paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Why Is My Transaction Risky? Understanding Smart Contract Semantics and Interactions in the NFT Ecosystem

为什么我的交易有风险?理解 NFT 生态系统中智能合约的语义与交互
ASE 2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)2025匹配度 1/10 · 该论文是区块链NFT生态的大规模实证安全研究,关注智能合约语义与交互及诈骗风险,不属于用户关注的PL与AI交叉、静态分析、浮点或贝叶斯程序分析方向。引用 0 inbox
Yujing Chen, Xuanming Liu, Zhiyuan Wan, Zuobin Wang, David Lo, Difan Xie, Xiaohu Yang
crossref: 2026-09-12

AI 速览

一句话:通过对近1亿笔交易的大规模实证研究,揭示了NFT生态中智能合约的语义多样性、交互模式及其与诈骗代币风险交易的关系。

NFT生态中诈骗代币给用户带来严重金融风险,但现有研究缺乏对交易过程中智能合约语义与交互的理解。本文基于以太坊上约1亿笔交易、2000万个区块的数据集,开展大规模实证研究。研究发现:NFT生态中智能合约语义多样性有限,以代理、代币和DeFi合约为主;市场和代理注册合约在交易交互中最活跃;代币合约字节码呈现多样性,而诈骗代币字节码则趋于收敛;某些合约间交互模式同时出现在风险与非风险交易中,另一些则主要与风险交易相关。基于这些发现,作者为区块链生态风险缓解提出建议并展望未来研究方向。

问题
NFT生态中诈骗代币风险突出,但智能合约的语义与交互如何影响交易风险尚不明确。
方法
利用以太坊近1亿笔交易、2000万区块的数据集,对智能合约语义、字节码多样性和交互模式进行大规模实证分析。
评估
基于真实交易数据的量化分析,对比风险与非风险交易中的合约交互模式,识别与风险相关的模式。
原文摘要(Abstract)

The NFT ecosystem represents an interconnected, decentralized environment that encompasses the creation, distribution, and trading of Non-Fungible Tokens (NFTs), where key actors, such as marketplaces, sellers, and buyers, utilize smart contracts to facilitate secure, transparent, and trustless transactions. Scam tokens are deliberately created to mislead users and facilitate financial exploitation, posing significant risks in the NFT ecosystem. Prior work has explored the NFT ecosystem from various perspectives, including security challenges, actor behaviors, and risks from scams and wash trading, leaving a gap in understanding the semantics and interactions of smart contracts during transactions, and how the risks associated with scam tokens manifest in relation to the semantics and interactions of contracts. To bridge this gap, we conducted a large-scale empirical study on smart contract semantics and interactions in the NFT ecosystem, using a curated dataset of nearly 100 million transactions across 20 million blocks on Ethereum. We observe a limited semantic diversity among smart contracts in the NFT ecosystem, dominated by proxy, token, and DeFi contracts. Marketplace and proxy registry contracts are the most frequently involved in smart contract interactions during transactions, engaging with a broad spectrum of contracts in the ecosystem. Token contracts exhibit bytecode-level diversity, whereas scam tokens exhibit bytecode convergence. Certain interaction patterns between smart contracts are common to both risky and non-risky transactions, while others are predominantly associated with risky transactions. Based on our findings, we provide recommendations to mitigate risks in the blockchain ecosystem, and outline future research directions.

链接与引用

DOI 原文 ·

BibTeX
@inproceedings{paperbot9557,
  title = {Why Is My Transaction Risky? Understanding Smart Contract Semantics and Interactions in the NFT Ecosystem},
  author = {Yujing Chen and Xuanming Liu and Zhiyuan Wan and Zuobin Wang and David Lo and Difan Xie and Xiaohu Yang},
  booktitle = {ASE},
  year = {2025},
  doi = {10.1109/ase63991.2025.00172}
}