{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TIFH2GCVM3EGITBSEKJT2UKWU2","short_pith_number":"pith:TIFH2GCV","canonical_record":{"source":{"id":"2508.02145","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-04T07:43:43Z","cross_cats_sorted":[],"title_canon_sha256":"80aa7de1ee71c23aff8829b0ec00e1ef1b10690cd2779469dd0b7d24f6af2d25","abstract_canon_sha256":"7db6708772398da44bfef43c187c566e74e6e590ec83266c5a1c4e3e2879b2ab"},"schema_version":"1.0"},"canonical_sha256":"9a0a7d185566c8644c3222933d5156a6b6b89e82235e5c9d83972a4de97e95b2","source":{"kind":"arxiv","id":"2508.02145","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.02145","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"arxiv_version","alias_value":"2508.02145v1","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.02145","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_12","alias_value":"TIFH2GCVM3EG","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_16","alias_value":"TIFH2GCVM3EGITBS","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_8","alias_value":"TIFH2GCV","created_at":"2026-07-05T11:48:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TIFH2GCVM3EGITBSEKJT2UKWU2","target":"record","payload":{"canonical_record":{"source":{"id":"2508.02145","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-04T07:43:43Z","cross_cats_sorted":[],"title_canon_sha256":"80aa7de1ee71c23aff8829b0ec00e1ef1b10690cd2779469dd0b7d24f6af2d25","abstract_canon_sha256":"7db6708772398da44bfef43c187c566e74e6e590ec83266c5a1c4e3e2879b2ab"},"schema_version":"1.0"},"canonical_sha256":"9a0a7d185566c8644c3222933d5156a6b6b89e82235e5c9d83972a4de97e95b2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:48:09.189851Z","signature_b64":"2c1BjpnRqyfqdAYcBlwK+pXc/9PCmByEyg11W/f3vC0HvmwC8HZfBq+JffyUwZeh7vdx5IZuV29y2V6TyZ6RAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9a0a7d185566c8644c3222933d5156a6b6b89e82235e5c9d83972a4de97e95b2","last_reissued_at":"2026-07-05T11:48:09.189301Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:48:09.189301Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.02145","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:48:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5LIfP6aI9u0p7awgIqvEgTShCpR3uoYedPxaQtXBRTWCicXFXYub/yq5nM5kqCB8zSv2qc1MM1kFMIj7Gw8wAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T14:51:36.882066Z"},"content_sha256":"f51922c1662f0b98672704bb23d543fa4baecd67b364b17cec12cb9cc9c18223","schema_version":"1.0","event_id":"sha256:f51922c1662f0b98672704bb23d543fa4baecd67b364b17cec12cb9cc9c18223"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TIFH2GCVM3EGITBSEKJT2UKWU2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Dark Side of Upgrades: Uncovering Security Risks in Smart Contract Upgrades","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Cong Wang, Dingding Wang, Jianting He, Lei Wu, Siwei Wu, Yajin Zhou","submitted_at":"2025-08-04T07:43:43Z","abstract_excerpt":"Smart contract upgrades are increasingly common due to their flexibility in modifying deployed contracts, such as fixing bugs or adding new functionalities. Meanwhile, upgrades compromise the immutability of contracts, introducing significant security concerns. While existing research has explored the security impacts of contract upgrades, these studies are limited in collection of upgrade behaviors and identification of insecurities.\n  To address these limitations, we conduct a comprehensive study on the insecurities of upgrade behaviors. First, we build a dataset containing 83,085 upgraded c"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.02145","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.02145/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:48:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BVjziPoolyOZS9JdJtPNG/zG2xiNFxZLaB3T6V9nkTNRgyZXNMtiSWzjEYvdXooMA26o5DtNmQnWfGNBZLfiAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T14:51:36.882446Z"},"content_sha256":"644f2edaa2a82ebd2308817268a888ecc35c7f9d57db17835b0bf4a1920ec7cc","schema_version":"1.0","event_id":"sha256:644f2edaa2a82ebd2308817268a888ecc35c7f9d57db17835b0bf4a1920ec7cc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TIFH2GCVM3EGITBSEKJT2UKWU2/bundle.json","state_url":"https://pith.science