Shuo Yang (杨硕)

prof_pic.jpg

I am a Ph.D. candidate at the School of Software Engineering, Sun Yat-sen University (中山大学), advised by Prof. Zibin Zheng (郑子彬) and Dr. Jiachi Chen (陈嘉弛) since September 2022. I expect to graduate in June 2027.

My research interests include:

  • AI for Security: AI-assisted security analysis for Web3 (smart contracts, blockchain clients, on-chain txs, etc.) and complex software systems.
  • AI Agent Security: Security and trustworthiness of autonomous agents and AI-native systems.
  • AI for Program Analysis: Combining AI with program analysis for software understanding, testing, and security.

My work includes 8 papers published at top-tier (CCF-A) venues, including ICSE, ISSTA, USENIX Security, TOSEM, TSE, and TIFS. Beyond academic research, ongoing work includes real-world vulnerability discovery, PoC development, and open-source security tooling. Selected projects include X Views, and DarkNavySecurity/web3-skills GitHub stars.

news

Jan 15, 2026 🎉 One paper is accepted by Usenix Security 2026. Congrats to Mingyuan!
Aug 15, 2025 🎉 One paper is accepted by TSE

security highlights

$22,800+ in rewards from Immunefi Web3 bug bounties.
PoCs of 10 previously uncovered attacks confirmed by DeFiHackLabs GitHub stars for DeFiHackLabs.
Two prompt-leak vulnerabilities were confirmed by the developers of two GPTs, who adopted our prompt-protection method.

industry experience

DarkNavy — Research Intern
Shanghai, China · Jul. 2025 – Aug. 2026
GoPlus — Research Intern
Remote · Sep. 2024 – Dec. 2024
Skyward Lab, Ant Group — Research Intern
Hangzhou, China · Aug. 2023 – Jan. 2024
WeBank — Blockchain R&D Intern
Shenzhen, China · Oct. 2021 – Jan. 2022

selected honors and awards

National Scholarship for Graduate Students Nov. 2024
President Scholarship for Graduate Students, Sun Yat-sen University Oct. 2023
1st Prize, China Service Computing Innovation Contest Sep. 2023
8th Place, Numen Cyber CTF Apr. 2023

selected publications

  1. Revealing the Dark Side of Smart Accounts: An Empirical Study of EIP-7702 Incurred Risks in Blockchain Ecosystem
    Mingyuan Huang, Han Liu, Shuo Yang, Daoyuan Wu, and 1 more author
    In USENIX Security Symposium (CCF-A), 2026
  2. Hyperion: Unveiling DApp Inconsistencies using LLM and Dataflow-Guided Symbolic Execution
    Shuo Yang, Xingwei Lin, Jiachi Chen, Qingyuan Zhong, and 4 more authors
    In International Conference on Software Engineering (CCF-A), 2025
  3. Uncover the Premeditated Attacks: Detecting Exploitable Reentrancy Vulnerabilities by Identifying Attacker Contracts
    Shuo Yang, Jiachi Chen, Mingyuan Huang, Zibin Zheng, and 1 more author
    In International Conference on Software Engineering (CCF-A), 2024
  4. Definition and Detection of Defects in NFT Smart Contracts
    Shuo Yang, Jiachi Chen, and Zibin Zheng
    In International Symposium on Software Testing and Analysis (CCF-A), 2023