{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JXTFE5QB3HQ4IJGYFZBMHBKGZX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0f19fbee22d19c08a339034cc7b8a6455b47a0557caf6bcb0f70b4025922a608","cross_cats_sorted":["cs.PL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-28T09:53:31Z","title_canon_sha256":"8e8589422f49ee59e2be9d54babea48dc48ec22ffcbc4d884d268e5cd782fc20"},"schema_version":"1.0","source":{"id":"2507.20672","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.20672","created_at":"2026-07-05T11:44:23Z"},{"alias_kind":"arxiv_version","alias_value":"2507.20672v1","created_at":"2026-07-05T11:44:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.20672","created_at":"2026-07-05T11:44:23Z"},{"alias_kind":"pith_short_12","alias_value":"JXTFE5QB3HQ4","created_at":"2026-07-05T11:44:23Z"},{"alias_kind":"pith_short_16","alias_value":"JXTFE5QB3HQ4IJGY","created_at":"2026-07-05T11:44:23Z"},{"alias_kind":"pith_short_8","alias_value":"JXTFE5QB","created_at":"2026-07-05T11:44:23Z"}],"graph_snapshots":[{"event_id":"sha256:159bf8b4755d9bc0fff57681e999d50dd46e5c3b0d18689787340a4ad092a3a1","target":"graph","created_at":"2026-07-05T11:44:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.20672/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A widespread belief in the blockchain security community is that automated techniques are only good for detecting shallow bugs, typically of small value. In this paper, we present the techniques and insights that have led us to repeatable success in automatically discovering high-value smart contract vulnerabilities. Our vulnerability disclosures have yielded 10 bug bounties, for a total of over $3M, over high-profile deployed code, as well as hundreds of bugs detected in pre-deployment or under-audit code.\n  We argue that the elements of this surprising success are a) a very high-completeness","authors_text":"Ilias Tsatiris, Konstantinos Triantafyllou, Neville Grech, Sifis Lagouvardos, Tony Rocco Valentine, Yannis Bollanos, Yannis Smaragdakis","cross_cats":["cs.PL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-28T09:53:31Z","title":"Program Analysis for High-Value Smart Contract Vulnerabilities: Techniques and Insights"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.20672","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:011a74b988775e910679fb17213ed7d71489ac37596b6e9571cb76abc4d734e4","target":"record","created_at":"2026-07-05T11:44:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0f19fbee22d19c08a339034cc7b8a6455b47a0557caf6bcb0f70b4025922a608","cross_cats_sorted":["cs.PL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-28T09:53:31Z","title_canon_sha256":"8e8589422f49ee59e2be9d54babea48dc48ec22ffcbc4d884d268e5cd782fc20"},"schema_version":"1.0","source":{"id":"2507.20672","kind":"arxiv","version":1}},"canonical_sha256":"4de6527601d9e1c424d82e42c38546cdcda3f0b44e6bbd01d9d42166fbd49ebb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4de6527601d9e1c424d82e42c38546cdcda3f0b44e6bbd01d9d42166fbd49ebb","first_computed_at":"2026-07-05T11:44:23.903671Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:44:23.903671Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/QmHrMunzQQNsCPi7zKF5Gtx8XgsSJOtrAfNa7G5DWW4Q2usB1CbX3VAA1NAvunYaxYiHFjFsYaPkJkWFAoDCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:44:23.904144Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.20672","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:011a74b988775e910679fb17213ed7d71489ac37596b6e9571cb76abc4d734e4","sha256:159bf8b4755d9bc0fff57681e999d50dd46e5c3b0d18689787340a4ad092a3a1"],"state_sha256":"8d1ec49f3a0ac1baf2353045cceb3976630128936206768040969f5c03c27200"}