Publications

Bibliometrics can be found in Google Scholar.

Manuscripts

Boost+: Equitable, Incentive-Compatible Block Building. Mengqian Zhang, Sen Yang (Yale University), Kartik Nayak (Duke University), Fan Zhang (Yale University). In submission.
- PDF from arXiv
Censorship Resistance vs Throughput in Multi-Proposer BFT Protocols. Fatima Elsheimy, Ioannis Kaklamanis, Sarisht Wadhwa, Charalampos Papamanthou, Fan Zhang. In submission.
- PDF from ePrint
Verifiable Aggregate Receipts with Applications to User Engagement Auditing. Ioannis Kaklamanis, Wenhao Wang (Yale University, IC3), Harjasleen Malvai (University of Illinois Urbana-Champaign, IC3), Fan Zhang (Yale University, IC3). In submission.
- PDF from ePrint
Insecurity Through Obscurity: Veiled Vulnerabilities in Closed-Source Contracts. Sen Yang, Kaihua Qin, Aviv Yaish,Fan Zhang. In submission.
- PDF from arXiv
Anonymous Self-Credentials and their Application to Single-Sign-On. Jayamine Alupotha, Mariarosaria Barbaraci (University of Bern), Ioannis Kaklamanis (Yale University), Abhimanyu Rawat (Universitat Pompeu Fabra), Christian Cachin (University of Bern), Fan Zhang (Yale University). In submission.
- PDF from ePrint
AUCIL: An Inclusion List Design for Rational Parties. Sarisht Wadhwa (Duke University), Julian Ma, Thomas Thiery, Barnabe Monnot, Luca Zanolini (Ethereum Foundation), Fan Zhang (Yale University), Kartik Nayak (Duke University). In submission.
- PDF from ePrint
CRATE: Cross-Rollup Atomic Transaction Execution. Ioannis Kaklamanis, Fan Zhang (Yale University). In submission.
- PDF from arXiv

2026

Cirrus: Performant and Accountable Distributed SNARK. Wenhao Wang (Yale University), Fangyan Shi (Tsinghua University), Dani Vilardell (Cornell University), Fan Zhang (Yale University). In The Network and Distributed System Security (NDSS) Symposium 2026 (to appear).
- PDF from ePrint
- Code

2025

RediSwap: MEV Redistribution Mechanism for CFMMs. Mengqian Zhang, Sen Yang, Fan Zhang. In In Proceedings of the Workshop on Decentralized Finance and Security (DeFi ‘25).

PDF from ACM DL PDF from arXiv

@inproceedings{10.1145/3733815.3764044,
    author = {Zhang, Mengqian and Yang, Sen and Zhang, Fan},
    title = {RediSwap: MEV Redistribution Mechanism for CFMMs},
    year = {2025},
    isbn = {9798400719042},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    url = {https://doi.org/10.1145/3733815.3764044},
    doi = {10.1145/3733815.3764044},
    booktitle = {Proceedings of the 2025 Workshop on Decentralized Finance and Security},
    pages = {27–36},
    numpages = {10},
    keywords = {Decentralized Finance, MEV Redistribution, Mechanism Design},
    series = {DeFi '25}
}

AGORA: Open More and Trust Less in Binary Verification Service. Hongbo Chen, Quan Zhou, Sen Yang, Xing Han, Fan Zhang, Danfeng Zhang, Xiaofeng Wang. In OOPSLA 2025.

PDF from ACM DL PDF from arXiv

@article{10.1145/3763099,
    author = {Chen, Hongbo and Zhou, Quan and Yang, Sen and Dang, Sixuan and Han, Xing and Zhang, Danfeng and Zhang, Fan and Wang, XiaoFeng},
    title = {Agora: Trust Less and Open More in Verification for Confidential Computing},
    year = {2025},
    issue_date = {October 2025},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    volume = {9},
    number = {OOPSLA2},
    url = {https://doi-org.yale.idm.oclc.org/10.1145/3763099},
    doi = {10.1145/3763099},
    journal = {Proc. ACM Program. Lang.},
    month = oct,
    articleno = {321},
    numpages = {28},
    keywords = {Program verification, confidential computing, smart contract, static analysis, trusted computing base}
}

Qelect: Lattice-based Single Secret Leader Election Made Practical. Yunhao Wang, Fan Zhang (Yale University). In USENIX Security 2025.

