{"id":"https://openalex.org/W7166704975","doi":"https://doi.org/10.1145/3797150","title":"WalleTruth: Visual-Oriented Software Testing for Web3 Wallet Browser Extensions","display_name":"WalleTruth: Visual-Oriented Software Testing for Web3 Wallet Browser Extensions","publication_year":2026,"publication_date":"2026-06-30","ids":{"openalex":"https://openalex.org/W7166704975","doi":"https://doi.org/10.1145/3797150"},"language":"en","primary_location":{"id":"doi:10.1145/3797150","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3797150","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3797150","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086743317","display_name":"Xiaohui Hu","orcid":"https://orcid.org/0000-0002-1485-2832"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaohui Hu","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-1485-2832","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091926865","display_name":"Ningyu He","orcid":"https://orcid.org/0000-0002-9980-7298"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Ningyu He","raw_affiliation_strings":["Hong Kong Polytechnic University, Hong Kong, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-9980-7298","affiliations":[{"raw_affiliation_string":"Hong Kong Polytechnic University, Hong Kong, Hong Kong","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115695530","display_name":"Haoyu Wang","orcid":"https://orcid.org/0000-0003-1100-8633"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyu Wang","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1100-8633","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.89625384,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"3","issue":"FSE","first_page":"182","last_page":"204"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.3995000123977661,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.3995000123977661,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.3411000072956085,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.048500001430511475,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cryptocurrency","display_name":"Cryptocurrency","score":0.9404000043869019},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6416000127792358},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.39989998936653137},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.3776000142097473},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.364300012588501},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.3598000109195709},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.3443000018596649},{"id":"https://openalex.org/keywords/full-disclosure","display_name":"Full disclosure","score":0.33649998903274536}],"concepts":[{"id":"https://openalex.org/C180706569","wikidata":"https://www.wikidata.org/wiki/Q13479982","display_name":"Cryptocurrency","level":2,"score":0.9404000043869019},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7875000238418579},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6416000127792358},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.638700008392334},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4569000005722046},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.39989998936653137},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.364300012588501},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.3598000109195709},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.3443000018596649},{"id":"https://openalex.org/C107101626","wikidata":"https://www.wikidata.org/wiki/Q842234","display_name":"Full disclosure","level":2,"score":0.33649998903274536},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.3325999975204468},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3224000036716461},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.31380000710487366},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.2987000048160553},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.29580000042915344},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2619999945163727},{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.25450000166893005},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3797150","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3797150","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3797150","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3797150","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2955447707","https://openalex.org/W3035480952","https://openalex.org/W3124855037","https://openalex.org/W3211252547","https://openalex.org/W3213446005","https://openalex.org/W4324007095","https://openalex.org/W4376877399","https://openalex.org/W4384154650","https://openalex.org/W4385080392","https://openalex.org/W4387007249","https://openalex.org/W4393354670"],"related_works":[],"abstract_inverted_index":{"Serving":[0],"as":[1],"the":[2,9,39,62,99,205],"first":[3],"touch":[4],"point":[5],"for":[6,42,129,201],"users":[7,15],"to":[8,16,54,67,145,173,186,207,211],"cryptocurrency":[10,12,34,86,112,147,212],"world,":[11],"wallets":[13,35,148],"allow":[14],"manage,":[17],"receive,":[18],"and":[19,25,44,64,94,149,192],"transmit":[20],"digital":[21],"assets":[22,176],"on":[23,158],"blockchains":[24],"interact":[26],"with":[27],"emerging":[28],"decentralized":[29],"finance":[30],"(DeFi)":[31],"applications.":[32],"Unfortunately,":[33],"have":[36,49,60,70,134,195],"always":[37],"been":[38,50,72,196],"prime":[40],"targets":[41],"attackers,":[43],"incidents":[45],"of":[46,85,110,168],"wallet":[47,119,131,162],"breaches":[48],"reported":[51,185],"from":[52,89,177,204],"time":[53],"time.":[55],"Although":[56],"some":[57],"recent":[58],"studies":[59],"characterized":[61],"vulnerabilities":[63],"scams":[65],"related":[66,210],"wallets,":[68,87],"they":[69],"mostly":[71],"studied":[73],"at":[74],"a":[75,106,124,189],"coarse":[76],"granularity,":[77],"overlooking":[78],"potential":[79,181],"risks":[80],"inherent":[81],"in":[82,101,118,188],"detailed":[83],"designs":[84],"especially":[88],"perspectives":[90],"including":[91],"user":[92],"interaction":[93],"advanced":[95],"features.":[96],"To":[97,114],"fill":[98],"void,":[100],"this":[102],"paper,":[103],"we":[104,121,164],"present":[105],"fine-grained":[107],"security":[108,116],"analysis":[109],"browser-based":[111,130,161],"wallets.":[113,213],"pinpoint":[115],"issues":[117,194],"components,":[120],"design":[122],"WalleTruth,":[123],"visual-oriented":[125],"testing":[126],"framework":[127],"specifically":[128],"extensions.":[132],"We":[133],"identified":[135],"12":[136],"attack":[137,153,182],"vectors":[138,183],"that":[139,166],"can":[140,170],"be":[141,171],"abused":[142,172],"by":[143],"attackers":[144],"exploit":[146],"exposed":[150],"21":[151],"concrete":[152],"strategies.":[154],"By":[155],"applying":[156],"WalleTruth":[157],"39":[159],"widely-adopted":[160],"extensions,":[163],"find":[165],"all":[167],"them":[169],"steal":[174],"crypto":[175],"innocent":[178],"users.":[179],"Identified":[180],"were":[184],"developers":[187],"timely":[190],"manner":[191],"26":[193],"patched":[197],"already.":[198],"This":[199],"calls":[200],"urgent":[202],"action":[203],"community":[206],"mitigate":[208],"threats":[209]},"counts_by_year":[],"updated_date":"2026-07-02T06:12:58.138171","created_date":"2026-07-01T00:00:00"}