{"id":"https://openalex.org/W7128008570","doi":"https://doi.org/10.48550/arxiv.2602.04039","title":"Evaluating the Vulnerability Landscape of LLM-Generated Smart Contracts","display_name":"Evaluating the Vulnerability Landscape of LLM-Generated Smart Contracts","publication_year":2026,"publication_date":"2026-02-03","ids":{"openalex":"https://openalex.org/W7128008570","doi":"https://doi.org/10.48550/arxiv.2602.04039"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2602.04039","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125244400","display_name":"Hoang Long Do","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Do, Hoang Long","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015798498","display_name":"Nasrin Sohrabi","orcid":"https://orcid.org/0000-0002-8340-2261"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sohrabi, Nasrin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5016187400","display_name":"Muneeb Ul Hassan","orcid":"https://orcid.org/0000-0001-5109-9547"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hassan, Muneeb Ul","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.09720235,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.4555000066757202,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.4555000066757202,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.03720000013709068,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.03229999914765358,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/smart-contract","display_name":"Smart contract","score":0.6165000200271606},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.44339999556541443},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.41620001196861267},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.4059000015258789},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.39730000495910645},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.39259999990463257},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.38989999890327454}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6517000198364258},{"id":"https://openalex.org/C2779950589","wikidata":"https://www.wikidata.org/wiki/Q7544035","display_name":"Smart contract","level":3,"score":0.6165000200271606},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.512499988079071},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.49900001287460327},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.44339999556541443},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.41620001196861267},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.4059000015258789},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.39730000495910645},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3962000012397766},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.39259999990463257},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.38989999890327454},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.3276999890804291},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.31450000405311584},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.30790001153945923},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.29789999127388},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.2955000102519989},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.26579999923706055},{"id":"https://openalex.org/C168021876","wikidata":"https://www.wikidata.org/wiki/Q1353446","display_name":"Byzantine fault tolerance","level":3,"score":0.2587999999523163},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.2578999996185303},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.2554999887943268}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2602.04039","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2602.04039","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.04039","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.04039","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2],"(LLMs)":[3],"have":[4],"been":[5],"widely":[6],"adopted":[7],"in":[8,67,131,159],"modern":[9],"software":[10],"development":[11,30,182,209],"lifecycles,":[12],"where":[13],"they":[14],"are":[15,64],"increasingly":[16,37],"used":[17],"to":[18,41,124,184,200,212],"automate":[19],"and":[20,28,43,62,73,109,144,165,181,195,211],"assist":[21],"code":[22],"generation,":[23],"significantly":[24],"improving":[25],"developer":[26],"productivity":[27],"reducing":[29],"time.":[31],"In":[32,89],"the":[33,47,79,214,218],"blockchain":[34,219],"domain,":[35],"developers":[36,194],"rely":[38],"on":[39],"LLMs":[40,205],"generate":[42],"maintain":[44],"smart":[45,56,84,100,121,148,207],"contracts,":[46],"immutable,":[48],"self-executing":[49],"components":[50],"of":[51,82,98,119,204,217],"decentralized":[52],"applications.":[53],"Because":[54],"deployed":[55],"contracts":[57,85,101,114,149],"cannot":[58],"be":[59,157],"modified,":[60],"correctness":[61,143],"security":[63,80,96,153,216,223],"paramount,":[65],"particularly":[66],"high-stakes":[68],"domains":[69],"such":[70],"as":[71],"finance":[72],"governance.":[74],"Despite":[75],"this":[76,90],"growing":[77],"reliance,":[78],"implications":[81],"LLM-generated":[83,147],"remain":[86],"insufficiently":[87],"understood.":[88],"work,":[91],"we":[92,177],"conduct":[93],"a":[94,116],"systematic":[95],"analysis":[97],"Solidity":[99],"generated":[102],"by":[103],"state-of-the-art":[104],"LLMs,":[105],"including":[106],"ChatGPT,":[107],"Gemini,":[108],"Sonnet.":[110],"We":[111,162],"evaluate":[112],"these":[113,167,187],"against":[115,221],"broad":[117],"set":[118],"known":[120],"contract":[122,208],"vulnerabilities":[123],"assess":[125],"their":[126,141],"suitability":[127],"for":[128,192],"direct":[129],"deployment":[130],"production":[132],"environments.":[133],"Our":[134,197],"extensive":[135],"experimental":[136],"study":[137],"shows":[138],"that,":[139],"despite":[140],"syntactic":[142],"functional":[145],"completeness,":[146],"frequently":[150],"exhibit":[151],"severe":[152],"flaws":[154],"that":[155],"could":[156],"exploited":[158],"real-world":[160],"settings.":[161],"further":[163],"analyze":[164],"categorize":[166],"vulnerabilities,":[168],"identifying":[169],"recurring":[170],"weakness":[171],"patterns":[172],"across":[173],"different":[174],"models.":[175],"Finally,":[176],"discuss":[178],"practical":[179],"countermeasures":[180],"guidelines":[183],"help":[185],"mitigate":[186],"risks,":[188],"offering":[189],"actionable":[190],"insights":[191],"both":[193],"researchers.":[196],"findings":[198],"aim":[199],"support":[201],"safe":[202],"integration":[203],"into":[206],"workflows":[210],"strengthen":[213],"overall":[215],"ecosystem":[220],"future":[222],"failures.":[224]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-02-07T00:00:00"}
