Smart contracts operate in a highly adversarial environment, where vulnerabilities can lead to substantial financial losses. Thus, smart contracts are subject to security audits. In auditing, proof-of-concept (PoC) exploits play a critical role by demonstrating to the stakeholders that the reported vulnerabilities are genuine, reproducible, and actionable. However, manually creating PoCs is time-consuming, error-prone, and often constrained by tight audit schedules. We introduce PoCo, an agentic framework that automatically generates executable PoC exploits from natural-language vulnerability descriptions written by auditors. PoCo autonomously generates PoC exploits in an agentic manner by interacting with a set of codeexecution tools in a Reason-Act-Observe loop. It produces fully executable exploits compatible with the Foundry testing framework, ready for integration into audit reports and other security tools. We evaluate PoCo on a dataset of 23 real-world vulnerability reports. PoCo consistently outperforms the Zero-shot and Workflow baselines, generating well-formed and logically correct PoCs. Our results demonstrate that agentic frameworks can significantly reduce the effort required for high-quality PoCs in smart contract audits. Our contribution provides actionable knowledge for the smart contract security community.

翻译：智能合约运行于高度对抗的环境中，其漏洞可能导致重大财务损失。因此，智能合约需接受安全审计。在审计过程中，概念验证（PoC）漏洞利用发挥着关键作用，它能向利益相关方证明所报告的漏洞是真实、可复现且可操作的。然而，手动创建PoC耗时耗力、易出错，且常受限于紧张的审计周期。本文提出PoCo，一种自主式框架，能够根据审计人员编写的自然语言漏洞描述自动生成可执行的PoC漏洞利用。PoCo通过与一组代码执行工具在“推理-执行-观察”循环中进行交互，以自主方式生成PoC漏洞利用。该框架生成完全可执行的漏洞利用代码，兼容Foundry测试框架，可直接集成至审计报告及其他安全工具中。我们在包含23个真实漏洞报告的数据集上对PoCo进行评估。实验表明，PoCo持续优于零样本基准与工作流基准，能够生成结构良好且逻辑正确的PoC。研究结果证明，自主式框架可显著降低智能合约审计中生成高质量PoC所需的工作量。本研究成果为智能合约安全社区提供了可直接应用的知识参考。