PDF from ePrint PDF from USENIX
Code

@inproceedings{DBLP:conf/uss/WangZ25,
author       = {Yunhao Wang and
                Fan Zhang},
editor       = {Lujo Bauer and
                Giancarlo Pellegrino},
title        = {Qelect: Lattice-based Single Secret Leader Election Made Practical},
booktitle    = {34th {USENIX} Security Symposium, {USENIX} Security 2025, Seattle,
                WA, USA, August 13-15, 2025},
pages        = {8461--8480},
publisher    = {{USENIX} Association},
year         = {2025},
url          = {https://www.usenix.org/conference/usenixsecurity25/presentation/wang-yunhao},
timestamp    = {Fri, 31 Oct 2025 16:17:35 +0100},
biburl       = {https://dblp.org/rec/conf/uss/WangZ25.bib},
bibsource    = {dblp computer science bibliography, https://dblp.org}
}

ZIPNet: Low-bandwidth anonymous broadcast from (dis)Trusted Execution Environments. Michael Rosenberg, Maurice Shih, Zhenyu Zhao, Rui Wang, Ian Miers, and Fan Zhang. In 25th Privacy Enhancing Technologies Symposium (PETS 2025).

PDF from ePrint
Code

@article{DBLP:journals/popets/RosenbergSZWMZ25,
author       = {Michael Rosenberg and
                Maurice Shih and
                Zhenyu Zhao and
                Rui Wang and
                Ian Miers and
                Fan Zhang},
title        = {ZIPNet: Low-bandwidth anonymous broadcast from (dis)Trusted Execution
                Environments},
journal      = {Proc. Priv. Enhancing Technol.},
volume       = {2025},
number       = {2},
pages        = {211--225},
year         = {2025},
url          = {https://doi.org/10.56553/popets-2025-0058},
doi          = {10.56553/POPETS-2025-0058},
timestamp    = {Mon, 12 May 2025 17:34:54 +0200},
biburl       = {https://dblp.org/rec/journals/popets/RosenbergSZWMZ25.bib},
bibsource    = {dblp computer science bibliography, https://dblp.org}
}

Decentralization of Ethereum's Builder Market. Sen Yang, Kartik Nayak, Fan Zhang. In IEEE S&P'25.

PDF from arXiv
Code

@inproceedings{yangDecentralizationEthereumsBuilder2025,
  title = {Decentralization of {{Ethereum}}'s {{Builder Market}}},
  author = {Yang, Sen and Nayak, Kartik and Zhang, Fan},
  date = {2025-05-01},
  pages = {1512--1530},
  publisher = {IEEE Computer Society},
  doi = {10.1109/SP61157.2025.00157},
  url = {https://www.computer.org/csdl/proceedings-article/sp/2025/223600b456/26hiUkhZyfK},
  urldate = {2025-06-19},
  eventtitle = {2025 {{IEEE Symposium}} on {{Security}} and {{Privacy}} ({{SP}})},
  isbn = {979-8-3315-2236-0},
  langid = {english}
}

Presented at SBC'24, CBER CtCC, EC24 Workshop on Blockchains and Decentralized Finance, S&P'25,
30-min Talk at SBC'24
Slides for a 10-minute talk at CBER Crafting the Cryptoeconomy Conference (Oct 26, 2024)
Featured in Wisdom of DeFi by EigenPhi

Prooφ: A ZKP Market Mechanism. Wenhao Wang, Lulu Zhou, Aviv Yaish, Fan Zhang, Ben Fisch, Benjamin Livshits. In Financial Cryptography and Data Security 2025 (FC25).
- PDF from arXiv
- Presented at ZK Summit 11 (Athens), Tokenomics'24 (Hong Kong), FC'25 (Japan), TLDR'25, IC3 Blockchain Camp'25
- Recording of Wenhao’s talk at ZK Summit 11, Athens, Greece

