{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UWDCJOPMSTBYNNNZXWLYHZWEDJ","short_pith_number":"pith:UWDCJOPM","canonical_record":{"source":{"id":"2409.18468","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-09-27T06:14:46Z","cross_cats_sorted":[],"title_canon_sha256":"d75068f5d9ecb12f13755e030c907d93f8314f8cf5985dcd61681eb36741246f","abstract_canon_sha256":"f0188fb2b0d57fc35141bfdf417b0eb0d97a42a6a1d171210a74feec5b6e1dba"},"schema_version":"1.0"},"canonical_sha256":"a58624b9ec94c386b5b9bd9783e6c41a60ff98bdb7c9daeef8ce72d64da4efbd","source":{"kind":"arxiv","id":"2409.18468","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.18468","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"arxiv_version","alias_value":"2409.18468v2","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.18468","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"pith_short_12","alias_value":"UWDCJOPMSTBY","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"pith_short_16","alias_value":"UWDCJOPMSTBYNNNZ","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"pith_short_8","alias_value":"UWDCJOPM","created_at":"2026-07-05T09:45:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UWDCJOPMSTBYNNNZXWLYHZWEDJ","target":"record","payload":{"canonical_record":{"source":{"id":"2409.18468","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-09-27T06:14:46Z","cross_cats_sorted":[],"title_canon_sha256":"d75068f5d9ecb12f13755e030c907d93f8314f8cf5985dcd61681eb36741246f","abstract_canon_sha256":"f0188fb2b0d57fc35141bfdf417b0eb0d97a42a6a1d171210a74feec5b6e1dba"},"schema_version":"1.0"},"canonical_sha256":"a58624b9ec94c386b5b9bd9783e6c41a60ff98bdb7c9daeef8ce72d64da4efbd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:45:55.390680Z","signature_b64":"S8STUFj32exoP+BXF4Hmr5+8/p4uwVUsYz3CG/V6N0/IoKtEcfOf5yQnuM3/6a/R4dBpG2XcUtwwBBMH5mNaDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a58624b9ec94c386b5b9bd9783e6c41a60ff98bdb7c9daeef8ce72d64da4efbd","last_reissued_at":"2026-07-05T09:45:55.390196Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:45:55.390196Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.18468","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:45:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bkNAK5/Pd5fD3GrO8rHbyURVbC1ANOXdyA9kTOFn7HdDRDg+LwxPMs4wfEz6yPCnZWTLPdWNvwnROamRG7uGAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T03:26:29.946583Z"},"content_sha256":"0857548ff19eb2cba3f7562b43e182862de8efacd4eedc5edb758123046bedd2","schema_version":"1.0","event_id":"sha256:0857548ff19eb2cba3f7562b43e182862de8efacd4eedc5edb758123046bedd2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UWDCJOPMSTBYNNNZXWLYHZWEDJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SmartReco: Detecting Read-Only Reentrancy via Fine-Grained Cross-DApp Analysis","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Jingwen Zhang, Kaiwen Ning, Mingxi Ye, Weizhe Zhang, Yuhong Nan, Yu Zhang, Zibin Zheng","submitted_at":"2024-09-27T06:14:46Z","abstract_excerpt":"Despite the increasing popularity of Decentralized Applications (DApps), they are suffering from various vulnerabilities that can be exploited by adversaries for profits. Among such vulnerabilities, Read-Only Reentrancy (called ROR in this paper), is an emerging type of vulnerability that arises from the complex interactions between DApps. In the recent three years, attack incidents of ROR have already caused around 30M USD losses to the DApp ecosystem. Existing techniques for vulnerability detection in smart contracts can hardly detect Read-Only Reentrancy attacks, due to the lack of tracking"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.18468","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.18468/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:45:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HmfcYbC/4t33xbKV3+wBdteOTnxeRQTRxMd/Qo9xdT0Q93Ckp6EkukmnWFpAxqJPX9xjixVgynWZFM3n5KqDAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T03:26:29.947201Z"},"content_sha256":"7e81fb9d5f33e16eca349b0e89f2d7a08751f97782b8943b4a5ca5fd2a19bb47","schema_version":"1.0","event_id":"sha256:7e81fb9d5f33e16eca349b0e89f2d7a08751f97782b8943b4a5ca5fd2a19bb47"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UWDCJOPMSTBYNNNZXWLYHZWEDJ/bundle.json","state_url":"https