{"id":"https://openalex.org/W4403520024","doi":"https://doi.org/10.1145/3691620.3695601","title":"COBRA: Interaction-Aware Bytecode-Level Vulnerability Detector for Smart Contracts","display_name":"COBRA: Interaction-Aware Bytecode-Level Vulnerability Detector for Smart Contracts","publication_year":2024,"publication_date":"2024-10-18","ids":{"openalex":"https://openalex.org/W4403520024","doi":"https://doi.org/10.1145/3691620.3695601"},"language":"en","primary_location":{"id":"doi:10.1145/3691620.3695601","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3691620.3695601","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053791262","display_name":"Wenkai Li","orcid":"https://orcid.org/0000-0002-4238-8846"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Wenkai Li","raw_affiliation_strings":["Hainan University, Hainan, China"],"affiliations":[{"raw_affiliation_string":"Hainan University, Hainan, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100634702","display_name":"Xiaoqi Li","orcid":"https://orcid.org/0000-0002-6012-9178"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoqi Li","raw_affiliation_strings":["Hainan University, Hainan, China"],"affiliations":[{"raw_affiliation_string":"Hainan University, Hainan, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101530716","display_name":"Zongwei Li","orcid":"https://orcid.org/0009-0008-7233-9464"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zongwei Li","raw_affiliation_strings":["Hainan University, Hainan, China"],"affiliations":[{"raw_affiliation_string":"Hainan University, Hainan, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100401884","display_name":"Yuqing Zhang","orcid":"https://orcid.org/0000-0001-8306-7195"},"institutions":[{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuqing Zhang","raw_affiliation_strings":["National Computer Network Intrusion Protection Center, University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"National Computer Network Intrusion Protection Center, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210108629","https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5053791262"],"corresponding_institution_ids":["https://openalex.org/I20942203"],"apc_list":null,"apc_paid":null,"fwci":3.2568,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.9338414,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1358","last_page":"1369"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9854999780654907,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.9732999801635742,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/bytecode","display_name":"Bytecode","score":0.874976396560669},{"id":"https://openalex.org/keywords/cobra","display_name":"Cobra","score":0.7948029041290283},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.671954870223999},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6466543674468994},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.5363038778305054},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.519770085811615},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.20119929313659668},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.19058316946029663},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.13223177194595337}],"concepts":[{"id":"https://openalex.org/C2779818221","wikidata":"https://www.wikidata.org/wiki/Q837330","display_name":"Bytecode","level":3,"score":0.874976396560669},{"id":"https://openalex.org/C2779547071","wikidata":"https://www.wikidata.org/wiki/Q608565","display_name":"Cobra","level":2,"score":0.7948029041290283},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.671954870223999},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6466543674468994},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.5363038778305054},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.519770085811615},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.20119929313659668},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.19058316946029663},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.13223177194595337},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3691620.3695601","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3691620.3695601","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Decent work and economic