{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:BOQGBAQUD5MCO7DDN7GEY3XBGD","short_pith_number":"pith:BOQGBAQU","canonical_record":{"source":{"id":"2404.18186","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-04-28T13:40:18Z","cross_cats_sorted":[],"title_canon_sha256":"45685ccd969e067ac305c612202fc65e19ee7c1c45a8cd7f6b15a7c715e6d646","abstract_canon_sha256":"9e399d9c5a4677989c4c187e9da5acd4419263dc39262c51afa9d36dadd38bbd"},"schema_version":"1.0"},"canonical_sha256":"0ba06082141f58277c636fcc4c6ee130d1e66fe6a961d4e78171c69697bf9d9d","source":{"kind":"arxiv","id":"2404.18186","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.18186","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"arxiv_version","alias_value":"2404.18186v3","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.18186","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"pith_short_12","alias_value":"BOQGBAQUD5MC","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"pith_short_16","alias_value":"BOQGBAQUD5MCO7DD","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"pith_short_8","alias_value":"BOQGBAQU","created_at":"2026-07-05T08:38:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:BOQGBAQUD5MCO7DDN7GEY3XBGD","target":"record","payload":{"canonical_record":{"source":{"id":"2404.18186","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-04-28T13:40:18Z","cross_cats_sorted":[],"title_canon_sha256":"45685ccd969e067ac305c612202fc65e19ee7c1c45a8cd7f6b15a7c715e6d646","abstract_canon_sha256":"9e399d9c5a4677989c4c187e9da5acd4419263dc39262c51afa9d36dadd38bbd"},"schema_version":"1.0"},"canonical_sha256":"0ba06082141f58277c636fcc4c6ee130d1e66fe6a961d4e78171c69697bf9d9d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:38:09.232462Z","signature_b64":"CRUodEp+ZjSbunkCH5Sm06x+08wJG1ckiIEY345EVhL+bv6VM7h66EQ+yyjk55YZ/MWhHW2SgfRzlN/A/O1WDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0ba06082141f58277c636fcc4c6ee130d1e66fe6a961d4e78171c69697bf9d9d","last_reissued_at":"2026-07-05T08:38:09.231755Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:38:09.231755Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.18186","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:38:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FgSiWHrh+mBd2p34oAGUDm0bc4R5IStk4iU9G13mshzszhtFN1Dc3XkwyY9xV96n8QJUEDUbVIo24Nk/yX9FDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T19:21:23.709653Z"},"content_sha256":"597ed8ec52f06b8b24edbe71f6b7b4cc9a9ad5ac67db207f6ccd4df3a652bbfd","schema_version":"1.0","event_id":"sha256:597ed8ec52f06b8b24edbe71f6b7b4cc9a9ad5ac67db207f6ccd4df3a652bbfd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:BOQGBAQUD5MCO7DDN7GEY3XBGD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Static Application Security Testing (SAST) Tools for Smart Contracts: How Far Are We?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Haijun Wang, Han Liu, Kairan Sun, Kaixuan Li, Ming Hu, Sen Chen, Yang Liu, Yixiang Chen, Yue Xue","submitted_at":"2024-04-28T13:40:18Z","abstract_excerpt":"In recent years, the importance of smart contract security has been heightened by the increasing number of attacks against them. To address this issue, a multitude of static application security testing (SAST) tools have been proposed for detecting vulnerabilities in smart contracts. However, objectively comparing these tools to determine their effectiveness remains challenging. Existing studies often fall short due to the taxonomies and benchmarks only covering a coarse and potentially outdated set of vulnerability types, which leads to evaluations that are not entirely comprehensive and may "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.18186","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.18186/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:38:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CrPgJjpUyJvgeMl9obLKHEYKJER8hf+qqO15YzX/ZPV6y/gV9XDtQBc93WSdeX9s+dpCgNaSw9dolpAFQ0oRBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T19:21:23.710215Z"},"content_sha256":"5a134e8a5b1534634144e88711ffcfaa04c1cee4497684e838431c17b10f6471","schema_version":"1.0","event_id":"sha256:5a134e8a5b1534634144e88711ffcfaa04c1cee4497684e838431c17b10f6471"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BOQGBAQUD5MCO7DDN7GEY3XBGD/bundle.json","state_url":"https://pith