2024

SoK: MEV Countermeasures. Sen Yang, Fan Zhang, Ken Huang, Xi Chen, Youwei Yang, Feng Zhu. In Proceedings of the Workshop on Decentralized Finance and Security (DeFi ‘24).
- PDF from ACM DL PDF from arXiv
Unpacking Long-Latency Transactions in Ethereum. Chon Kit Lao, Sophie Zhou, Luyao Zhang, Fan Zhang, Kanye Ye Wang. In Proceedings of the Workshop on Decentralized Finance and Security (DeFi ‘24).
- PDF from ACM DL
(Book Chapter) Web3: Blockchain, the New Economy, and the Self-Sovereign Internet. Ken Huang, DistributedApps.ai, Youwei Yang, Bit Mining Limited, Fan Zhang, Yale University, Xi Chen, New York University, Feng Zhu, Harvard Business School. In Cambridge Press.
- Order from Cambridge
CrudiTEE: A Stick-and-Carrot Approach to Building Trustworthy Cryptocurrency Wallets with TEEs. Lulu Zhou, Zeyu Liu, Fan Zhang, Michael K. Reiter. In Advances in Financial Technologies (AFT 2024).
- PDF from arXiv
- Code
Data Independent Order Policy Enforcement: Limitations and Solutions. Sarisht Wadhwa, Luca Zanolini, Francesco D’Amato, Aditya Asgaonkar, Kartik Nayak, and Fan Zhang. In ACM CCS'24.
- PDF from ePrint
Sprints: Intermittent Blockchain PoW Mining. Michael Mirkin, Lulu Zhou, Ittal Eyal, Fan Zhang. In USENIX Security'24.
- PDF from ePrint PDF from USENIX

2023

The Locality of Memory Checking. Weijie Wang, Yujie Lu, Charalampos Papamanthou, and Fan Zhang. In ACM Conference on Computer and Communications Security (CCS'23).
- PDF from ACM DL PDF from ePrint
Fed-CBS: A Heterogeneity-Aware Client Sampling Mechanism for Federated Learning via Class-Imbalance Reduction. Zhang, Jianyi and Li, Ang and Tang, Minxue and Sun, Jingwei and Chen, Xiang and Zhang, Fan and Chen, Changyou and Chen, Yiran and Li, Hai. In Proceedings of the 40th International Conference on Machine Learning, PMLR 202:41354-41381, 2023.
MISO: Legacy-compatible Privacy-preserving Single Sign-on using Trusted Execution Environments. Xu, Rongwu and Yang, Sen and Zhang, Fan and Fang, Zhixuan. In 2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P'23).
- PDF from arXiv PDF from IEEE Xplore
He-HTLC: Revisiting Incentives in HTLC. Sarisht Wadhwa, Jannis Stoeter, Fan Zhang, Kartik Nayak. In Network and Distributed System Security (NDSS'23).
- PDF from ePrint
- Blog post at Decentralized Thoughts

2022

zkBridge: Trustless Cross-chain Bridges Made Practical. Tiancheng Xie, Jiaheng Zhang, Zerui Cheng, Fan Zhang, Yupeng Zhang, Yongzheng Jia, Dan Boneh, and Dawn Song. In ACM Conference on Computer and Communications Security (CCS'22).
- PDF from ACM DL PDF from arXiv
Empirical Analysis of EIP-1559: Transaction Fees, Waiting Time, and Consensus Security. Y. Liu, Y. Lu, K. Nayak, F. Zhang, L. Zhang, Y. Zhao. In ACM Conference on Computer and Communications Security (CCS).
- Covered in Coin Metrics,
- PDF from ACM DL PDF from arXiv

2021

CanDID: Can-Do Decentralized Identity with Legacy Compatibility, Sybil-Resistance, and Accountability. D. Maram, H. Malvai, F. Zhang, N. Jean-Louis, A. Frolov, T. Kell, T. Lobban, C. Moy, A. Juels, and A. Miller. In IEEE Symposium on Security & Privacy (S&P'21).
- PDF from ePrint

2020

DECO: Liberating Web Data Using Decentralized Oracles for TLS. F. Zhang, SKD Maram, H. Malvai, S. Goldfeder, and A. Juels. In ACM Conference on Computer and Communications Security (CCS).
- Licensed to Chainlink.
- Covered in Forbes, CoinDesk, CoinTelegraph, PR Newswire, FXStreet
- Project Website
- PDF from ACM DL PDF from arXiv
Design Choices for Central Bank Digital Currency: Policy and Technical Considerations. S. Allen, S. Čapkun, I. Eyal, G. Fanti, B. Ford, J. Grimmelmann, A. Juels, K. Kostiainen, S. Meiklejohn, A. Miller, E. Prasad, K. Wüst, and F. Zhang(Authors are ordered alphabetically). In NBER Working Paper No. 27634.
- NBER Working Paper
Order-Fairness for Byzantine Consensus. M. Kelkar, F. Zhang, S. Goldfeder, and A. Juels. In The Annual International Cryptology Conference (CRYPTO'20).
- PDF from ePrint
The Ekiden Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contracts. F. Zhang, W. He, R. Cheng, J. Kos, N. Hynes, N. Johnson, A. Juels, A. Miller, and D. Song. In IEEE Security & Privacy Magazine (Volume: 18, Issue: 3, May-June 2020).
- Invited paper.
- PDF from IEEE Xplore

