Dr. Tang's image; copyright 

Yuzhe Tang

Associate Professor
Dept. of EECS, Syracuse University
4206 Center of Science and Technology,
Syracuse, 13244-4100
Email: ytang100 [at] syr [dot] edu
@Twitter, Github, Scholar, LinkedIn, ORCID, DBLP

News
  • Aug 2026: Research on DeFi infra security is accepted by DeFi 26. Congrats to Wanning!

  • June 2026: Serve PC in USENIX Security 27. Please submit your best work.

  • June 2026: Paper on blockchain fuzzer accepted to TSE 26. Congrats to Yibo!

  • June 2026: Research on software supply-chain security is accepted by USENIX Security 26. Congrats to [our collaborators at Delaware]!

  • Apr 2026: Serve PC in IEEE S&P 27 and RAID 26. Please submit your best work.

  • Jan 2026: Research on mobile-app privacy is accepted by ACM WiSec 26. Congrats to [our collaborators at RIT]!

  • Sep 2025: Blockchain-security research is funded by Ethereum Foundation. Thank you EF & Congrats to Yibo!

  • Aug 2025: Serve PC in CCS 26 and USENIX Security 26. Please submit your best work.

  • June 2025: Blockchain-security research is funded by Flashbots. Thank you, Flashbots!

  • June 2025: Research on blockchain-based data management accepted to TKDE. Congrats to our collaborators!

  • [More news]

Research Interests

Distributed systems security, software security, privacy, and performance in emerging domains:

  • Blockchains, smart contracts and decentralized systems

  • Open-source software supply-chains

  • AI agents and domain applications

  • Security/systems education: [BADD labs], [FuSSIL labs]

Research supports generously from: National Science Foundation (NSF), Ethereum Foundation, Flashbots Inc, Intel, NSA, etc.

Research impacts: Bug bounty [EF leader board] and software patches [Geth 1.11.4 release notes].

Recent Publications

Underline: students advised by me.

  • TSE'26: “Towards Automated Discovery of Asymmetric Mempool DoS in Blockchains”, Yibo Wang, Yuzhe Tang, Kai Li, Wanning Ding. [pdf]

  • USENIX Security'26: “Toward Understanding the Security Implications in Python”, Xinwei Yu, Zhenkai Zhang, Yuzhe Tang, Xing Gao. [pdf]

  • DeFi'26: “Execution Robustness of DeFi Liquidations: Implications for OEV-Based Selection”, Wanning Ding, Yuzhe Tang, Pawel Szalachowski

  • WiSec'26: “Are Android Developers Following Privacy Guidelines? A Study on Logging Practices of Personal Data”, Jin Ouyang, Tiash Roy, Daqing Hou, Yuzhe Tang and Xueling Zhang. [pdf]

  • S&P'25: “Asymmetric Mempool DoS Security: Formal Definitions and Provable Secure Designs”, AR=14.2%, Wanning Ding, Yuzhe Tang, Yibo Wang. [pdf], [slides]

  • WWW'25: “SigScope: Detecting and Understanding Off-Chain Message Signing-related Vulnerabilities in Decentralized Applications”, AR=19.8%, Sajad Meisami, Hugo Dabadie, Song Li, Yuzhe Tang, Yue Duan. [pdf]

  • TKDE'25: “TELEX: Two-Level Learned Index for Rich Queries on Enclave-Based Blockchain Systems,” H. Wu, Yuzhe Tang, Z. Shen, J. Tao, C. Lin, Zhe Peng. In IEEE Transactions on Knowledge and Data Engineering [pdf]

  • TTPS'25: “Security Analysis and Formal Verification on Blockchain and Its Applications,” K. Li, R. Gu, J. Xu, Z. Chen, S. Wu, Y. Zhou, M. Zhang, X. Luo, Yuzhe Tang, Y. Li, X. Zhang, Yibo Wang, in Foundations and Trends in Privacy and Security [pdf]

  • USENIX Security'24: “Understanding Ethereum Mempool Security under Asymmetric DoS by Symbolized Stateful Fuzzing”, AR=14.5%, Yibo Wang, Yuzhe Tang, Kai Li, Wanning Ding, Zhihua Yang. [pdf], [slides], [demo]

  • WWW'24: “Characterizing Ethereum Upgradable Smart Contracts and Their Security Implications”, AR=20.2%, Xiaofan Li, Jin Yang, Jiaqi Chen, Yuzhe Tang, Xing Gao. [preprint], [slides]

  • CCS'21: “DETER: Denial of Ethereum Txpool sERvices”, AR=22%, Kai Li, Yibo Wang, Yuzhe Tang. [pdf], [slides], [talk], [poster], [Patch@Geth-1.11.4], [CVE-2022-23327], [CVE-2022-23328]

  • NDSS'21: “As Strong As Its Weakest Link: How to Break (and Fix) Blockchain DApps at RPC Service”, AR=15.2%, Kai Li, Jiaqi Chen, Xianghong Liu, Yuzhe Tang, X. Wang, X. Luo. [pdf], [slides], [demo1], [demo2]

  • IMC'21: “TopoShot: Uncovering Ethereum's Network Topology Leveraging Replacement Transactions”, AR=28%, Kai Li, Yuzhe Tang, Jiaqi Chen, Yibo Wang, Xianghong Liu. [pdf], [slides], [poster], [open dataset], [talk@IMC’21], [code]

  • FSE'21: “iBatch: Saving Ethereum Fees via Secure and Cost-Effective Batching of Smart-Contract Invocations”, AR=24.5%, Yibo Wang, Qi Zhang, Kai Li, Yuzhe Tang, Jiaqi Chen, X. Luo, T. Chen. [pdf], [extended version], [html], [slides]

  • ICDE'19: “GEM^2-Tree: A Gas-Efficient Structure for Authenticated Range Queries in Blockchain”, Full Paper, AR=26.8%, C. Zhang, C. Xu, J. Xu, Yuzhe Tang, B. Choi. [pdf]

Full list of publications: [link], [DBLP].

Advising

I am fortunate and grateful to work with the following bright Ph.D. students.

  • Jiaqi Chen [link]: WWW'24, WWW'24 (short), Euro S&P'23; NDSS'21, IMC'21, FSE'21, Middleware'20; internship at CertiK

  • Wanning Ding [link]: S&P'25, Ethereum Protocol Fellowship’22; Security’24; internship at Chainlink

  • Md Rizwanul Haque [link]

  • Urmi Biswas

Alumni:

  • Kai Li (PhD’22) [link]: Tenure-track Assistant Professor at Stevens Institute of Technology

  • Yibo Wang (PhD’25) [link]: Tenure-track Assistant Professor at Univ. of Wyoming

  • Yuxuan Zhou (PhD’26): Bytedance

[Link] to our FullStack Security Lab (FSSL)

Open-source Software

Teaching

  • CSE643 (’26/’25/’24): Computer Security [website]

  • CIS/FIN629 (’26/’25/’22/’21/’20/’19/’18): Blockchain Foundations and Applications. [website] [lectures] [hands-on labs]

  • CSE384 (’25/’23/’22/’19/’18/’17): Systems and network programming. [website]

  • CIS628/428 (’19): Introduction to applied cryptography. [website], [lecture notes]

  • CIS655 (’16/’15/’14): Advanced computer architecture. [website]

  • CIS700 (’15): Research seminar. [website]