{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UFYETCYSPU2D5MPX5LHHDFEJCE","short_pith_number":"pith:UFYETCYS","canonical_record":{"source":{"id":"2412.20866","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-12-30T11:10:22Z","cross_cats_sorted":[],"title_canon_sha256":"310433eb67d4851e8e1b3a37c7f67b451023913b0f6e4fcdc881f4ef35edb2f9","abstract_canon_sha256":"7acdd6ef3e12d2b6078fbfe33efa15494318c727ee17911ec14aa534731d60b5"},"schema_version":"1.0"},"canonical_sha256":"a170498b127d343eb1f7eace71948911185f22a6f10cb9f4e31d4b9664738a66","source":{"kind":"arxiv","id":"2412.20866","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.20866","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"arxiv_version","alias_value":"2412.20866v2","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.20866","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"pith_short_12","alias_value":"UFYETCYSPU2D","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"pith_short_16","alias_value":"UFYETCYSPU2D5MPX","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"pith_short_8","alias_value":"UFYETCYS","created_at":"2026-07-05T11:33:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UFYETCYSPU2D5MPX5LHHDFEJCE","target":"record","payload":{"canonical_record":{"source":{"id":"2412.20866","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-12-30T11:10:22Z","cross_cats_sorted":[],"title_canon_sha256":"310433eb67d4851e8e1b3a37c7f67b451023913b0f6e4fcdc881f4ef35edb2f9","abstract_canon_sha256":"7acdd6ef3e12d2b6078fbfe33efa15494318c727ee17911ec14aa534731d60b5"},"schema_version":"1.0"},"canonical_sha256":"a170498b127d343eb1f7eace71948911185f22a6f10cb9f4e31d4b9664738a66","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:33:18.970218Z","signature_b64":"GVEPVAl/5jqzM6sDqKnkClXcqLxlAz6BFxnKriNYVWI5GKhXG5L4Z0EnJLxn4Nr8HJvKrrBTDJ5ivuEllkO+AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a170498b127d343eb1f7eace71948911185f22a6f10cb9f4e31d4b9664738a66","last_reissued_at":"2026-07-05T11:33:18.969473Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:33:18.969473Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.20866","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YXdn1SjtXfulCZnQkhOvJMqnMsGdzrJOyXT6uakRY044B98jYbG6MnO7M5cKGQlXYCeiknEL8G5cqyTBTfVLBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T18:28:27.031596Z"},"content_sha256":"d5ebf31049ebca168d1ac896b31746b77ff7da5158e6953626fc24693d86f219","schema_version":"1.0","event_id":"sha256:d5ebf31049ebca168d1ac896b31746b77ff7da5158e6953626fc24693d86f219"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UFYETCYSPU2D5MPX5LHHDFEJCE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ContractTrace: Retracing Smart Contract Versions for Security Analyses","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Fatou Ndiaye Mbodji, Gervais Mendy, Jacques Klein, Kui Liu, Moustapha Awwalou Diouf, Tegawende Bissyande, Vinny Adjibi","submitted_at":"2024-12-30T11:10:22Z","abstract_excerpt":"Due to the inherent immutability of blockchain technology, smart contract updates require their deployment at new addresses rather than modifying existing ones, thus fragmenting version histories and creating critical blind spots for analyses. Indeed, for example, this fragmentation severely hinders security researchers ability to track vulnerability lifecycles across contract versions. While platforms like Etherscan provide detailed information about Ethereum smart contracts, they lack crucial functionality to trace predecessor-successor relationships within smart contract lineages, preventin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.20866","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.20866/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZNgLIIcKOZJhunt93PrjBcc4gZUbdbvtLxJVcXq7cVT3Ew2nzSC1MPFuNKEYIPD+xW3pERF8nZtPac/k54ONAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T18:28:27.032406Z"},"content_sha256":"9fc672ef6b80f570fb0b0f073f8f33e05845f04842e45123c205ceff8bb49d52","schema_version":"1.0","event_id":"sha256:9fc672ef6b80f570fb0b0f073f8f33e05845f04842e45123c205ceff8bb49d52"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UFYETCYSPU2D5MPX5LHHDFEJCE/bundle.json","state_url":"https://pith.science/pith/UFYETCYSPU2D5MPX5LHHDFEJCE