growth","score":0.44999998807907104,"id":"https://metadata.un.org/sdg/8"}],"awards":[{"id":"https://openalex.org/G4955479608","display_name":null,"funder_award_id":"62362021","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G969737726","display_name":null,"funder_award_id":"62402146","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W2539190473","https://openalex.org/W2789063661","https://openalex.org/W2955447707","https://openalex.org/W2963351448","https://openalex.org/W2982275082","https://openalex.org/W2985495886","https://openalex.org/W3007045600","https://openalex.org/W3022662270","https://openalex.org/W3089408602","https://openalex.org/W3094897602","https://openalex.org/W3098149161","https://openalex.org/W3119253238","https://openalex.org/W3160746813","https://openalex.org/W3165765140","https://openalex.org/W3174560274","https://openalex.org/W4285490412","https://openalex.org/W4285490420","https://openalex.org/W4285490458","https://openalex.org/W4288057718","https://openalex.org/W4308642223","https://openalex.org/W4308642997","https://openalex.org/W4316022171","https://openalex.org/W4318562169","https://openalex.org/W4384155542","https://openalex.org/W4384302865","https://openalex.org/W4389165109"],"related_works":["https://openalex.org/W3013135944","https://openalex.org/W3082827772","https://openalex.org/W3040253843","https://openalex.org/W2420328433","https://openalex.org/W3020570327","https://openalex.org/W2265857976","https://openalex.org/W4213166692","https://openalex.org/W3022609783","https://openalex.org/W4307011567","https://openalex.org/W3011601503"],"abstract_inverted_index":{"The":[0,128,182],"detection":[1],"of":[2,26,40,77,120,230],"vulnerabilities":[3,74],"in":[4,20,53,75,105,157,173,185],"smart":[5,18,27,79,125],"contracts":[6,19,28],"remains":[7],"a":[8,62,139,195],"significant":[9],"challenge.":[10],"While":[11],"numerous":[12],"tools":[13,35],"are":[14,31,102,135,189],"available":[15],"for":[16,144,191,209,224],"analyzing":[17],"source":[21],"code,":[22],"only":[23,42],"about":[24],"1.79%":[25],"on":[29],"Ethereum":[30],"open-source.":[32],"For":[33],"existing":[34],"that":[36,65,90,101,203],"target":[37],"bytecodes,":[38],"most":[39],"them":[41],"consider":[43],"the":[44,54,78,87,98,118,124,132,145,150,154,158,167,174,178,186,215,228,232,237,240],"semantic":[45,67,151],"logic":[46],"context":[47,68,152,168],"and":[48,69,169,197,239],"disregard":[49],"function":[50,70,99,121,133,170,210,234],"interface":[51,171],"information":[52],"bytecodes.":[55,127],"In":[56,227],"this":[57],"paper,":[58],"we":[59,108,165],"propose":[60],"COBRA,":[61],"novel":[63],"framework":[64,89],"integrates":[66],"interfaces":[71],"to":[72,96],"detect":[73],"bytecodes":[76,129],"contract.":[80],"To":[81],"our":[82],"best":[83],"knowledge,":[84],"COBRA":[85,220],"is":[86],"first":[88],"combines":[91],"these":[92],"two":[93],"features.":[94],"Moreover,":[95],"infer":[97],"signatures":[100,122,134],"not":[103],"present":[104,109],"signature":[106,211],"databases,":[107],"SRIF":[110,146,204],"(Signatures":[111],"Reverse":[112],"Inference":[113],"from":[114,123],"Functions),":[115],"automatically":[116],"learn":[117],"rules":[119],"contract":[126,179,183],"associated":[130],"with":[131,194],"collected":[136],"by":[137],"constructing":[138],"control":[140],"flow":[141],"graph":[142],"(CFG)":[143],"training.":[147],"We":[148],"optimize":[149],"using":[153],"operation":[155],"code":[156],"static":[159],"single":[160],"assignment":[161],"(SSA)":[162],"format.":[163],"Finally,":[164],"integrate":[166],"representations":[172],"latent":[175],"space":[176,188],"as":[177],"feature":[180,235],"embedding.":[181],"features":[184],"hidden":[187],"decoded":[190],"vulnerability":[192,225],"classifications":[193],"decoder":[196],"attention":[198],"module.":[199],"Experimental":[200],"results":[201],"demonstrate":[202],"can":[205],"achieve":[206],"94.76%":[207],"F1-score":[208,223],"inference.":[212],"Furthermore,":[213],"when":[214],"ground":[216],"truth":[217],"ABI":[218],"exists,":[219],"achieves":[221],"93.45%":[222],"classification.":[226],"absence":[229],"ABI,":[231],"inferred":[233],"fills":[236],"encoder,":[238],"system":[241],"accomplishes":[242],"an":[243],"89.46%":[244],"recall":[245],"rate.":[246]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2025-12-27T23:08:20.325037","created_date":"2025-10-10T00:00:00"}
