AI for Security: AI-assisted security analysis for Web3 (smart contracts, blockchain clients, on-chain txs, etc.) and complex software systems.
AI Agent Security: Security and trustworthiness of autonomous agents and AI-native systems.
AI for Program Analysis: Combining AI with program analysis for software understanding, testing, and security.
My work includes 8 papers published at top-tier (CCF-A) venues, including ICSE, ISSTA, USENIX Security, TOSEM, TSE, and TIFS. Beyond academic research, ongoing work includes real-world vulnerability discovery, PoC development, and open-source security tooling. Selected projects include , and DarkNavySecurity/web3-skills.
An empirical study of security risks introduced by EIP-7702 smart accounts across the blockchain ecosystem.
@inproceedings{yang2026eip7702,title={Revealing the Dark Side of Smart Accounts: An Empirical Study of EIP-7702 Incurred Risks in Blockchain Ecosystem},author={Huang, Mingyuan and Liu, Han and Yang, Shuo and Wu, Daoyuan and Wang, Shuai},booktitle={USENIX Security Symposium (CCF-A)},year={2026},}
An LLM and dataflow-guided symbolic execution framework for uncovering inconsistencies in decentralized applications.
@inproceedings{yang2025hyperion,title={Hyperion: Unveiling DApp Inconsistencies using LLM and Dataflow-Guided Symbolic Execution},author={Yang, Shuo and Lin, Xingwei and Chen, Jiachi and Zhong, Qingyuan and Xiao, Lei and Huang, Renke and Wang, Yanlin and Zheng, Zibin},booktitle={International Conference on Software Engineering (CCF-A)},year={2025},doi={10.1109/ICSE55347.2025.00015},}
A cross-contract analysis approach for detecting exploitable reentrancy vulnerabilities through attacker-contract identification.
@inproceedings{yang2024blockwatchdog,title={Uncover the Premeditated Attacks: Detecting Exploitable Reentrancy Vulnerabilities by Identifying Attacker Contracts},author={Yang, Shuo and Chen, Jiachi and Huang, Mingyuan and Zheng, Zibin and Huang, Yuan},booktitle={International Conference on Software Engineering (CCF-A)},year={2024},doi={10.1145/3597503.3639153},}
A systematic definition and detection study of defects in NFT smart contracts.
@inproceedings{yang2023nftdefects,title={Definition and Detection of Defects in NFT Smart Contracts},author={Yang, Shuo and Chen, Jiachi and Zheng, Zibin},booktitle={International Symposium on Software Testing and Analysis (CCF-A)},year={2023},doi={10.1145/3597926.3598063},}