/pith/TIFH2GCVM3EGITBSEKJT2UKWU2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TIFH2GCVM3EGITBSEKJT2UKWU2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T14:51:36Z","links":{"resolver":"https://pith.science/pith/TIFH2GCVM3EGITBSEKJT2UKWU2","bundle":"https://pith.science/pith/TIFH2GCVM3EGITBSEKJT2UKWU2/bundle.json","state":"https://pith.science/pith/TIFH2GCVM3EGITBSEKJT2UKWU2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TIFH2GCVM3EGITBSEKJT2UKWU2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TIFH2GCVM3EGITBSEKJT2UKWU2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7db6708772398da44bfef43c187c566e74e6e590ec83266c5a1c4e3e2879b2ab","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-04T07:43:43Z","title_canon_sha256":"80aa7de1ee71c23aff8829b0ec00e1ef1b10690cd2779469dd0b7d24f6af2d25"},"schema_version":"1.0","source":{"id":"2508.02145","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.02145","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"arxiv_version","alias_value":"2508.02145v1","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.02145","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_12","alias_value":"TIFH2GCVM3EG","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_16","alias_value":"TIFH2GCVM3EGITBS","created_at":"2026-07-05T11:48:09Z"},{"alias_kind":"pith_short_8","alias_value":"TIFH2GCV","created_at":"2026-07-05T11:48:09Z"}],"graph_snapshots":[{"event_id":"sha256:644f2edaa2a82ebd2308817268a888ecc35c7f9d57db17835b0bf4a1920ec7cc","target":"graph","created_at":"2026-07-05T11:48:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.02145/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Smart contract upgrades are increasingly common due to their flexibility in modifying deployed contracts, such as fixing bugs or adding new functionalities. Meanwhile, upgrades compromise the immutability of contracts, introducing significant security concerns. While existing research has explored the security impacts of contract upgrades, these studies are limited in collection of upgrade behaviors and identification of insecurities.\n  To address these limitations, we conduct a comprehensive study on the insecurities of upgrade behaviors. First, we build a dataset containing 83,085 upgraded c","authors_text":"Cong Wang, Dingding Wang, Jianting He, Lei Wu, Siwei Wu, Yajin Zhou","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-04T07:43:43Z","title":"The Dark Side of Upgrades: Uncovering Security Risks in Smart Contract Upgrades"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.02145","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f51922c1662f0b98672704bb23d543fa4baecd67b364b17cec12cb9cc9c18223","target":"record","created_at":"2026-07-05T11:48:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7db6708772398da44bfef43c187c566e74e6e590ec83266c5a1c4e3e2879b2ab","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-04T07:43:43Z","title_canon_sha256":"80aa7de1ee71c23aff8829b0ec00e1ef1b10690cd2779469dd0b7d24f6af2d25"},"schema_version":"1.0","source":{"id":"2508.02145","kind":"arxiv","version":1}},"canonical_sha256":"9a0a7d185566c8644c3222933d5156a6b6b89e82235e5c9d83972a4de97e95b2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9a0a7d185566c8644c3222933d5156a6b6b89e82235e5c9d83972a4de97e95b2","first_computed_at":"2026-07-05T11:48:09.189301Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:48:09.189301Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2c1BjpnRqyfqdAYcBlwK+pXc/9PCmByEyg11W/f3vC0HvmwC8HZfBq+JffyUwZeh7vdx5IZuV29y2V6TyZ6RAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:48:09.189851Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.02145","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f51922c1662f0b98672704bb23d543fa4baecd67b364b17cec12cb9cc9c18223","sha256:644f2edaa2a82ebd2308817268a888ecc35c7f9d57db17835b0bf4a1920ec7cc"],"state_sha256":"de03db89492d5e2f8d0d155df17065b5ad960b5020b83a748142322490a22432"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f5w1nQGj8NP7jkP/c8hdzj6qjEuwFUX1w6HHytO44cu3QBYg0ZH88o3G7HJVbiZXrj7/24tAyXOTDTAi4W/kCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T14:51:36.886046Z","bundle_sha256":"c9d37fa35e1e3c7cfa1f501c3be8a0682d80cb6de7225d842dac269e37ab58c5"}}