Pith. sign in

REVIEW 4 major objections 6 minor 80 references

SoK: Security and Privacy of AI Agents for Blockchain

T0 review · 4 major / 6 minor · reviewed 2026-08-15 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗ Review JSON

Pith's one-line read This paper presents the first systematization of AI agents for blockchain, organizing the field by agent autonomy and a four-layer architecture with security and privacy as the central lens.

desk verdict Useful, timely SoK with a sensible taxonomy, but the unverified 'comprehensive' claim and an internal contradiction in the deployment gap need fixing before it can be trusted as authoritative. read the letter →

arxiv 2509.07131 v1 pith:JHY4SVXR submitted 2025-09-08 cs.CR cs.AI

Nicolò Romandini , Carlo Mazzocca , Kai Otsuki , Rebecca Montanari This is my paper · ORCID
classification cs.CRcs.AI
keywords AIagentsblockchainlargelanguagemodelssmartcontractssecurityprivacytaxonomyDeFi
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

AI agents that converse with users and move money or deploy contracts on blockchains are proliferating, but the paper argues no survey has treated them as their own domain with security and privacy as the lens. It claims to deliver the first Systematization of Knowledge for AI-driven blockchain systems, organizing the field with a three-level taxonomy of agents (conversational, instruction-following, goal-directed) and a four-layer reference architecture. The survey then maps representative systems and known threats onto that structure and identifies concrete gaps, including the absence of AI agents that handle smart-contract deployment and the lack of common benchmark datasets. A sympathetic reader would take the paper's contribution to be an organizing frame: once agents are sorted by autonomy and by layer, the field's open security problems become visible and comparable.

What carries the argument

The organizing device is the autonomy-based taxonomy overlaid on a modular reference architecture. The taxonomy splits AI4B systems into conversational, instruction-following, and goal-directed agents; the architecture supplies four layers (Application, AI Agent, Blockchain Interaction, Blockchain) and names the internal modules — planner, memory/context, validator, tool controller, evaluator/observer, wallet integration, human-in-the-loop — that security mechanisms attach to. This combined classification does the work of the paper: it positions every surveyed system in a shared structure, makes threat patterns legible by component, and turns 'there is no agent for X' into a checkable statement about a cell in the taxonomy.

What would settle it

A literature search that finds a peer-reviewed AI-agent system for smart-contract deployment published before this paper would contradict takeaway T-2; more broadly, applying explicit inclusion and exclusion criteria to the same search and showing that the taxonomy's cells leave a substantial fraction of systems unclassifiable would test the completeness claim.

Watch

Extended reading notes

Core claim

The paper's central claim is that the intersection 'AI agents for blockchain' is a distinct research area that existing surveys miss, and that it can be systematically organized. Its proposed taxonomy classifies agents by how they treat user input — as a question (conversational agents, read-only), as an instruction (instruction-following agents that build and submit transactions), or as a goal (goal-directed agents that plan and execute multi-step strategies autonomously). The accompanying reference architecture places these agents in four layers — Application, AI Agent, Blockchain Interaction, and Blockchain — with internal components such as planner, validator, memory, tool controller, and human-in-the-loop mechanisms. The paper uses this frame to review applications from blockchain data analysis and supply-chain traceability to DeFi portfolio management, DAO governance, and smart-contract development and auditing, and to enumerate threats such as prompt injection, fake-memory/context manipulation, privacy leakage, and autonomy-induced market risk. It concludes with gaps: no common benchmark for auditing agents, low-resource languages underserved, and no AI agent yet addressing smart-contract deployment.

Load-bearing premise

That the surveyed set of representative systems is complete enough to support 'first' and 'comprehensive,' and to support negative gap claims such as no AI agent addressing smart-contract deployment.

Editorial extensions

If this is right

  • Future work on blockchain agents can position new systems in the proposed taxonomy and architecture instead of re-describing them from scratch.
  • The identified gaps become a research agenda: smart-contract deployment support, low-resource languages like Vyper and Move, and community benchmark datasets are the paper's named open problems.
  • Security defenses can be mapped to architecture components — validator and trust-score modules, human-in-the-loop signing, memory integrity — giving designers a checklist rather than an ad hoc list of attacks.
  • If the taxonomy is adopted, comparing auditing or trading agents becomes a matter of comparing systems inside the same cell, which would sharpen evaluation.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • The autonomy axis implies a testable risk gradient: moving from conversational to instruction-following to goal-directed shifts the dominant failure mode from wrong information to unauthorized or irreversible transactions, a hypothesis one could quantify by measuring failure costs across the surveyed systems.
  • The paper's negative claim that no AI agent handles smart-contract deployment is timestamped; as tool-use and wallet-integration standards mature, that cell is a likely place for rapid filling, so the gap should be rechecked periodically rather than treated as permanent.
  • Privacy leakage through logs and over-access to wallet data may turn out to be the binding constraint for regulated use; the architecture's explicit placement of privacy modules suggests a design rule that agents should request the minimum chain data needed for the current task.
  • The taxonomy could be extended into a maturity scale for blockchain agents, with each autonomy level associated with required safety controls; the paper does not propose such a scale, but its categories make it straightforward to construct.
Share X Bluesky LinkedIn Reddit HN

Signed reviews

No signed human review yet.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

4 major / 6 minor

Summary. The paper presents a systematization of knowledge on AI-driven agents for blockchain, with a focus on security and privacy. It proposes a taxonomy of conversational, instruction-following, and goal-directed agents, introduces a four-layer reference architecture, surveys representative systems for blockchain interaction and smart contract development, discusses threats and risks, and identifies open challenges. The abstract and conclusion claim that this is the first comprehensive survey of AI agents within blockchain environments.

