{"id":"https://openalex.org/W7130844558","doi":"https://doi.org/10.31449/inf.v50i6.8593","title":"SmartScan: A Finite State Machine and CTL-Based Formal Verification Framework for Enhanced Security in Smart Contracts","display_name":"SmartScan: A Finite State Machine and CTL-Based Formal Verification Framework for Enhanced Security in Smart Contracts","publication_year":2026,"publication_date":"2026-02-21","ids":{"openalex":"https://openalex.org/W7130844558","doi":"https://doi.org/10.31449/inf.v50i6.8593"},"language":null,"primary_location":{"id":"doi:10.31449/inf.v50i6.8593","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i6.8593","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/8593/6450","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.informatica.si/index.php/informatica/article/download/8593/6450","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126545877","display_name":"G. Sowmya","orcid":null},"institutions":[{"id":"https://openalex.org/I10874241","display_name":"Jawaharlal Nehru Technological University, Hyderabad","ror":"https://ror.org/002tchr49","country_code":"IN","type":"education","lineage":["https://openalex.org/I10874241"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"G. Sowmya","raw_affiliation_strings":["JNTUH, Department of CSE, Hyderabad, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"JNTUH, Department of CSE, Hyderabad, India","institution_ids":["https://openalex.org/I10874241"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5126559078","display_name":"R. Sridevi","orcid":null},"institutions":[{"id":"https://openalex.org/I10874241","display_name":"Jawaharlal Nehru Technological University, Hyderabad","ror":"https://ror.org/002tchr49","country_code":"IN","type":"education","lineage":["https://openalex.org/I10874241"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"R. Sridevi","raw_affiliation_strings":["JNTUH, Department of CSE, Hyderabad, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"JNTUH, Department of CSE, Hyderabad, India","institution_ids":["https://openalex.org/I10874241"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I10874241"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14379579,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"50","issue":"6","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.6452999711036682,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.6452999711036682,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.1712000072002411,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.01679999940097332,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/solidity","display_name":"Solidity","score":0.739300012588501},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.7129999995231628},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.6463000178337097},{"id":"https://openalex.org/keywords/runtime-verification","display_name":"Runtime verification","score":0.583899974822998},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.5375000238418579},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.5356000065803528},{"id":"https://openalex.org/keywords/formal-methods","display_name":"Formal methods","score":0.48249998688697815},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.4781000018119812},{"id":"https://openalex.org/keywords/functional-verification","display_name":"Functional verification","score":0.44670000672340393},{"id":"https://openalex.org/keywords/counterexample","display_name":"Counterexample","score":0.3930000066757202}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7882000207901001},{"id":"https://openalex.org/C2778362873","wikidata":"https://www.wikidata.org/wiki/Q24909565","display_name":"Solidity","level":2,"score":0.739300012588501},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.7129999995231628},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.6463000178337097},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.583899974822998},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.5375000238418579},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.5356000065803528},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.48249998688697815},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.4781000018119812},{"id":"https://openalex.org/C62460635","wikidata":"https://www.wikidata.org/wiki/Q5508853","display_name":"Functional verification","level":3,"score":0.44670000672340393},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4262000024318695},{"id":"https://openalex.org/C162838799","wikidata":"https://www.wikidata.org/wiki/Q596077","display_name":"Counterexample","level":2,"score":0.3930000066757202},{"id":"https://openalex.org/C167822520","wikidata":"https://www.wikidata.org/wiki/Q176452","display_name":"Finite-state machine","level":2,"score":0.39089998602867126},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.37389999628067017},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.36469998955726624},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.3635999858379364},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.34880000352859497},{"id":"https://openalex.org/C3406870","wikidata":"https://www.wikidata.org/wiki/Q6044160","display_name":"Intelligent verification","level":5,"score":0.34540000557899475},{"id":"https://openalex.org/C164155591","wikidata":"https://www.wikidata.org/wiki/Q2067766","display_name":"Satisfiability modulo theories","level":2,"score":0.3361000120639801},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.33489999175071716},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.32850000262260437},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.32670000195503235},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3176000118255615},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3098999857902527},{"id":"https://openalex.org/C94461902","wikidata":"https://www.wikidata.org/wiki/Q2762418","display_name":"Formal