{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:6ZH4IOGUOH4SBT6R6OSOZPG5VL","short_pith_number":"pith:6ZH4IOGU","canonical_record":{"source":{"id":"1907.00903","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-07-01T16:18:55Z","cross_cats_sorted":[],"title_canon_sha256":"43923380c1432224d5bbd4c6f34456bfff6a50763418d22c44c37fe9bf55258e","abstract_canon_sha256":"09ef22d9d4644e7bb24ec92c7f50ee08da400f032d9b3af79b462f3380b0127f"},"schema_version":"1.0"},"canonical_sha256":"f64fc438d471f920cfd1f3a4ecbcddaae347637e7d65665a113630148ff0bcb3","source":{"kind":"arxiv","id":"1907.00903","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.00903","created_at":"2026-05-17T23:41:47Z"},{"alias_kind":"arxiv_version","alias_value":"1907.00903v1","created_at":"2026-05-17T23:41:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.00903","created_at":"2026-05-17T23:41:47Z"},{"alias_kind":"pith_short_12","alias_value":"6ZH4IOGUOH4S","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_16","alias_value":"6ZH4IOGUOH4SBT6R","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_8","alias_value":"6ZH4IOGU","created_at":"2026-05-18T12:33:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:6ZH4IOGUOH4SBT6R6OSOZPG5VL","target":"record","payload":{"canonical_record":{"source":{"id":"1907.00903","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-07-01T16:18:55Z","cross_cats_sorted":[],"title_canon_sha256":"43923380c1432224d5bbd4c6f34456bfff6a50763418d22c44c37fe9bf55258e","abstract_canon_sha256":"09ef22d9d4644e7bb24ec92c7f50ee08da400f032d9b3af79b462f3380b0127f"},"schema_version":"1.0"},"canonical_sha256":"f64fc438d471f920cfd1f3a4ecbcddaae347637e7d65665a113630148ff0bcb3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:41:47.658594Z","signature_b64":"sl0s4oPw4DyW2wGu0+Hvnb902j3lNZsoj+i3QyMqvukkS7KEahMfaC1kqrk8jeO5fHTgBprkICRl1B2RVKInDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f64fc438d471f920cfd1f3a4ecbcddaae347637e7d65665a113630148ff0bcb3","last_reissued_at":"2026-05-17T23:41:47.657929Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:41:47.657929Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1907.00903","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:41:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YEvyDQW/Eb75hWLVLgCiX9hmonZ70AUHoU4nI2Hw/sopSoXutkjJJF6j7yl3gQiTGvUqz6hjMnU70mFRU3bXDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-22T14:15:21.664880Z"},"content_sha256":"aafa743fd9e9a15070eba808c1377c8c4bfa5572e78c5ec9dfb4a9342fe6d313","schema_version":"1.0","event_id":"sha256:aafa743fd9e9a15070eba808c1377c8c4bfa5572e78c5ec9dfb4a9342fe6d313"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:6ZH4IOGUOH4SBT6R6OSOZPG5VL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Resolving the Multiple Withdrawal Attack on ERC20 Tokens","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jeremy Clark, Reza Rahimian, Shayan Eskandari","submitted_at":"2019-07-01T16:18:55Z","abstract_excerpt":"Custom tokens are an integral component of decentralized applications (dapps) deployed on Ethereum and other blockchain platforms. For Ethereum, the ERC20 standard is a widely used token interface and is interoperable with many existing dapps, user interface platforms, and popular web applications (e.g., exchange services). An ERC20 security issue, known as the \"multiple withdrawal attack\", was raised on GitHub and has been open since November 2016. The issue concerns ERC20's defined method approve() which was envisioned as a way for token holders to give permission for other users and dapps t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.00903","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:41:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YbRBxW8Tf+24ZBoALLSBS6IVKRPBanEIdFyIXVidx0j4JlIOIC1nn+nwPe4kKi1vYaHdmxq4slFrZQrWDNIdCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-22T14:15:21.665228Z"},"content_sha256":"4ed369ce5239d38d83fa9a36e0aab05f33bc5a36c0c796286105fb1b43c15b22","schema_version":"1.0","event_id":"sha256:4ed369ce5239d38d83fa9a36e0aab05f33bc5a36c0c796286105fb1b43c15b22"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6ZH4IOGUOH4SBT6R6OSOZPG5VL/bundle.json","state_url":"https://pith.