Significance. If the surveyed corpus is indeed complete and representative, the paper makes a useful contribution to a young and fragmented field: the taxonomy and four-layer reference architecture provide a shared vocabulary for system design, the application and threat surveys are clearly organized, and the dataset review in Section VI.C is practically informative. The paper also identifies concrete research gaps, such as the lack of common benchmarks and the absence of deployment-focused agents. The main risk is that the 'first' and 'comprehensive' claims depend on an unverified literature corpus, and the gap analysis includes a negative claim that is under-supported by the paper's own text.

major comments (4)
  1. [Section III, Tables I and II] The paper never documents a systematic literature search protocol: no search engines, databases, keywords, time window, inclusion/exclusion criteria, or screening process are provided. Because the paper's central contribution is the completeness of the corpus, asserted as 'first' in the abstract and 'comprehensive' in the conclusion, the absence of a reproducible selection method makes that claim unverifiable and weakens the negative gap claim in T-2.
  2. [Section VI.A.3 and T-2] There is an internal tension: Section VI.A.3 states that AI agents 'can serve as valuable tools' for deployment by suggesting gas optimizations and platform-compatibility adjustments (citing [63] and [73]), yet T-2 asserts that 'no AI agents have yet addressed' deployment. The authors should either identify concrete deployment-focused agent systems or explicitly explain why the cited works are not agents under their definition; as written, the takeaway is contradicted by their own text.
  3. [Section IV.A] The taxonomy is presented as exhaustive and the reference architecture as applicable to all surveyed systems, but no evidence is given that the three archetypes (conversational, instruction-following, goal-directed) are orthogonal or that each surveyed system maps cleanly onto one category. A mapping table, or at least a worked classification of every entry in Table I, would make this load-bearing contribution auditable.
  4. [Abstract and Section VIII] The 'first' claim is not substantiated beyond a brief review of five related surveys in Section III, and the abstract/conclusion assert the claim without qualification. The authors should either provide evidence from a broader related-work search or hedge the claim explicitly (e.g., 'to the best of our knowledge'), which is especially important given the undocumented corpus selection.
minor comments (6)
  1. [Section II.A] The text 'for many sections' should read 'for many sectors'.
  2. [Section IV.B.2] The heading 'Non-Normative Example' is unusual for a SoK; consider renaming it to 'Worked Example' or 'Illustrative Example'.
  3. [Section V.A.1] The description of Nguyen et al. [38] is repeated immediately after being introduced; consider consolidating the two passages.
  4. [Figure 2 caption] The caption lists components such as 'Natural Language Processing' and 'Security & Validation' that are not all visible in the figure's layer diagram; align the caption with the figure content.
  5. [Section VII.A] Rust is mentioned as a low-resource smart contract language, but Rust was not discussed earlier in the paper's language coverage; add a brief explanation or keep the language list consistent.
  6. [Abstract and Conclusion] The abstract claims 'first Systematization of Knowledge' while the conclusion claims 'first comprehensive systematization'; the statements should be unified and hedged consistently with the corpus limitations.

Circularity Check

0 steps flagged · score 1.0 of 10

No circular derivation: the taxonomy and reference architecture are organizational constructs, and the only self-citation is background material.

full rationale

This is a survey/SoK, not a derivation paper. The proposed taxonomy (Section IV.A) and reference architecture (Section IV.B) are explicitly introduced as organizational constructs ('we first propose a taxonomy' and 'we then present reference architectures'), not as results derived from first principles or from fitted data. The central claims are the gap statement, the classification of surveyed systems in Tables I and II, and the threat analysis; none of these is derived by construction from the taxonomy, and no equation or fitted parameter appears anywhere in the paper. The only self-citation is [2], the authors' earlier survey on Decentralized Identifiers and Verifiable Credentials, which is used as background to mention decentralized identity management and to explain DID within the ANP protocol description (Section II.C.3). That citation is not load-bearing for the SoK's novelty claim, taxonomy, or security analysis. The one substantive weakness is empirical rather than circular: the surveyed corpus is described as 'representative' but no systematic search protocol, inclusion criteria, or completeness argument is documented, so the 'first comprehensive' claim and the negative gap claim in T-2 rest on unverified corpus coverage. That is a correctness or support limitation, not a circular reduction, and it does not raise the circularity score. No self-definitional, fitted-input-called-prediction, uniqueness-imported, or self-citation-chain circularity was found.