proof","level":3,"score":0.3061999976634979},{"id":"https://openalex.org/C198008173","wikidata":"https://www.wikidata.org/wiki/Q1040040","display_name":"Computation tree logic","level":3,"score":0.3059999942779541},{"id":"https://openalex.org/C206880738","wikidata":"https://www.wikidata.org/wiki/Q431667","display_name":"Automated theorem proving","level":2,"score":0.3003000020980835},{"id":"https://openalex.org/C203265346","wikidata":"https://www.wikidata.org/wiki/Q11387554","display_name":"Proof assistant","level":3,"score":0.29910001158714294},{"id":"https://openalex.org/C159023740","wikidata":"https://www.wikidata.org/wiki/Q623276","display_name":"Deadlock","level":2,"score":0.29739999771118164},{"id":"https://openalex.org/C33054407","wikidata":"https://www.wikidata.org/wiki/Q6504747","display_name":"Software verification","level":5,"score":0.296099990606308},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.2928999960422516},{"id":"https://openalex.org/C2779950589","wikidata":"https://www.wikidata.org/wiki/Q7544035","display_name":"Smart contract","level":3,"score":0.2824000120162964},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.2700999975204468},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.2533000111579895},{"id":"https://openalex.org/C2779907942","wikidata":"https://www.wikidata.org/wiki/Q7239630","display_name":"Predicate abstraction","level":3,"score":0.2531999945640564},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.31449/inf.v50i6.8593","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i6.8593","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/8593/6450","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.31449/inf.v50i6.8593","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i6.8593","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/8593/6450","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6830654144287109}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7130844558.pdf","grobid_xml":"https://content.openalex.org/works/W7130844558.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Smart":[0],"contracts":[1,167,263],"are":[2,71],"self-executing":[3],"programs":[4],"deployed":[5],"on":[6,73,161],"blockchain":[7,255],"platforms":[8],"that":[9,102],"facilitateautomated":[10],"and":[11,32,38,53,89,111,128,135,153,182,191,216,221,246,252],"decentralized":[12],"transactions.":[13],"However,":[14],"once":[15],"deployed,":[16],"they":[17],"become":[18],"immutable,":[19],"makingthem":[20],"vulnerable":[21],"to":[22,131,149,248],"catastrophic":[23],"exploits,":[24],"such":[25,48,218,231],"as":[26,42,49,219,232],"reentrancy,":[27],"access":[28,222],"control":[29,223],"misconfiguration,":[30],"integeroverflow,":[31],"front-running.":[33],"The":[34],"need":[35],"for":[36,63,197],"proof":[37],"verification":[39,100,136,189,260],"is":[40],"urgent,":[41],"evidenced":[43],"by":[44,107,257],"other":[45],"highprofile,capital-draining":[46],"incidents,":[47],"the":[50,132,250],"DAO":[51],"attack":[52],"Parity":[54],"wallet":[55],"vulnerabilities.":[56,171],"Abstract:We":[57],"present":[58],"ContractFuzzer,":[59],"a":[60,98,210,237,243],"systematic":[61],"fuzzer":[62],"detecting":[64],"vulnerabilities":[65],"in":[66,115,151,203,214,233],"Ethereum":[67],"smartcontracts.":[68],"Existing":[69],"tools":[70,202],"based":[72],"static":[74],"analysis,":[75],"symbolic":[76],"execution,":[77],"or":[78],"heuristic":[79],"detection,":[80],"andthus":[81],"typically":[82],"impose":[83],"high":[84],"false":[85,184],"positives,":[86],"low":[87],"completeness,":[88],"limited":[90],"formal":[91,99],"verification.":[92],"In":[93],"thispaper,":[94],"we":[95],"introduce":[96],"SmartScan,":[97],"framework":[101],"systematically":[103],"checks":[104],"smartcontract":[105],"security":[106,139],"integrating":[108],"FSM":[109,127],"modeling":[110],"CTL-based":[112],"model":[113],"checking":[114],"nuXmv.":[116],"Ourmethodology":[117],"performs":[118],"automatic":[119],"parsing":[120],"of":[121,126,137,165,194,236,254,261],"Solidity":[122,166],"code,":[123],"automated":[124,146,265],"generation":[125,148],"BIPmodels,":[129],"conversion":[130],"SMV":[133],"format,":[134],"CTL":[138],"properties.":[140],"It":[141],"responds":[142],"todetected":[143],"violations":[144],"with":[145,187,264],"counterexample":[147,266],"assist":[150],"debugging":[152],"iterative":[154],"reverification.For":[155],"validation,":[156],"SmartScan":[157,208,241],"will":[158],"be":[159],"tested":[160],"10":[162],"different":[163],"types":[164],"thataddress":[168],"14":[169],"critical":[170],"Our":[172],"experimental":[173],"results":[174],"show":[175],"95.4%":[176],"detection":[177],"accuracy,":[178],"3.2%":[179],"falsepositive":[180],"rate,":[181,186],"2.8%":[183],"negative":[185],"100%":[188],"coverage,":[190],"average":[192],"verificationtime":[193],"3\u20137":[195],"seconds":[196],"each":[198],"property,":[199],"outperforming":[200],"state-of-the-art":[201],"both":[204],"coverage":[205],"andprecision.":[206],"SmartScan:":[207],"has":[209,227],"wide-ranging":[211],"practical":[212],"utility":[213],"discovering":[215],"diagnosingvulnerabilities":[217],"reentrancy":[220],"issues,":[224],"which":[225],"it":[226],"been":[228],"applied":[229],"in,":[230],"acase":[234],"study":[235],"DeFi":[238],"Lending":[239],"contract.":[240],"provides":[242],"scalable,":[244],"precise,":[245],"developer-centricapproach":[247],"improve":[249],"confidence":[251],"reliability":[253],"applications":[256],"combining":[258],"exhaustiveformal":[259],"smart":[262],"generation.":[267]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-02-22T00:00:00"}