{"id":"https://openalex.org/W7169583314","doi":"https://doi.org/10.1145/3803437.3805223","title":"AllocScope: Towards Automated Vetting of Allocation Manipulation in Smart Contracts","display_name":"AllocScope: Towards Automated Vetting of Allocation Manipulation in Smart Contracts","publication_year":2026,"publication_date":"2026-07-05","ids":{"openalex":"https://openalex.org/W7169583314","doi":"https://doi.org/10.1145/3803437.3805223"},"language":null,"primary_location":{"id":"doi:10.1145/3803437.3805223","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803437.3805223","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3803437.3805223","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5141076171","display_name":"Yu Pan","orcid":"https://orcid.org/0009-0000-1031-0385"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu Pan","raw_affiliation_strings":["CertiK, New York, USA"],"raw_orcid":"https://orcid.org/0009-0000-1031-0385","affiliations":[{"raw_affiliation_string":"CertiK, New York, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100336857","display_name":"Jing Li","orcid":"https://orcid.org/0000-0002-0075-9573"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jing Li","raw_affiliation_strings":["CertiK, New York, USA"],"raw_orcid":"https://orcid.org/0000-0002-0075-9573","affiliations":[{"raw_affiliation_string":"CertiK, New York, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5141061117","display_name":"Qi Zhang","orcid":"https://orcid.org/0000-0003-4763-0774"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qi Zhang","raw_affiliation_strings":["CertiK, New York, USA"],"raw_orcid":"https://orcid.org/0000-0003-4763-0774","affiliations":[{"raw_affiliation_string":"CertiK, New York, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037488981","display_name":"Xifeng Jin","orcid":"https://orcid.org/0000-0002-7960-4741"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xifeng Jin","raw_affiliation_strings":["CertiK, New York, USA"],"raw_orcid":"https://orcid.org/0000-0002-7960-4741","affiliations":[{"raw_affiliation_string":"CertiK, New York, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5141052913","display_name":"Yuannan Yang","orcid":"https://orcid.org/0009-0000-7926-2596"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuannan Yang","raw_affiliation_strings":["CertiK, New York, USA"],"raw_orcid":"https://orcid.org/0009-0000-7926-2596","affiliations":[{"raw_affiliation_string":"CertiK, New York, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5141084984","display_name":"Dan She","orcid":"https://orcid.org/0009-0006-7284-7317"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dan She","raw_affiliation_strings":["CertiK, New York, USA"],"raw_orcid":"https://orcid.org/0009-0006-7284-7317","affiliations":[{"raw_affiliation_string":"CertiK, New York, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"507","last_page":"512"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/vetting","display_name":"Vetting","score":0.6930999755859375},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6097999811172485},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.5703999996185303},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.45350000262260437},{"id":"https://openalex.org/keywords/audit-trail","display_name":"Audit trail","score":0.44510000944137573},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4212000072002411},{"id":"https://openalex.org/keywords/resource-allocation","display_name":"Resource allocation","score":0.362199991941452},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.34610000252723694}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7351999878883362},{"id":"https://openalex.org/C2777230681","wikidata":"https://www.wikidata.org/wiki/Q7923820","display_name":"Vetting","level":2,"score":0.6930999755859375},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6097999811172485},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.5703999996185303},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5376999974250793},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.45350000262260437},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.44510000944137573},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4212000072002411},{"id":"https://openalex.org/C29202148","wikidata":"https://www.wikidata.org/wiki/Q287260","display_name":"Resource allocation","level":2,"score":0.362199991941452},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.34610000252723694},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.33660000562667847},{"id":"https://openalex.org/C162262903","wikidata":"https://www.wikidata.org/wiki/Q343527","display_name":"Allocator","level":2,"score":0.323199987411499},{"id":"https://openalex.org/C2779950589","wikidata":"https://www.wikidata.org/wiki/Q7544035","display_name":"Smart contract","level":3,"score":0.2964000105857849},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.29159998893737793},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.2888000011444092},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.2802000045776367},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.2750000059604645},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.271699994802475},{"id":"https://openalex.org/C79301358","wikidata":"https://www.wikidata.org/wiki/Q1918846","display_name":"Contract theory","level":2,"score":0.2676999866962433},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.25699999928474426},{"id":"https://openalex.org/C2776384856","wikidata":"https://www.wikidata.org/wiki/Q17145767","display_name":"Trust management (information system)","level":2,"score":0.2533999979496002},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.25099998712539673}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3803437.3805223","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803437.3805223","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3803437.3805223","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803437.3805223","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W3007252677","https://openalex.org/W3091512861"],"related_works":[],"abstract_inverted_index":{"Flawed":[0],"funds":[1,28,88],"allocation":[2,29,70,89],"logic":[3,30,103],"in":[4,9,16,55,106],"DeFi":[5],"contracts":[6,18],"can":[7],"result":[8,105],"disproportionate":[10],"token":[11,33],"distribution,":[12],"reflecting":[13],"fundamental":[14],"errors":[15],"how":[17],"determine":[19],"and":[20,31,42,79,98,101,133],"assign":[21],"user":[22,96,121],"payouts.":[23],"These":[24],"issues":[25],"extend":[26],"beyond":[27],"affect":[32],"distribution":[34],"mechanisms.":[35],"Existing":[36],"defenses":[37],"such":[38],"as":[39],"static":[40,65],"analyzers":[41],"runtime":[43],"detectors":[44],"fail":[45],"to":[46,91,135],"capture":[47],"these":[48],"behaviors":[49],"because":[50],"each":[51],"operation":[52],"appears":[53],"valid":[54],"isolation.":[56],"In":[57],"this":[58],"work,":[59],"we":[60],"present":[61],"AllocScope,":[62],"an":[63],"auditor-centric":[64],"analysis":[66],"framework":[67],"that":[68,104,127],"identifies":[69,102],"manipulation":[71],"vulnerabilities":[72],"by":[73],"modeling":[74],"allocation-related":[75],"fund":[76],"flow":[77],"semantics":[78],"generating":[80],"vulnerability":[81],"findings":[82,129],"for":[83],"auditors.":[84],"AllocScope":[85,115],"constructs":[86],"a":[87],"graph":[90],"track":[92],"the":[93],"relationship":[94],"between":[95],"contributions":[97],"received":[99],"payouts,":[100],"unfair":[107],"outcomes.":[108],"Evaluated":[109],"on":[110],"over":[111],"8,000":[112],"real-world":[113],"contracts,":[114],"achieves":[116],"zero":[117],"false":[118],"negatives.":[119],"A":[120],"study":[122],"with":[123],"experienced":[124],"auditors":[125],"confirms":[126],"its":[128],"are":[130],"accurate,":[131],"actionable,":[132],"easy":[134],"integrate":[136],"into":[137],"standard":[138],"auditing":[139],"workflows.":[140]},"counts_by_year":[],"updated_date":"2026-07-18T05:58:53.570196","created_date":"2026-07-18T00:00:00"}