Assumptions & free parameters 0 free parameters · 3 assumptions · 0 invented entities

The paper introduces no new physical entities, free parameters, or formal constructs. Its contributions are organizational, a taxonomy and a reference architecture, rather than empirical or mathematical, so the axiom ledger contains only the structural assumptions behind those organizational claims.

assumptions (3)
  • ad hoc to paper The classification of AI4B agents into conversational, instruction-following, and goal-directed is exhaustive and orthogonal.
    This is a design choice introduced in Section IV.A without validation that all existing or future systems fit one of these categories.
  • ad hoc to paper The four-layer reference architecture (Application, AI Agent, Blockchain Interaction, Blockchain) applies to all three agent archetypes and to all surveyed systems.
    Asserted in Section IV.B; no empirical check across the broader literature is offered.
  • domain assumption The surveyed literature is representative and complete enough to support the 'first' and 'comprehensive' claims, including negative claims about missing capabilities.
    The paper lacks a systematic search protocol with inclusion and exclusion criteria, so completeness is assumed rather than demonstrated.

how reviews work

0 comments
Cite this review

Pith. "Pith review of SoK: Security and Privacy of AI Agents for Blockchain." pith.science (2026). https://pith.science/paper/JHY4SVXR

@misc{pith2026250907131,
  author       = {Pith},
  title        = {Pith review of: SoK: Security and Privacy of AI Agents for Blockchain},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/JHY4SVXR}},
  note         = {Machine review of arXiv:2509.07131}
}
read the original abstract

Blockchain and smart contracts have garnered significant interest in recent years as the foundation of a decentralized, trustless digital ecosystem, thereby eliminating the need for traditional centralized authorities. Despite their central role in powering Web3, their complexity still presents significant barriers for non-expert users. To bridge this gap, Artificial Intelligence (AI)-based agents have emerged as valuable tools for interacting with blockchain environments, supporting a range of tasks, from analyzing on-chain data and optimizing transaction strategies to detecting vulnerabilities within smart contracts. While interest in applying AI to blockchain is growing, the literature still lacks a comprehensive survey that focuses specifically on the intersection with AI agents. Most of the related work only provides general considerations, without focusing on any specific domain. This paper addresses this gap by presenting the first Systematization of Knowledge dedicated to AI-driven systems for blockchain, with a special focus on their security and privacy dimensions, shedding light on their applications, limitations, and future research directions.

Figures

Figures reproduced from arXiv: 2509.07131 by the authors.

Figure 1
Figure 1. Overview of the interaction between a user and an AI agent for [PITH_FULL_IMAGE:figures/full_fig_p001_1.png] view at source ↗
Figure 2
Figure 2. Reference architecture of AI4B systems, showing the four-layer structure (Application, AI Agent, Blockchain Interaction, and Blockchain layers) and [PITH_FULL_IMAGE:figures/full_fig_p004_2.png] view at source ↗

Review history (2 revisions) →

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

80 extracted references · 46 canonical work pages

  1. [63]

    Unearthing Gas-Wasting Code Smells in Smart Contracts With Large Language Models,

    J. Jiang, Z. Li, H. Qin, M. Jiang, X. Luo, X. Wu, H. Wang, Y . Tang, C. Qian, and T. Chen, “Unearthing Gas-Wasting Code Smells in Smart Contracts With Large Language Models,”IEEE Transactions on Soft- ware Engineering, vol. 51, no. 4, pp. 879–903, 2025

    work page 2025

  2. [73]

    Smart Contract Development: Challenges and Opportunities,

    W. Zou, D. Lo, P. S. Kochhar, X.-B. D. Le, X. Xia, Y . Feng, Z. Chen, and B. Xu, “Smart Contract Development: Challenges and Opportunities,” IEEE Transactions on Software Engineering, vol. 47, no. 10, pp. 2084– 2106, 2021

    work page 2021

  3. [2]

    A Survey on Decentralized Identifiers and Verifiable Cre- dentials,

    C. Mazzocca, A. Acar, S. Uluagac, R. Montanari, P. Bellavista, and M. Conti, “A Survey on Decentralized Identifiers and Verifiable Cre- dentials,”IEEE Communications Surveys & Tutorials, pp. 1–1, 2025

    work page 2025

  4. [1]

    Know Your Transactions: Real-time and Generic Transaction Semantic Representation on Blockchain & Web3 Ecosystem,

    Z. Wu, J. Liu, J. Wu, Z. Zheng, X. Luo, and T. Chen, “Know Your Transactions: Real-time and Generic Transaction Semantic Representation on Blockchain & Web3 Ecosystem,” inProceedings of the ACM Web Conference 2023, ser. WWW ’23. New York, NY , USA: Association for Computing Machinery, 2023, p. 1918–1927. [Online]. Available: https://doi.org/10.1145/354350...

    arXiv 2023

  5. [3]

    Blockchain disruption and decentralized finance: The rise of decentralized business models,

    Y . Chen and C. Bellavitis, “Blockchain disruption and decentralized finance: The rise of decentralized business models,”Journal of Business Venturing Insights, vol. 13, p. e00151, 2020. [Online]. Available: https://www.sciencedirect.com/science/article/pii/S2352673419300824

    work page 2020

  6. [4]

