability":[119],"dataset":[120],"2,012":[122],"show":[124],"outperforming":[126],"state-of-the-art":[127],"accuracy.":[130],"Further":[131],"validation":[132],"5,602":[134],"real-world":[135],"confirms":[137],"WACANA\u2019s":[138],"practical":[139],"effectiveness.":[140]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}
