{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:76VOD4IK3A5DUD4VESUDJ5GG2L","short_pith_number":"pith:76VOD4IK","canonical_record":{"source":{"id":"1810.11605","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-27T06:41:38Z","cross_cats_sorted":[],"title_canon_sha256":"8028850a22e0550d615c8ac645086d613dbf4c15eea1bdcebc5d2bc6775a5efa","abstract_canon_sha256":"33042f1912e1945befd21b17105ffde1c25efae356195ec4241a41847c0264e1"},"schema_version":"1.0"},"canonical_sha256":"ffaae1f10ad83a3a0f9524a834f4c6d2e16cf0d61403b375ccb3b9aa23f42515","source":{"kind":"arxiv","id":"1810.11605","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1810.11605","created_at":"2026-05-18T00:02:08Z"},{"alias_kind":"arxiv_version","alias_value":"1810.11605v1","created_at":"2026-05-18T00:02:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1810.11605","created_at":"2026-05-18T00:02:08Z"},{"alias_kind":"pith_short_12","alias_value":"76VOD4IK3A5D","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"76VOD4IK3A5DUD4V","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"76VOD4IK","created_at":"2026-05-18T12:32:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:76VOD4IK3A5DUD4VESUDJ5GG2L","target":"record","payload":{"canonical_record":{"source":{"id":"1810.11605","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-27T06:41:38Z","cross_cats_sorted":[],"title_canon_sha256":"8028850a22e0550d615c8ac645086d613dbf4c15eea1bdcebc5d2bc6775a5efa","abstract_canon_sha256":"33042f1912e1945befd21b17105ffde1c25efae356195ec4241a41847c0264e1"},"schema_version":"1.0"},"canonical_sha256":"ffaae1f10ad83a3a0f9524a834f4c6d2e16cf0d61403b375ccb3b9aa23f42515","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:02:08.083199Z","signature_b64":"RFA1BAlvY/SaAKu7QeH4SLSHecQxJeVQCPn5hewRVYAMNSIZMrgyZhQ4cQL9l+SlolbQ1SIrrqIK0iIHpACJCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ffaae1f10ad83a3a0f9524a834f4c6d2e16cf0d61403b375ccb3b9aa23f42515","last_reissued_at":"2026-05-18T00:02:08.082377Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:02:08.082377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1810.11605","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:02:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WhelWCAJO1M3XSIU/zGvtPfwruwFZY6Hz1BDXkaOgdZX8J0UH4vnp58LiC3E5HhBlv822MYq/XpPMyLqxfx5Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-03T08:37:26.608565Z"},"content_sha256":"897c4970f26835133a3d49254cf06a212b9fe17a289aef5ee83b35af1facbd5a","schema_version":"1.0","event_id":"sha256:897c4970f26835133a3d49254cf06a212b9fe17a289aef5ee83b35af1facbd5a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:76VOD4IK3A5DUD4VESUDJ5GG2L","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploiting The Laws of Order in Smart Contracts","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Aashish Kolluri, Aquinas Hobor, Ilya Sergey, Ivica Nikolic, Prateek Saxena","submitted_at":"2018-10-27T06:41:38Z","abstract_excerpt":"We investigate a family of bugs in blockchain-based smart contracts, which we call event-ordering (or EO) bugs. These bugs are intimately related to the dynamic ordering of contract events, i.e., calls of its functions on the blockchain, and enable potential exploits of millions of USD worth of Ether. Known examples of such bugs and prior techniques to detect them have been restricted to a small number of event orderings, typicall 1 or 2. Our work provides a new formulation of this general class of EO bugs as finding concurrency properties arising in long permutations of such events. The techn"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1810.11605","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:02:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UUVfImQTcS8ttD06LGxUf8RcdhDDSwTJTnz6eLmwMs+XzOqtEZC7+otBg8i5qLnFJiSrYKjhVuWjime0CFT2DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-03T08:37:26.608913Z"},"content_sha256":"91d4df6ad7d2a01170e2a722b2e4dd4996484a50e04e33e12ab88e0a1f424204","schema_version":"1.0","event_id":"sha256:91d4df6ad7d2a01170e2a722b2e4dd4996484a50e04e33e12ab88e0a1f424204"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/76VOD4IK3A5DUD4VESUDJ5GG2L/bundle.json","state_url":"https://pith.science/pith