    Blockchain: Challenges and applications,

    P. Tasatanattakool and C. Techapanupreeda, “Blockchain: Challenges and applications,” in2018 International Conference on Information Networking (ICOIN), 2018, pp. 473–475

    work page 2018

  7. [5]

    Towards Next-Generation Intelligent Assistants Leveraging LLM Techniques,

    X. L. Dong, S. Moon, Y . E. Xu, K. Malik, and Z. Yu, “Towards Next-Generation Intelligent Assistants Leveraging LLM Techniques,” inProceedings of the 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining, ser. KDD ’23. New York, NY , USA: Association for Computing Machinery, 2023, p. 5792–5793. [Online]. Available: https://doi.org/10.1145/3580...

    arXiv 2023

  8. [6]

    LLM- SmartAudit: Advanced Smart Contract Vulnerability Detection,

    Z. Wei, J. Sun, Z. Zhang, X. Zhang, M. Li, and Z. Hou, “LLM- SmartAudit: Advanced Smart Contract Vulnerability Detection,”arXiv preprint arXiv:2410.09381, 2024

    arXiv 2024

Show all 80 references
  1. [7]

    A Multi-Agent Frame- work for Automated Vulnerability Detection and Repair in Solidity and Move Smart Contracts,

    R. Karanjai, S. Blackshear, L. Xu, and W. Shi, “A Multi-Agent Frame- work for Automated Vulnerability Detection and Repair in Solidity and Move Smart Contracts,”arXiv preprint arXiv:2502.18515, 2025

    2025

  2. [8]

    Combining fine-tuning and llm-based agents for intuitive smart contract auditing with justifications,

    W. Ma, D. Wu, Y . Sun, T. Wang, S. Liu, J. Zhang, Y . Xue, and Y . Liu, “Combining fine-tuning and llm-based agents for intuitive smart contract auditing with justifications,”arXiv preprint arXiv:2403.16073, 2024

    2024 arXiv

  3. [9]

    Autonomous economic agents as a second layer technology for blockchains: Frame- work introduction and use-case demonstration,

    D. Minarsch, S. A. Hosseini, M. Favorito, and J. Ward, “Autonomous economic agents as a second layer technology for blockchains: Frame- work introduction and use-case demonstration,” in2020 Crypto Valley Conference on Blockchain Technology (CVCBT). IEEE, 2020, pp. 27– 35

    2020

  4. [10]

    Autonomous economic agent framework,

    D. Minarsch, M. Favorito, S. A. Hosseini, Y . Turchenkov, and J. Ward, “Autonomous economic agent framework,” inInternational Workshop on Engineering Multi-Agent Systems. Springer, 2021, pp. 237–253

    2021

  5. [11]

    A survey of ai agent protocols,

    Y . Yang, H. Chai, Y . Song, S. Qi, M. Wen, N. Li, J. Liao, H. Hu, J. Lin, G. Changet al., “A survey of ai agent protocols,”arXiv preprint arXiv:2504.16736, 2025

    2025 arXiv

  6. [12]

    Multi-Agent Collaboration Mechanisms: A Survey of LLMs,

    K.-T. Tran, D. Dao, M.-D. Nguyen, Q.-V . Pham, B. O’Sullivan, and H. D. Nguyen, “Multi-Agent Collaboration Mechanisms: A Survey of LLMs,”arXiv preprint arXiv:2501.06322, 2025

    2025 arXiv

  7. [13]

    Internet of agents: Fundamentals, applications, and challenges,

    Y . Wang, S. Guo, Y . Pan, Z. Su, F. Chen, T. H. Luan, P. Li, J. Kang, and D. Niyato, “Internet of agents: Fundamentals, applications, and challenges,”arXiv preprint arXiv:2505.07176, 2025

    2025

  8. [14]

    Security of Internet of Agents: Attacks and Countermeasures,

    Y . Wang, Y . Pan, S. Guo, and Z. Su, “Security of Internet of Agents: Attacks and Countermeasures,”arXiv preprint arXiv:2505.08807, 2025

    2025 arXiv

  9. [15]

    Ai agents under threat: A survey of key security challenges and future pathways,

    Z. Deng, Y . Guo, C. Han, W. Ma, J. Xiong, S. Wen, and Y . Xiang, “Ai agents under threat: A survey of key security challenges and future pathways,”ACM Comput. Surv., vol. 57, no. 7, Feb. 2025. [Online]. Available: https://doi.org/10.1145/3716628

    2025 doi

  10. [16]

    A Survey on Blockchain: A Game Theoretical Perspective,

    Z. Liu, N. C. Luong, W. Wang, D. Niyato, P. Wang, Y .-C. Liang, and D. I. Kim, “A Survey on Blockchain: A Game Theoretical Perspective,” IEEE Access, vol. 7, pp. 47 615–47 643, 2019

    2019

  11. [17]

    {FastKitten}: Practical smart contracts on bitcoin,

    P. Das, L. Eckey, T. Frassetto, D. Gens, K. Hostáková, P. Jauernig, S. Faust, and A.-R. Sadeghi, “{FastKitten}: Practical smart contracts on bitcoin,” in28th USENIX Security Symposium (USENIX Security 19), 2019, pp. 801–818

