Dr. Lei Wu is an Associate Professor in both the College of Computer Science and Technology and the School of Cyber Science and Technology at Zhejiang University, China. His research interest lies mainly in security areas, including mobile security, program/binary analysis, vulnerability detection and exploitation, and blockchain security. He obtained his Ph.D. degree from North Carolina State University (Advisor: Prof. Xuxian Jiang) in 2015. Prior to joining Zhejiang University as a faculty, he worked as a senior security researcher at Qihoo 360 from 2015 to 2017. After that, he became a co-founder of a blockchain security company (PeckShield Inc.) and focused on blockchain security from 2017 to 2019.

Selected Recent Publications (Since 2020)


When Top-down Meets Bottom-up: Detecting and Exploiting Use-After-Cleanup Bugs in Linux Kernel [Paper]
Lin Ma, Duoming Zhou, Hanjie Wu, Yajin Zhou, Rui Chang, Hao Xiong, Lei Wu, Kui Ren
IEEE Symposium on Security and Privacy 2023 (IEEE S&P 2023)


Penny Wise and Pound Foolish: Quantifying the Risk of Unlimited Approval of ERC20 Tokens on Ethereum [Paper]
Dabao Wang, Hang Feng, Siwei Wu, Yajin Zhou, Lei Wu*, Xingliang Yuan
Proceedings of the 25th International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2022)

WASAI: Uncovering Vulnerabilities in Wasm Smart Contracts [Paper]
Weimin Chen, Zihan Sun, Haoyu Wang, Xiapu Luo, Haipeng Cai, Lei Wu
The 31st ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2022)

RegVault: Hardware Assisted Selective Data Randomization for Operating System Kernels [Paper]
Jinyan Xu, Haoran Lin, Ziqi Yuan, Wenbo Shen, Yajin Zhou, Rui Chang, Lei Wu, Kui Ren
Proceedings of the 59th The Design Automation Conference (DAC 2022)

Time-Travel Investigation: Towards Building A Scalable Attack Detection Framework on Ethereum [Paper]
Siwei Wu, Lei Wu, Yajin Zhou, Runhuai Li, Zhi Wang, Xiapu Luo, Cong Wang, Kui Ren
ACM Transactions on Software Engineering and Methodology (ACM TOSEM)

EXAMINER: Automatically Locating Inconsistent Instructions between Real Devices and CPU Emulators for ARM [Paper]
Muhui Jiang, Tianyi Xu, Yajin Zhou, Yufeng Hu, Ming Zhong, Lei Wu, Xiapu Luo, Kui Ren
Proceedings of the 2022 Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2022)


EnBinDiff: Identifying Data-only Patches for Binaries [Paper]
Jian Lin, Dingding Wang, Rui Chang, Lei Wu, Yajin Zhou, Kui Ren
IEEE Transactions on Dependable and Secure Computing (TDSC), Dec 09, 2021

ECMO: Peripheral Transplantation to Rehost Embedded Linux Kernels [Paper]
Muhui Jiang, Lin Ma, Yajin Zhou, Qiang Liu, Cen Zhang, Zhi Wang, Xiapu Luo, Lei Wu, Kui Ren
Proceedings of the 28th ACM Conference on Computer and Communications Security (CCS 2021)

FirmGuide: Boosting the Capability of Rehosting Embedded Linux Kernels through Model-Guided Kernel Execution [Paper]
Qiang Liu^, Cen Zhang^, Lin Ma, Muhui Jiang, Yajin Zhou, Lei Wu*, Wenbo Shen, Xiapu Luo, Yang Liu, Kui Ren
Proceedings of the 36th IEEE/ACM International Conference on Automated Software Engineering(ASE 2021)
(^The names of the first two authors are in alphabetical order)

Towards A First Step to Understand Flash Loan and Its Applications in DeFi Ecosystem [Paper]
Dabao Wang, Siwei Wu, Ziling Lin, Lei Wu, Xingliang Yuan, Yajin Zhou, Haoyu Wang, Kui Ren
Proceedings of the 9th International Workshop on Security in Blockchain and Cloud Computing (SBC 2021)

EOSAFE: Security Analysis of EOSIO Smart Contracts [Paper]
Ningyu He, Ruiyi Zhang, Haoyu Wang*, Lei Wu*, Xiapu Luo, Yao Guo*, Ting Yu, Xuxian Jiang
Proceedings of the 30th USENIX Security Symposium (USENIX Security 2021)

Towards Understanding and Demystifying Bitcoin Mixing Services [[Paper] | Data Set]
Lei Wu, Yufeng Hu, Yajin Zhou, Haoyu Wang, Xiapu Luo, Zhi Wang, Fan Zhang, Kui Ren
Proceedings of the 30th The Web Conference (WWW 2021)

SADPonzi: Detecting and Characterizing Ponzi Schemes in Ethereum Smart Contracts [Paper]
Weimin Chen, Xinran Li, Yuting Sui, Ningyu He, Haoyu Wang, Lei Wu, and Xiapu Luo
Proceedings of the ACM SIGMETRICS 2021 (SIGMETRICS 2021)


Don't Fish in Troubled Waters! Characterizing Coronavirus-themed Cryptocurrency Scams [Paper]
Pengcheng Xia, Haoyu Wang, Xiapu Luo, Lei Wu, Yajin Zhou, Guangdong Bai, Guoai Xu, Gang Huang, Xuanzhe Liu
APWG Symposium on Electronic Crime Research (eCrime), 2020

DEPOSafe: Demystifying the Fake Deposit Vulnerability in Ethereum Smart Contracts [Paper]
Ru Ji, Ningyu He, Lei Wu, Haoyu Wang, Guangdong Bai and Yao Guo
The 25th International Conference on Engineering of Complex Computer Systems (ICECCS), 2020

Understanding (Mis)Behavior on the EOSIO Blockchain [Paper]
Yuheng Huang, Haoyu Wang*, Lei Wu*, Gareth Tyson, Xiapu Luo, Run Zhang, Xuanzhe Liu, Gang Huang, Xuxian Jiang
Proceedings of the ACM SIGMETRICS 2020 (SIGMETRICS 2020)

Mobile App Squatting [Paper]
Yangyu Hu, Haoyu Wang, Ren He, Li Li, Gareth Tyson, Ignacio Castro, Yao Guo, Lei Wu, Guoai Xu
Proceedings of the 29th The Web Conference (WWW 2020). Best Student Paper Award.

Characterizing Code Clones in the Ethereum Smart Contract Ecosystem [Paper]
Ningyu He, Lei Wu, Haoyu Wang, Yao Guo, Xuxian Jiang
The 24th International Conference on Financial Cryptography and Data Security (FC), 2020

TPC Member