science/pith/6ZH4IOGUOH4SBT6R6OSOZPG5VL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6ZH4IOGUOH4SBT6R6OSOZPG5VL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-22T14:15:21Z","links":{"resolver":"https://pith.science/pith/6ZH4IOGUOH4SBT6R6OSOZPG5VL","bundle":"https://pith.science/pith/6ZH4IOGUOH4SBT6R6OSOZPG5VL/bundle.json","state":"https://pith.science/pith/6ZH4IOGUOH4SBT6R6OSOZPG5VL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6ZH4IOGUOH4SBT6R6OSOZPG5VL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:6ZH4IOGUOH4SBT6R6OSOZPG5VL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"09ef22d9d4644e7bb24ec92c7f50ee08da400f032d9b3af79b462f3380b0127f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-07-01T16:18:55Z","title_canon_sha256":"43923380c1432224d5bbd4c6f34456bfff6a50763418d22c44c37fe9bf55258e"},"schema_version":"1.0","source":{"id":"1907.00903","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.00903","created_at":"2026-05-17T23:41:47Z"},{"alias_kind":"arxiv_version","alias_value":"1907.00903v1","created_at":"2026-05-17T23:41:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.00903","created_at":"2026-05-17T23:41:47Z"},{"alias_kind":"pith_short_12","alias_value":"6ZH4IOGUOH4S","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_16","alias_value":"6ZH4IOGUOH4SBT6R","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_8","alias_value":"6ZH4IOGU","created_at":"2026-05-18T12:33:10Z"}],"graph_snapshots":[{"event_id":"sha256:4ed369ce5239d38d83fa9a36e0aab05f33bc5a36c0c796286105fb1b43c15b22","target":"graph","created_at":"2026-05-17T23:41:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Custom tokens are an integral component of decentralized applications (dapps) deployed on Ethereum and other blockchain platforms. For Ethereum, the ERC20 standard is a widely used token interface and is interoperable with many existing dapps, user interface platforms, and popular web applications (e.g., exchange services). An ERC20 security issue, known as the \"multiple withdrawal attack\", was raised on GitHub and has been open since November 2016. The issue concerns ERC20's defined method approve() which was envisioned as a way for token holders to give permission for other users and dapps t","authors_text":"Jeremy Clark, Reza Rahimian, Shayan Eskandari","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-07-01T16:18:55Z","title":"Resolving the Multiple Withdrawal Attack on ERC20 Tokens"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.00903","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:aafa743fd9e9a15070eba808c1377c8c4bfa5572e78c5ec9dfb4a9342fe6d313","target":"record","created_at":"2026-05-17T23:41:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"09ef22d9d4644e7bb24ec92c7f50ee08da400f032d9b3af79b462f3380b0127f","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-07-01T16:18:55Z","title_canon_sha256":"43923380c1432224d5bbd4c6f34456bfff6a50763418d22c44c37fe9bf55258e"},"schema_version":"1.0","source":{"id":"1907.00903","kind":"arxiv","version":1}},"canonical_sha256":"f64fc438d471f920cfd1f3a4ecbcddaae347637e7d65665a113630148ff0bcb3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f64fc438d471f920cfd1f3a4ecbcddaae347637e7d65665a113630148ff0bcb3","first_computed_at":"2026-05-17T23:41:47.657929Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:41:47.657929Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sl0s4oPw4DyW2wGu0+Hvnb902j3lNZsoj+i3QyMqvukkS7KEahMfaC1kqrk8jeO5fHTgBprkICRl1B2RVKInDw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:41:47.658594Z","signed_message":"canonical_sha256_bytes"},"source_id":"1907.00903","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:aafa743fd9e9a15070eba808c1377c8c4bfa5572e78c5ec9dfb4a9342fe6d313","sha256:4ed369ce5239d38d83fa9a36e0aab05f33bc5a36c0c796286105fb1b43c15b22"],"state_sha256":"f2f52f42801a225247c4b6f365d279d1b2d253b96b2c3831d4dff54c6ab622e4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fJ9qia1tscXyU/Rq4kfA5RxMDz+9JBWUtqQcgC9x2TQ2ERKNGJQlkZXInLWR8RRhb6krRdmOz7DHyNXX2dLoCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-22T14:15:21.667222Z","bundle_sha256":"900492945d2b33bad1138fb3d374dbe50322591714be8943e8f7ca982a4271e7"}}