    2019

  12. [18]

    Decentralized finance research and developments around the world,

    P. K. Ozili, “Decentralized finance research and developments around the world,”Journal of Banking and Financial Technology, vol. 6, no. 2, pp. 117–133, 2022

    2022

  13. [19]

    The decentralized autonomous organization and gover- nance issues,

    U. W. Chohan, “The decentralized autonomous organization and gover- nance issues,” inDecentralized Autonomous Organizations. Routledge, 2024, pp. 139–149

    2024

  14. [20]

    A survey of attacks on ethereum smart contracts (sok),

    N. Atzei, M. Bartoletti, and T. Cimoli, “A survey of attacks on ethereum smart contracts (sok),” inInternational conference on principles of security and trust. Springer, 2017, pp. 164–186. This work has been accepted to the 7th International Conference on Blockchain Computing...

    2017

  15. [21]

    Attention is all you need,

    A. Vaswani, N. Shazeer, N. Parmar, J. Uszkoreit, L. Jones, A. N. Gomez, Ł. Kaiser, and I. Polosukhin, “Attention is all you need,”Advances in neural information processing systems, vol. 30, 2017

    2017

  16. [22]

    Language mod- els are few-shot learners,

    T. Brown, B. Mann, N. Ryder, M. Subbiah, J. D. Kaplan, P. Dhariwal, A. Neelakantan, P. Shyam, G. Sastry, A. Askellet al., “Language mod- els are few-shot learners,”Advances in neural information processing systems, vol. 33, pp. 1877–1901, 2020

    1901

  17. [23]

    Gpt-4 technical report,

    J. Achiam, S. Adler, S. Agarwal, L. Ahmad, I. Akkaya, F. L. Aleman, D. Almeida, J. Altenschmidt, S. Altman, S. Anadkatet al., “Gpt-4 technical report,”arXiv preprint arXiv:2303.08774, 2023

    2023 arXiv

  18. [24]

    Llama: Open and efficient foundation language models,

    H. Touvron, T. Lavril, G. Izacard, X. Martinet, M.-A. Lachaux, T. Lacroix, B. Rozière, N. Goyal, E. Hambro, F. Azharet al., “Llama: Open and efficient foundation language models,”arXiv preprint arXiv:2302.13971, 2023

    2023 arXiv

  19. [25]

    Mixtral of experts,

    A. Q. Jiang, A. Sablayrolles, A. Roux, A. Mensch, B. Savary, C. Bam- ford, D. S. Chaplot, D. d. l. Casas, E. B. Hanna, F. Bressandet al., “Mixtral of experts,”arXiv preprint arXiv:2401.04088, 2024

    2024 arXiv

  20. [26]

    Model card and evaluations for claude models,

    Anthropic, “Model card and evaluations for claude models,” 2023. [Online]. Available: https://www.anthropic.com/news/claude-2

    2023

  21. [27]

    Training language models to follow instructions with human feedback,

    L. Ouyang, J. Wu, X. Jiang, D. Almeida, C. Wainwright, P. Mishkin, C. Zhang, S. Agarwal, K. Slama, A. Rayet al., “Training language models to follow instructions with human feedback,”Advances in neural information processing systems, vol. 35, pp. 27 730–27 744, 2022

    2022

  22. [28]

    Retrieval- augmented generation for knowledge-intensive nlp tasks,

    P. Lewis, E. Perez, A. Piktus, F. Petroni, V . Karpukhin, N. Goyal, H. Küttler, M. Lewis, W.-t. Yih, T. Rocktäschelet al., “Retrieval- augmented generation for knowledge-intensive nlp tasks,”Advances in neural information processing systems, vol. 33, pp. 9459–9474, 2020

    2020

  23. [29]

    Augmented language models: a survey,

    G. Mialon, R. Dessì, M. Lomeli, C. Nalmpantis, R. Pasunuru, R. Raileanu, B. Rozière, T. Schick, J. Dwivedi-Yu, A. Celikyil- mazet al., “Augmented language models: a survey,”arXiv preprint arXiv:2302.07842, 2023

    2023 arXiv

  24. [30]

    Model context protocol (mcp),

    Anthropic, “Model context protocol (mcp),” https://docs.anthropic.com/ en/docs/mcp, 2024, accessed: 2025-08-28

    2024

  25. [31]

    A2a protocol: Agent-to-agent communication frame- work,

    A. P. Contributors, “A2a protocol: Agent-to-agent communication frame- work,” https://github.com/a2aproject/A2A, 2024, accessed: 2025-08-28

    2024

  26. [32]

    Agent network protocol,

    A. N. P. Project, “Agent network protocol,” https://agentnetworkprotocol. com/en/, 2024, accessed: 2025-08-28

    2024

  27. [33]

    Agora protocol,

    A. P. Project, “Agora protocol,” https://agoraprotocol.org/, 2024, ac- cessed: 2025-08-28

    2024

  28. [34]

    Nanda: A platform for agentic ai research,

    M. M. Lab, “Nanda: A platform for agentic ai research,” https://nanda. media.mit.edu/, 2024, accessed: 2025-08-28

    2024

  29. [35]

