SmartPoC: Generating Executable and Validated PoCs for Smart Contract Bug Reports
Longfei Chen, Ruibin Yan, Taiyu Wong, Yiyang Chen, Jialai Wang, Chao Zhang

TL;DR
SmartPoC is an end-to-end system that generates and executes executable PoC test cases for smart contract vulnerabilities, improving validation accuracy and reducing manual effort.
Contribution
It introduces a novel approach combining focused report analysis, generate-repair-execute loops, and differential verification for reliable exploitability confirmation.
Findings
Achieves over 98% confirmation precision on benchmarks.
Confirms 64 bugs from 545 findings at low cost.
Improves exploitability verification accuracy for smart contracts.
Abstract
Smart contracts are commonly audited through static analysis to explore vulnerabilities. However, static approaches typically produce heterogeneous findings rather than reproducible, executable proof-of-concept (PoC) test cases, leading to costly and ad hoc manual validation. Large language models (LLMs) offer a promising way to translate audit reports into PoC test cases, but face three major challenges: noisy inputs, lack of execution grounding, and missing runtime oracles. We present SmartPoC, an end-to-end approach for validating reported vulnerabilities in audit reports by generating and executing PoC test cases with automated exploitability verification. SmartPoC first extracts a focused function-level slice from each report to reduce noise, centering on the key functions referenced in a finding and augmenting them with execution-relevant neighbors. To improve executability, we…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