/76VOD4IK3A5DUD4VESUDJ5GG2L/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/76VOD4IK3A5DUD4VESUDJ5GG2L/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-03T08:37:26Z","links":{"resolver":"https://pith.science/pith/76VOD4IK3A5DUD4VESUDJ5GG2L","bundle":"https://pith.science/pith/76VOD4IK3A5DUD4VESUDJ5GG2L/bundle.json","state":"https://pith.science/pith/76VOD4IK3A5DUD4VESUDJ5GG2L/state.json","well_known_bundle":"https://pith.science/.well-known/pith/76VOD4IK3A5DUD4VESUDJ5GG2L/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:76VOD4IK3A5DUD4VESUDJ5GG2L","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"33042f1912e1945befd21b17105ffde1c25efae356195ec4241a41847c0264e1","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-27T06:41:38Z","title_canon_sha256":"8028850a22e0550d615c8ac645086d613dbf4c15eea1bdcebc5d2bc6775a5efa"},"schema_version":"1.0","source":{"id":"1810.11605","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1810.11605","created_at":"2026-05-18T00:02:08Z"},{"alias_kind":"arxiv_version","alias_value":"1810.11605v1","created_at":"2026-05-18T00:02:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1810.11605","created_at":"2026-05-18T00:02:08Z"},{"alias_kind":"pith_short_12","alias_value":"76VOD4IK3A5D","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"76VOD4IK3A5DUD4V","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"76VOD4IK","created_at":"2026-05-18T12:32:11Z"}],"graph_snapshots":[{"event_id":"sha256:91d4df6ad7d2a01170e2a722b2e4dd4996484a50e04e33e12ab88e0a1f424204","target":"graph","created_at":"2026-05-18T00:02:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We investigate a family of bugs in blockchain-based smart contracts, which we call event-ordering (or EO) bugs. These bugs are intimately related to the dynamic ordering of contract events, i.e., calls of its functions on the blockchain, and enable potential exploits of millions of USD worth of Ether. Known examples of such bugs and prior techniques to detect them have been restricted to a small number of event orderings, typicall 1 or 2. Our work provides a new formulation of this general class of EO bugs as finding concurrency properties arising in long permutations of such events. The techn","authors_text":"Aashish Kolluri, Aquinas Hobor, Ilya Sergey, Ivica Nikolic, Prateek Saxena","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-27T06:41:38Z","title":"Exploiting The Laws of Order in Smart Contracts"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1810.11605","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:897c4970f26835133a3d49254cf06a212b9fe17a289aef5ee83b35af1facbd5a","target":"record","created_at":"2026-05-18T00:02:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"33042f1912e1945befd21b17105ffde1c25efae356195ec4241a41847c0264e1","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-27T06:41:38Z","title_canon_sha256":"8028850a22e0550d615c8ac645086d613dbf4c15eea1bdcebc5d2bc6775a5efa"},"schema_version":"1.0","source":{"id":"1810.11605","kind":"arxiv","version":1}},"canonical_sha256":"ffaae1f10ad83a3a0f9524a834f4c6d2e16cf0d61403b375ccb3b9aa23f42515","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ffaae1f10ad83a3a0f9524a834f4c6d2e16cf0d61403b375ccb3b9aa23f42515","first_computed_at":"2026-05-18T00:02:08.082377Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:02:08.082377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RFA1BAlvY/SaAKu7QeH4SLSHecQxJeVQCPn5hewRVYAMNSIZMrgyZhQ4cQL9l+SlolbQ1SIrrqIK0iIHpACJCw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:02:08.083199Z","signed_message":"canonical_sha256_bytes"},"source_id":"1810.11605","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:897c4970f26835133a3d49254cf06a212b9fe17a289aef5ee83b35af1facbd5a","sha256:91d4df6ad7d2a01170e2a722b2e4dd4996484a50e04e33e12ab88e0a1f424204"],"state_sha256":"b2cec153a0613431d321a2107e0506838761104846d7197dc22e528da9c0aabd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kqrJ2EUvFFsxgXJzAULPloAQBc9iSmaJt1yzoZFf92gPQm0oNrezNrW0iKIljLoc07sehcAcGCO/izRrljPNCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-03T08:37:26.610894Z","bundle_sha256":"5512d2c12caaabf76c561460c190375e86a5eead368fa7f21c6d5f676067e583"}}