{"id":"https://openalex.org/W7154111580","doi":"https://doi.org/10.31449/inf.v50i1.9267","title":"VeriChain: A Formal Verification Framework for Detecting Vulnerabilities in Blockchain Smart Contracts","display_name":"VeriChain: A Formal Verification Framework for Detecting Vulnerabilities in Blockchain Smart Contracts","publication_year":2026,"publication_date":"2026-04-13","ids":{"openalex":"https://openalex.org/W7154111580","doi":"https://doi.org/10.31449/inf.v50i1.9267"},"language":null,"primary_location":{"id":"doi:10.31449/inf.v50i1.9267","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i1.9267","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/9267/6601","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.informatica.si/index.php/informatica/article/download/9267/6601","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133478760","display_name":"Ramesh Vankudoth","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ramesh Vankudoth","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133511757","display_name":"Govardhan Reddy K","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Govardhan Reddy K","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.48006381,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"50","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.7556999921798706,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.7556999921798706,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.041200000792741776,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.040300000458955765,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.7563999891281128},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.5792999863624573},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.5720999836921692},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5174999833106995},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5138999819755554},{"id":"https://openalex.org/keywords/dependency-graph","display_name":"Dependency graph","score":0.4986000061035156},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.44429999589920044},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.44339999556541443},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.43560001254081726},{"id":"https://openalex.org/keywords/data-flow-analysis","display_name":"Data-flow analysis","score":0.4332999885082245}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8320000171661377},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.7563999891281128},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.5792999863624573},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.5720999836921692},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5174999833106995},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5138999819755554},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.4986000061035156},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.44429999589920044},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.44339999556541443},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.43560001254081726},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.4332999885082245},{"id":"https://openalex.org/C2779950589","wikidata":"https://www.wikidata.org/wiki/Q7544035","display_name":"Smart contract","level":3,"score":0.426800012588501},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4244000017642975},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.41269999742507935},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.37959998846054077},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.3682999908924103},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.36559998989105225},{"id":"https://openalex.org/C65620979","wikidata":"https://www.wikidata.org/wiki/Q7661176","display_name":"Symbolic data analysis","level":2,"score":0.3481000065803528},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.3357999920845032},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.33340001106262207},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3327000141143799},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33250001072883606},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.32359999418258667},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.32269999384880066},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.32109999656677246},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.32010000944137573},{"id":"https://openalex.org/C174839445","wikidata":"https://www.wikidata.org/wiki/Q1134386","display_name":"Lock (firearm)","level":2,"score":0.31690001487731934},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.30570000410079956},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.29280000925064087},{"id":"https://openalex.org/C11219265","wikidata":"https://www.wikidata.org/wiki/Q5158734","display_name":"Concolic testing","level":4,"score":0.2906000018119812},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.28519999980926514},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.2838999927043915},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.2671000063419342},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.2667999863624573},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C91071405","wikidata":"https://www.wikidata.org/wiki/Q1413145","display_name":"Program slicing","level":3,"score":0.257999986410141},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.25369998812675476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.31449/inf.v50i1.9267","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i1.9267","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/9267/6601","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.31449/inf.v50i1.9267","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i1.9267","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/9267/6601","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6993618607521057,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7154111580.pdf","grobid_xml":"https://content.openalex.org/works/W7154111580.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"With":[0,260],"the":[1,12,102,127,133,180,240,250],"help":[2],"of":[3,86,97,150,169,175,182],"pact":[4],"technology,":[5],"a":[6,84,148,212,221,234],"program":[7],"that":[8,157,194,249],"has":[9,211],"been":[10],"developed,":[11],"smart":[13,28,37,251],"contract":[14,56,287],"can":[15,158],"take":[16,83],"place":[17],"between":[18],"two":[19],"or":[20],"more":[21],"entities":[22],"without":[23],"any":[24],"third-party":[25],"actor.":[26],"Although":[27],"contracts":[29,38,252],"provide":[30],"transparency":[31],"and":[32,48,62,70,90,118,125,146,173,204,220,245,295],"efficiency,":[33],"security":[34,236,257,296],"flaws":[35],"in":[36,41,227,283],"have":[39,79],"resulted":[40],"costly":[42],"attacks,":[43],"including":[44],"re-entrancy,":[45],"integer":[46],"overflows,":[47],"access":[49],"control":[50],"violations.":[51],"Current":[52],"tools":[53,78],"for":[54,152,292],"intelligent":[55],"verification,":[57],"such":[58],"as":[59],"Mythril,":[60,202],"Oyente,":[61,203],"Securify,":[63],"mainly":[64],"apply":[65],"symbolic":[66,116,144],"execution,":[67,117,145],"taint":[68],"analysis,":[69,115],"pattern":[71],"matching":[72],"to":[73,88,121,207,243,263,273,289],"identify":[74],"vulnerabilities.":[75,160],"However,":[76],"these":[77],"many":[80],"false":[81,183,218],"positives,":[82],"lot":[85],"time":[87,225],"execute,":[89],"don't":[91],"scale":[92],"efficiently":[93,268],"with":[94,143],"large":[95],"numbers":[96],"contracts.":[98],"In":[99],"this":[100],"context,":[101],"paper":[103],"presents":[104],"VeriChain.":[105],"This":[106,231],"formal":[107],"verification":[108,258],"framework":[109,232],"combines":[110],"Control":[111,135],"Flow":[112,136],"Graph":[113,137],"(CFG)":[114],"static":[119,155],"analysis":[120,156,168],"improve":[122],"vulnerability":[123],"detection":[124,188,198],"tackle":[126],"challenges":[128],"above.":[129],"VeriChain":[130,165,195,210,277],"systematically":[131],"constructs":[132],"contract\u2019s":[134],"(CFG),":[138],"explores":[139],"CFG":[140],"execution":[141,176,224,246],"paths":[142],"employs":[147],"set":[149],"rules":[151],"performing":[153],"rule-based":[154],"uncover":[159],"Using":[161],"CFG-based":[162],"dependency":[163],"tracking,":[164],"achieves":[166],"enhanced":[167],"dependencies":[170],"among":[171],"functions":[172],"coverage":[174],"paths,":[177],"thereby":[178],"reducing":[179],"number":[181],"positives":[184],"while":[185],"achieving":[186],"accurate":[187,266],"results.":[189],"The":[190],"experimental":[191],"results":[192,267],"show":[193],"obtains":[196],"98.3%":[197],"accuracy,":[199],"higher":[200],"than":[201],"Securify.":[205],"Compared":[206],"existing":[208],"tools,":[209],"much":[213,222],"lower":[214],"false-positive":[215],"rate":[216],"(1":[217],"alarm)":[219],"faster":[223],"(Running":[226],"only":[228],"2.3":[229],"seconds).":[230],"gives":[233],"structured":[235,271],"assessment":[237],"by":[238],"categorizing":[239],"vulnerabilities":[241],"according":[242],"severity":[244],"traces,":[247],"ensuring":[248],"are":[253],"accessed":[254],"under":[255],"heavy":[256],"pre-deployment.":[259],"its":[261],"ability":[262],"accomplish":[264],"highly":[265],"whilst":[269],"providing":[270],"ways":[272],"report":[274],"on":[275],"security,":[276],"will":[278],"be":[279],"an":[280],"influential":[281],"component":[282],"delivering":[284],"safe,":[285],"innovative":[286],"launches":[288],"decentralized":[290],"applications":[291],"blockchain":[293],"developers":[294],"analysts.":[297]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-04-14T00:00:00"}