Feng Xiao

A Framework and DataSet for Bugs in Ethereum Smart Contracts

2020 · arXiv (Cornell University)

Ethereum is the largest blockchain platform that supports smart contracts. Users deploy smart contracts by publishing the smart contract's bytecode to the blockchain. Since the data in the blockchain cannot be modified, even if these …

Understanding and Mitigating Remote Code Execution Vulnerabilities in Cross-platform Ecosystem

2022 · Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security

JavaScript cross-platform frameworks are becoming increasingly popular. They help developers easily and conveniently build cross-platform applications while just needing only one JavaScript codebase. Recent security reports showed several high-profile cross-platform applications (e.g., Slack, Microsoft Teams, …

Multi-Mission Tool Bench: Assessing the Robustness of LLM based Agents through Related and Dynamic Missions

2025 · arXiv (Cornell University)

Large language models (LLMs) demonstrate strong potential as agents for tool invocation due to their advanced comprehension and planning capabilities. Users increasingly rely on LLM-based agents to solve complex missions through iterative interactions. However, existing …