://pith.science/pith/UWDCJOPMSTBYNNNZXWLYHZWEDJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UWDCJOPMSTBYNNNZXWLYHZWEDJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T03:26:29Z","links":{"resolver":"https://pith.science/pith/UWDCJOPMSTBYNNNZXWLYHZWEDJ","bundle":"https://pith.science/pith/UWDCJOPMSTBYNNNZXWLYHZWEDJ/bundle.json","state":"https://pith.science/pith/UWDCJOPMSTBYNNNZXWLYHZWEDJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UWDCJOPMSTBYNNNZXWLYHZWEDJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UWDCJOPMSTBYNNNZXWLYHZWEDJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f0188fb2b0d57fc35141bfdf417b0eb0d97a42a6a1d171210a74feec5b6e1dba","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-09-27T06:14:46Z","title_canon_sha256":"d75068f5d9ecb12f13755e030c907d93f8314f8cf5985dcd61681eb36741246f"},"schema_version":"1.0","source":{"id":"2409.18468","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.18468","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"arxiv_version","alias_value":"2409.18468v2","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.18468","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"pith_short_12","alias_value":"UWDCJOPMSTBY","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"pith_short_16","alias_value":"UWDCJOPMSTBYNNNZ","created_at":"2026-07-05T09:45:55Z"},{"alias_kind":"pith_short_8","alias_value":"UWDCJOPM","created_at":"2026-07-05T09:45:55Z"}],"graph_snapshots":[{"event_id":"sha256:7e81fb9d5f33e16eca349b0e89f2d7a08751f97782b8943b4a5ca5fd2a19bb47","target":"graph","created_at":"2026-07-05T09:45:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.18468/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite the increasing popularity of Decentralized Applications (DApps), they are suffering from various vulnerabilities that can be exploited by adversaries for profits. Among such vulnerabilities, Read-Only Reentrancy (called ROR in this paper), is an emerging type of vulnerability that arises from the complex interactions between DApps. In the recent three years, attack incidents of ROR have already caused around 30M USD losses to the DApp ecosystem. Existing techniques for vulnerability detection in smart contracts can hardly detect Read-Only Reentrancy attacks, due to the lack of tracking","authors_text":"Jingwen Zhang, Kaiwen Ning, Mingxi Ye, Weizhe Zhang, Yuhong Nan, Yu Zhang, Zibin Zheng","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-09-27T06:14:46Z","title":"SmartReco: Detecting Read-Only Reentrancy via Fine-Grained Cross-DApp Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.18468","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0857548ff19eb2cba3f7562b43e182862de8efacd4eedc5edb758123046bedd2","target":"record","created_at":"2026-07-05T09:45:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f0188fb2b0d57fc35141bfdf417b0eb0d97a42a6a1d171210a74feec5b6e1dba","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2024-09-27T06:14:46Z","title_canon_sha256":"d75068f5d9ecb12f13755e030c907d93f8314f8cf5985dcd61681eb36741246f"},"schema_version":"1.0","source":{"id":"2409.18468","kind":"arxiv","version":2}},"canonical_sha256":"a58624b9ec94c386b5b9bd9783e6c41a60ff98bdb7c9daeef8ce72d64da4efbd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a58624b9ec94c386b5b9bd9783e6c41a60ff98bdb7c9daeef8ce72d64da4efbd","first_computed_at":"2026-07-05T09:45:55.390196Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:45:55.390196Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"S8STUFj32exoP+BXF4Hmr5+8/p4uwVUsYz3CG/V6N0/IoKtEcfOf5yQnuM3/6a/R4dBpG2XcUtwwBBMH5mNaDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:45:55.390680Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.18468","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0857548ff19eb2cba3f7562b43e182862de8efacd4eedc5edb758123046bedd2","sha256:7e81fb9d5f33e16eca349b0e89f2d7a08751f97782b8943b4a5ca5fd2a19bb47"],"state_sha256":"832622cb4945f3eb4d767221511f9ea010938cd95ea05600abd7e781c47806ea"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Tpg/lycLPUQK1JbdJs0ITyDBHVrTMJp3flISwja4Y7Q+Qh8NgSoS7wTFIUs026VLQUTuB1j2ixIbzlQ0RdHMCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T03:26:29.951135Z","bundle_sha256":"b0bf81453c211ba4bd29a0d7e12e49c37f9ae453f0a94a77fdbfeaa78ea569d3"}}