Which CVEs actually map to Ethereum contracts, and where in the code are they? This paper ships a labeled dataset.