.science/pith/BOQGBAQUD5MCO7DDN7GEY3XBGD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BOQGBAQUD5MCO7DDN7GEY3XBGD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T19:21:23Z","links":{"resolver":"https://pith.science/pith/BOQGBAQUD5MCO7DDN7GEY3XBGD","bundle":"https://pith.science/pith/BOQGBAQUD5MCO7DDN7GEY3XBGD/bundle.json","state":"https://pith.science/pith/BOQGBAQUD5MCO7DDN7GEY3XBGD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BOQGBAQUD5MCO7DDN7GEY3XBGD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:BOQGBAQUD5MCO7DDN7GEY3XBGD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9e399d9c5a4677989c4c187e9da5acd4419263dc39262c51afa9d36dadd38bbd","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-04-28T13:40:18Z","title_canon_sha256":"45685ccd969e067ac305c612202fc65e19ee7c1c45a8cd7f6b15a7c715e6d646"},"schema_version":"1.0","source":{"id":"2404.18186","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.18186","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"arxiv_version","alias_value":"2404.18186v3","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.18186","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"pith_short_12","alias_value":"BOQGBAQUD5MC","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"pith_short_16","alias_value":"BOQGBAQUD5MCO7DD","created_at":"2026-07-05T08:38:09Z"},{"alias_kind":"pith_short_8","alias_value":"BOQGBAQU","created_at":"2026-07-05T08:38:09Z"}],"graph_snapshots":[{"event_id":"sha256:5a134e8a5b1534634144e88711ffcfaa04c1cee4497684e838431c17b10f6471","target":"graph","created_at":"2026-07-05T08:38:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.18186/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In recent years, the importance of smart contract security has been heightened by the increasing number of attacks against them. To address this issue, a multitude of static application security testing (SAST) tools have been proposed for detecting vulnerabilities in smart contracts. However, objectively comparing these tools to determine their effectiveness remains challenging. Existing studies often fall short due to the taxonomies and benchmarks only covering a coarse and potentially outdated set of vulnerability types, which leads to evaluations that are not entirely comprehensive and may ","authors_text":"Haijun Wang, Han Liu, Kairan Sun, Kaixuan Li, Ming Hu, Sen Chen, Yang Liu, Yixiang Chen, Yue Xue","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-04-28T13:40:18Z","title":"Static Application Security Testing (SAST) Tools for Smart Contracts: How Far Are We?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.18186","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:597ed8ec52f06b8b24edbe71f6b7b4cc9a9ad5ac67db207f6ccd4df3a652bbfd","target":"record","created_at":"2026-07-05T08:38:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9e399d9c5a4677989c4c187e9da5acd4419263dc39262c51afa9d36dadd38bbd","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-04-28T13:40:18Z","title_canon_sha256":"45685ccd969e067ac305c612202fc65e19ee7c1c45a8cd7f6b15a7c715e6d646"},"schema_version":"1.0","source":{"id":"2404.18186","kind":"arxiv","version":3}},"canonical_sha256":"0ba06082141f58277c636fcc4c6ee130d1e66fe6a961d4e78171c69697bf9d9d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0ba06082141f58277c636fcc4c6ee130d1e66fe6a961d4e78171c69697bf9d9d","first_computed_at":"2026-07-05T08:38:09.231755Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:38:09.231755Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CRUodEp+ZjSbunkCH5Sm06x+08wJG1ckiIEY345EVhL+bv6VM7h66EQ+yyjk55YZ/MWhHW2SgfRzlN/A/O1WDg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:38:09.232462Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.18186","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:597ed8ec52f06b8b24edbe71f6b7b4cc9a9ad5ac67db207f6ccd4df3a652bbfd","sha256:5a134e8a5b1534634144e88711ffcfaa04c1cee4497684e838431c17b10f6471"],"state_sha256":"ed5dc92a4b89774c04471cab7db4ea62d51f0aab504f4c3f372328bc34997a43"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rMp7Y56yoOWgTfTMEI/h/lfIWJvyiKcEEe2sWX8kXwYcegLw5jK/yO9Zubcr4gqVydK3HeB/tG2gvzUykxCJAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T19:21:23.716196Z","bundle_sha256":"1c77ec8ce788dfd0b81d8f2911437c3a1cf88c1657004dd75062a821518feb2f"}}