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UFYETCYSPU2D5MPX5LHHDFEJCE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T18:28:27Z","links":{"resolver":"https://pith.science/pith/UFYETCYSPU2D5MPX5LHHDFEJCE","bundle":"https://pith.science/pith/UFYETCYSPU2D5MPX5LHHDFEJCE/bundle.json","state":"https://pith.science/pith/UFYETCYSPU2D5MPX5LHHDFEJCE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UFYETCYSPU2D5MPX5LHHDFEJCE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UFYETCYSPU2D5MPX5LHHDFEJCE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7acdd6ef3e12d2b6078fbfe33efa15494318c727ee17911ec14aa534731d60b5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-12-30T11:10:22Z","title_canon_sha256":"310433eb67d4851e8e1b3a37c7f67b451023913b0f6e4fcdc881f4ef35edb2f9"},"schema_version":"1.0","source":{"id":"2412.20866","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.20866","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"arxiv_version","alias_value":"2412.20866v2","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.20866","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"pith_short_12","alias_value":"UFYETCYSPU2D","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"pith_short_16","alias_value":"UFYETCYSPU2D5MPX","created_at":"2026-07-05T11:33:18Z"},{"alias_kind":"pith_short_8","alias_value":"UFYETCYS","created_at":"2026-07-05T11:33:18Z"}],"graph_snapshots":[{"event_id":"sha256:9fc672ef6b80f570fb0b0f073f8f33e05845f04842e45123c205ceff8bb49d52","target":"graph","created_at":"2026-07-05T11:33:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.20866/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Due to the inherent immutability of blockchain technology, smart contract updates require their deployment at new addresses rather than modifying existing ones, thus fragmenting version histories and creating critical blind spots for analyses. Indeed, for example, this fragmentation severely hinders security researchers ability to track vulnerability lifecycles across contract versions. While platforms like Etherscan provide detailed information about Ethereum smart contracts, they lack crucial functionality to trace predecessor-successor relationships within smart contract lineages, preventin","authors_text":"Fatou Ndiaye Mbodji, Gervais Mendy, Jacques Klein, Kui Liu, Moustapha Awwalou Diouf, Tegawende Bissyande, Vinny Adjibi","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-12-30T11:10:22Z","title":"ContractTrace: Retracing Smart Contract Versions for Security Analyses"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.20866","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d5ebf31049ebca168d1ac896b31746b77ff7da5158e6953626fc24693d86f219","target":"record","created_at":"2026-07-05T11:33:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7acdd6ef3e12d2b6078fbfe33efa15494318c727ee17911ec14aa534731d60b5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2024-12-30T11:10:22Z","title_canon_sha256":"310433eb67d4851e8e1b3a37c7f67b451023913b0f6e4fcdc881f4ef35edb2f9"},"schema_version":"1.0","source":{"id":"2412.20866","kind":"arxiv","version":2}},"canonical_sha256":"a170498b127d343eb1f7eace71948911185f22a6f10cb9f4e31d4b9664738a66","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a170498b127d343eb1f7eace71948911185f22a6f10cb9f4e31d4b9664738a66","first_computed_at":"2026-07-05T11:33:18.969473Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:33:18.969473Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GVEPVAl/5jqzM6sDqKnkClXcqLxlAz6BFxnKriNYVWI5GKhXG5L4Z0EnJLxn4Nr8HJvKrrBTDJ5ivuEllkO+AA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:33:18.970218Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.20866","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d5ebf31049ebca168d1ac896b31746b77ff7da5158e6953626fc24693d86f219","sha256:9fc672ef6b80f570fb0b0f073f8f33e05845f04842e45123c205ceff8bb49d52"],"state_sha256":"d022995ccd930ce26ffa0c90ba79b7f3d40da21f75a487229a26b8b0c35a24fa"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zxHwyT3q+UfnGNg4XbpCoG8yndvl9AD4GeK36+BkR6HAVrxE9jGBDGsnScYyl/51aIovj3suS2GhL1KccT2JAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T18:28:27.098301Z","bundle_sha256":"aba9311ecb10facfee82f726559683326f14f12c82279e498b3a0858f557ab4a"}}