    Blockchain for large language model security and safety: A holistic survey,

    C. Geren, A. Board, G. G. Dagher, T. Andersen, and J. Zhuang, “Blockchain for large language model security and safety: A holistic survey,”SIGKDD Explor. Newsl., vol. 26, no. 2, p. 1–20, Jan. 2025. [Online]. Available: https://doi.org/10.1145/3715073.3715075

    2025

  30. [36]

    Exploring large language model based intelligent agents: Definitions, methods, and prospects,

    Y . Cheng, C. Zhang, Z. Zhang, X. Meng, S. Hong, W. Li, Z. Wang, Z. Wang, F. Yin, J. Zhaoet al., “Exploring large language model based intelligent agents: Definitions, methods, and prospects,”arXiv preprint arXiv:2401.03428, 2024

    2024 arXiv

  31. [37]

    Eliza: A web3 friendly ai agent operating system,

    S. Walters, S. Gao, S. Nerd, F. Da, W. Williams, T.-C. Meng, A. Chow, H. Han, F. He, A. Zhanget al., “Eliza: A web3 friendly ai agent operating system,”arXiv preprint arXiv:2501.06781, 2025

    2025 arXiv

  32. [38]

    Multi-agent Chatbot for Efficient Interaction with Blockchain APIs,

    S.-H.-D. Nguyen, T.-D. Trinh, and Q.-V .-Q. Tran, “Multi-agent Chatbot for Efficient Interaction with Blockchain APIs,” inInternational Sympo- sium on Information and Communication Technology. Springer, 2024, pp. 425–440

    2024

  33. [39]

    Decoagent: Large language model empowered decentralized autonomous collaboration agents based on smart contracts,

    A. Jin, Y . Ye, B. Lee, and Y . Qiao, “Decoagent: Large language model empowered decentralized autonomous collaboration agents based on smart contracts,”IEEE Access, 2024

    2024

  34. [40]

    Using llms to bridge the gap between consumers and blockchain on a agro-food traceability platform: an architectural proposal,

    D. Santos, F. Gonçalves, G. Reis, M. Santos, M. Saraiva, P. Durães, M. Maximiano, R. Gomes, V . Távora, and O. Remédios, “Using llms to bridge the gap between consumers and blockchain on a agro-food traceability platform: an architectural proposal,”Procedia Computer Science, v...

    2025

  35. [41]

    Llm-powered multi-agent system for automated crypto portfolio management,

    Y . Luo, Y . Feng, J. Xu, P. Tasca, and Y . Liu, “Llm-powered multi-agent system for automated crypto portfolio management,”arXiv preprint arXiv:2501.00826, 2025

    2025 arXiv

  36. [42]

    Llm based chatbot for farm-to-fork blockchain traceability platform,

    J. Benzinho, J. Ferreira, J. Batista, L. Pereira, M. Maximiano, V . Távora, R. Gomes, and O. Remédios, “Llm based chatbot for farm-to-fork blockchain traceability platform,”Applied Sciences, vol. 14, no. 19, p. 8856, 2024

    2024

  37. [43]

    Blockchain data analysis in the era of large-language models,

    K. Toyoda, X. Wang, M. Li, B. Gao, Y . Wang, and Q. Wei, “Blockchain data analysis in the era of large-language models,”arXiv preprint arXiv:2412.09640, 2024

    2024 arXiv

  38. [44]

    Agentdao: Synthesis of proposal trans- actions via abstract dao semantics,

    L. Ao, H. Liu, and H. Zhang, “Agentdao: Synthesis of proposal trans- actions via abstract dao semantics,”arXiv preprint arXiv:2503.10099, 2025

    2025 arXiv

  39. [45]

    A reflective llm- based agent to guide zero-shot cryptocurrency trading,

    Y . Li, B. Luo, Q. Wang, N. Chen, X. Liu, and B. He, “A reflective llm- based agent to guide zero-shot cryptocurrency trading,”arXiv preprint arXiv:2407.09546, 2024

    2024 arXiv

  40. [46]

    Fetch.ai - Build. Discover. Transact. — fetch.ai,

    “Fetch.ai - Build. Discover. Transact. — fetch.ai,” https://fetch.ai/, 2025

    2025

  41. [47]

    Olas | Co-own AI — olas.network,

    “Olas | Co-own AI — olas.network,” https://olas.network/, 2025

    2025

  42. [48]

    Error correction and adaptation in conversational ai: A review of techniques and applications in chatbots,

    S. Izadi and M. Forouzanfar, “Error correction and adaptation in conversational ai: A review of techniques and applications in chatbots,” Ai, vol. 5, no. 2, pp. 803–841, 2024

    2024

  43. [49]

    AI agents are coming for DeFi — Wallets are the weakest link — cointelegraph.com,

    S. Li, “AI agents are coming for DeFi — Wallets are the weakest link — cointelegraph.com,” https://cointelegraph.com/news/ ai-agents-are-coming-for-de-fi, 2025

    2025

  44. [50]

