DeLLMGuard Cuts LLM Vulnerability-Scanner Root-Cause Accuracy From 23.5% to 6.6% While Keeping Source Public

arXiv 2608.28400·medium signalXBlueskyLinkedInCopy link

arXiv 2608.28400 (2026-08-28, cs.CR/cs.SE) treats verified smart-contract source disclosure as an attack input now that LLM agent workflows make large-scale exploit scanning practical. DeLLMGuard separates disclosed source from runtime execution across multiple contract addresses so an agent must first recover proxy, delegate and factory relations, with a Verification Layer checking deployment relations, runtime bytecode, source and state changes to prove the transformation preserves the original business logic. Evaluated on 387 real-world vulnerable contracts with three LLM agents in an environment derived from SCONE-bench, it reduces overall root-cause correctness from 23.5% to 6.6% and beats the closed-source bytecode baseline on the primary non-proxy set.