2019

CHURP: Dynamic-Committee Proactive Secret Sharing. SKD Maram*, F. Zhang*, L. Wang, A. Low, Y. Zhang, A. Juels, and D. Song(*indicates equal contribution). In ACM Conference on Computer and Communications Security (CCS'19).
- Covered in MIT Tech Review China
- Project Website
- PDF from ACM DL PDF from ePrint
- Code
Tesseract: Real-Time Cryptocurrency Exchange using Trusted Hardware. I. Bentov, Y. Ji, F. Zhang, Y. Li, X. Zhao, L. Breidenbach, P. Daian, and A. Juels. In ACM Conference on Computer and Communications Security (CCS'19).
- PDF from ACM DL PDF from ePrint

Ekiden: A Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contracts. R. Cheng, F. Zhang, J. Kos, W. He, N. Hynes, N. M. Johnson, A. Juels, A. Miller, and D. Song. In IEEE European Symposium on Security and Privacy (EuroS&P'19).

Implemented by Oasis Labs. Invited to appear in IEEE Security and Privacy Magazine.
Covered in Forbes
PDF from arXiv PDF from IEEE Xplore

@inproceedings{chengEkiden2019,
  title = {Ekiden: {{A Platform}} for {{Confidentiality-Preserving}}, {{Trustworthy}}, and {{Performant Smart Contracts}}},
  shorttitle = {Ekiden},
  booktitle = {2019 {{IEEE European Symposium}} on {{Security}} and {{Privacy}} ({{EuroS}}\&{{P}})},
  author = {Cheng, Raymond and Zhang, Fan and Kos, Jernej and He, Warren and Hynes, Nicholas and Johnson, Noah and Juels, Ari and Miller, Andrew and Song, Dawn},
  date = {2019-06},
  pages = {185--200},
  doi = {10.1109/EuroSP.2019.00023},
  eventtitle = {2019 {{IEEE European Symposium}} on {{Security}} and {{Privacy}} ({{EuroS}}\&{{P}})},
  keywords = {blockchain,Blockchain,confidentiality preserving smart contracts,Cryptography,Hardware,smart contracts,Smart contracts,trusted hardware},
}

Paralysis Proofs: Secure Dynamic Access Structures for Cryptocurrency Custody and More. F. Zhang, P. Daian, I. Bentov, I. Miers, and A. Juels. In ACM Advances in Financial Technologies (AFT'19).
- Covered in BitcoinMagazine
- PDF from ACM DL PDF from ePrint

2017

REM: Resource-Efficient Mining for Blockchains. F. Zhang, I. Eyal, R. Escriva, A. Juels, and R. van Renesse. In USENIX Security Symposium (Security'17).
- Covered in IEEE Spectrum
- PDF from USENIX
Sealed-Glass Proofs: Using Transparent Enclaves to Prove and Sell Knowledge. F. Tramèr, F. Zhang, H. Lin, Jean-Pierre Hubaux, A. Juels, and E. Shi. In IEEE European Symposium on Security and Privacy (EuroS&P'17).
- PDF from ePrint PDF from IEEE Xplore
Solidus: Confidential Distributed Ledger Transactions via PVORM. E. Cecchetti, F. Zhang, Y. Ji, A. E. Kosba, A. Juels, and E. Shi. In ACM Conference on Computer and Communications Security (CCS'17).
- PDF from ACM DL PDF from ePrint

2016

Stealing Machine Learning Models via Prediction APIs. F. Tramèr, F. Zhang, A. Juels, M. K. Reiter, and T. Ristenpart. In USENIX Security Symposium (Security'16).
- PDF from USENIX
Town Crier: An Authenticated Data Feed for Smart Contracts. F. Zhang, E. Cecchetti, K. Croman, A. Juels, and E. Shi. In ACM Conference on Computer and Communications Security (CCS'16).
- Licensed to ChainLink.
- Covered in MIT Tech Review, Forbes, BitcoinExchangeGuide, Unhashed, CoinDesk, MIT Technology Review, ETHNews
- Project Website
- PDF from ACM DL PDF from ePrint
- Code

2015

PlateClick: Bootstrapping Food Preferences Through an Adaptive Visual Interface. L. Yang, Y. Cui, F. Zhang, J. P. Pollak, S. Belongie, and D. Estrin. In ACM Conference on Information and Knowledge Management (CIKM'15).
- PDF from ACM DL