    Prompt injection attack against llm-integrated applications,

    Y . Liu, G. Deng, Y . Li, K. Wang, Z. Wang, X. Wang, T. Zhang, Y . Liu, H. Wang, Y . Zhenget al., “Prompt injection attack against llm-integrated applications,”arXiv preprint arXiv:2306.05499, 2023

    2023 arXiv

  45. [51]

    Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,

    K. Greshake, S. Abdelnabi, S. Mishra, C. Endres, T. Holz, and M. Fritz, “Not what you’ve signed up for: Compromising real-world llm- integrated applications with indirect prompt injection,” inProceedings of the 16th ACM Workshop on Artificial Intelligence and Security, 2023, pp. 79–90

    2023

  46. [52]

    Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents,

    A. S. Patlan, P. Sheng, S. A. Hebbar, P. Mittal, and P. Viswanath, “Real ai agents with fake memories: Fatal context manipulation attacks on web3 agents,”arXiv preprint arXiv:2503.16248, 2025

    2025 arXiv

  47. [53]

    Propile: Probing privacy leakage in large language models,

    S. Kim, S. Yun, H. Lee, M. Gubri, S. Yoon, and S. J. Oh, “Propile: Probing privacy leakage in large language models,”Advances in Neural Information Processing Systems, vol. 36, pp. 20 750–20 762, 2023

    2023

  48. [54]

    Agentdam: Privacy leakage evaluation for autonomous web agents,

    A. Zharmagambetov, C. Guo, I. Evtimov, M. Pavlova, R. Salakhut- dinov, and K. Chaudhuri, “Agentdam: Privacy leakage evaluation for autonomous web agents,”arXiv preprint arXiv:2503.09780, 2025

    2025

  49. [55]

    Systemic failures and organizational risk man- agement in algorithmic trading: Normal accidents and high reliability in financial markets,

    B. H. Min and C. Borch, “Systemic failures and organizational risk man- agement in algorithmic trading: Normal accidents and high reliability in financial markets,”Social studies of science, vol. 52, no. 2, pp. 277–302, 2022

    2022

  50. [56]

    Flash crashes in multi-agent systems using minority games and reinforcement learning to test ai safety,

    L. B. Canonico and N. McNeese, “Flash crashes in multi-agent systems using minority games and reinforcement learning to test ai safety,” in 2019 Winter Simulation Conference (WSC). IEEE, 2019, pp. 193–204

    2019

  51. [57]

    iContractBot: A Chatbot for Smart Contracts’ Specification and Code Generation,

    I. Qasse, S. Mishra, and M. Hamdaqa, “iContractBot: A Chatbot for Smart Contracts’ Specification and Code Generation,” in2021 IEEE/ACM Third International Workshop on Bots in Software Engi- neering (BotSE), 2021, pp. 35–38

    2021

  52. [58]

    Chat2Code: A Chatbot for Model Specification and Code Generation, The Case of Smart Contracts,

    I. Qasse, S. Mishra, B. þ. Jónsson, F. Khomh, and M. Hamdaqa, “Chat2Code: A Chatbot for Model Specification and Code Generation, The Case of Smart Contracts,” in2023 IEEE International Conference on Software Services Engineering (SSE), 2023, pp. 50–60

    2023

  53. [59]

    Model-driven smart contract generation leveraging ChatGPT,

    N. Petrovi ´c and I. Al-Azzoni, “Model-driven smart contract generation leveraging ChatGPT,” inInternational Conference On Systems Engineer- ing. Springer, 2023, pp. 387–396

    2023

  54. [60]

    Demystifying exploitable bugs in smart contracts,

    Z. Zhang, B. Zhang, W. Xu, and Z. Lin, “Demystifying exploitable bugs in smart contracts,” in2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE). IEEE, 2023, pp. 615–627

    2023

  55. [61]

    FELLMVP: An Ensemble LLM Framework for Classifying Smart Contract Vul- nerabilities,

    Y . Luo, W. Xu, K. Andersson, M. S. Hossain, and D. Xu, “FELLMVP: An Ensemble LLM Framework for Classifying Smart Contract Vul- nerabilities,” in2024 IEEE International Conference on Blockchain (Blockchain), 2024, pp. 89–96

    2024

  56. [62]

    Rethinking smart contract fuzzing: Fuzzing with invocation ordering and important branch revisiting,

    Z. Liu, P. Qian, J. Yang, L. Liu, X. Xu, Q. He, and X. Zhang, “Rethinking smart contract fuzzing: Fuzzing with invocation ordering and important branch revisiting,”IEEE Transactions on Information Forensics and Security, vol. 18, pp. 1237–1251, 2023

    2023

  57. [64]

    Ethereum (ETH) Blockchain Explorer — etherscan.io,

    etherscan.io, “Ethereum (ETH) Blockchain Explorer — etherscan.io,” https://etherscan.io/, 2025

    2025

  58. [65]

    Guiding LLM-based Smart Contract Generation with Finite State Machine,

    H. Luo, Y . Lin, X. Yan, X. Hu, Y . Wang, Q. Zeng, H. Wang, and J. Jiang, “Guiding LLM-based Smart Contract Generation with Finite State Machine,”arXiv preprint arXiv:2505.08542, 2025

    2025 arXiv

  59. [66]

    GitHub - crytic/not-so-smart-contracts: Examples of Solidity security issues — github.com,

    “GitHub - crytic/not-so-smart-contracts: Examples of Solidity security issues — github.com,” https://github.com/crytic/not-so-smart-contracts, 2025. This work has been accepted to the 7th International Conference on Blockchain Computing and Applications (BCCA 2025)

    2025

  60. [67]

    SCALM: Detecting Bad Practices in Smart Contracts Through LLMs,

    Z. Li, X. Li, W. Li, and X. Wang, “SCALM: Detecting Bad Practices in Smart Contracts Through LLMs,”arXiv preprint arXiv:2502.04347, 2025

    2025

  61. [68]

    Dappscan: building large-scale datasets for smart contract weaknesses in dapp projects,

    Z. Zheng, J. Su, J. Chen, D. Lo, Z. Zhong, and M. Ye, “Dappscan: building large-scale datasets for smart contract weaknesses in dapp projects,”IEEE Transactions on Software Engineering, 2024

    2024

  62. [69]

    Empirical review of automated analysis tools on 47,587 ethereum smart contracts,

    T. Durieux, J. F. Ferreira, R. Abreu, and P. Cruz, “Empirical review of automated analysis tools on 47,587 ethereum smart contracts,” inPro- ceedings of the ACM/IEEE 42nd International conference on software engineering, 2020, pp. 530–541

    2020

  63. [70]

    Smart contracts: building blocks for digital markets,

    N. Szabo, “Smart contracts: building blocks for digital markets,”EX- TROPY: The Journal of Transhumanist Thought,(16), vol. 18, no. 2, p. 28, 1996

    1996

  64. [71]

    Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications,

    L. Su, X. Shen, X. Du, X. Liao, X. Wang, L. Xing, and B. Liu, “Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications,” in30th USENIX Security Symposium (USENIX Security 21). USENIX Association, Aug. 2021, pp. 1307–1324. [Online]. Avai...

    2021

  65. [72]

    Autogen: Enabling next-gen llm applications via multi-agent conversation,

    Q. Wu, G. Bansal, J. Zhang, Y . Wu, B. Li, E. Zhu, L. Jiang, X. Zhang, S. Zhang, J. Liuet al., “Autogen: Enabling next-gen llm applications via multi-agent conversation,”arXiv preprint arXiv:2308.08155, 2023

    2023 arXiv

  66. [74]

    Quantifying multilingual performance of large language models across languages,

    Z. Li, Y . Shi, Z. Liu, F. Yang, N. Liu, and M. Du, “Quantifying multilingual performance of large language models across languages,” arXiv e-prints, pp. arXiv–2404, 2024

    2024

  67. [75]

    The dataset was created to evaluate the accuracy of automated analysis tools

    “GitHub - smartbugs/smartbugs-curated: SB Curated is a curated dataset of Solidity smart contracts annotated with tagged vulnerabilities. The dataset was created to evaluate the accuracy of automated analysis tools. — github.com,” https://github.com/smartbugs/smartbugs-curated, 2024

    2024

  68. [76]

    GitHub - smartbugs/smartbugs-wild: This repository contains 47,398 smart contracts extracted from the Ethereum network. — github.com,

    “GitHub - smartbugs/smartbugs-wild: This repository contains 47,398 smart contracts extracted from the Ethereum network. — github.com,” https://github.com/smartbugs/smartbugs-wild, 2024

    2024

  69. [77]

    Benchmarking Large Language Models for Ethereum Smart Contract Development,

    E. Daspe, M. Durand, J. Hatin, and S. Bradai, “Benchmarking Large Language Models for Ethereum Smart Contract Development,” in2024 6th Conference on Blockchain Research & Applications for Innovative Networks and Services (BRAINS), 2024, pp. 1–4

    2024

  70. [78]

    Authenticated delegation and autho- rized ai agents,

    T. South, S. Marro, T. Hardjono, R. Mahari, C. D. Whitney, D. Green- wood, A. Chan, and A. Pentland, “Authenticated delegation and autho- rized ai agents,”arXiv preprint arXiv:2501.09674, 2025

    2025 arXiv

  71. [79]

    Unlocking the Potential of Interconnected Blockchains: A Comprehensive Study of Cosmos Blockchain Interoperability,

    M. S. Peelam, B. K. Chaurasia, A. K. Sharma, V . Chamola, and B. Sikdar, “Unlocking the Potential of Interconnected Blockchains: A Comprehensive Study of Cosmos Blockchain Interoperability,”IEEE Access, vol. 12, pp. 171 753–171 776, 2024

    2024

  72. [80]

    Analyzing the Perfor- mance of the Inter-Blockchain Communication Protocol,

    J. O. Chervinski, D. Kreutz, X. Xu, and J. Yu, “Analyzing the Perfor- mance of the Inter-Blockchain Communication Protocol,” in2023 53rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), 2023, pp. 151–164

    2023

Pith tools

Reviewed August 15, 2026 · model on record in the stance chip above.