diff --git a/README.md b/README.md
index e681d5a..41f4500 100644
--- a/README.md
+++ b/README.md
@@ -5,8 +5,6 @@
 ![](https://img.shields.io/github/license/EdisonLeeeee/RS-Adversarial-Learning)
 
 ### 👉 Table of Contents 👈
-- [Awesome Adversarial Learning on Recommender System (Updating)](#awesome-adversarial-learning-on-recommender-system-updating)
-- [👉 Table of Contents 👈](#-table-of-contents-)
 - [Attack](#attack)
 	- [2022](#2022)
 	- [2021](#2021)
@@ -32,6 +30,7 @@
 ## 2022
 + **PipAttack: Poisoning Federated Recommender Systems for Manipulating Item Promotion**, *WSDM*,  [📝Paper](https://arxiv.org/abs/2110.10926)
 + **Targeted Data Poisoning Attack on News Recommendation System**， *Arxiv*, [📝Paper](https://arxiv.org/abs/2203.03560)
++ **FedRecAttack: Model Poisoning Attack to Federated Recommendation**, *ICDE*, [📝Paper](https://arxiv.org/abs/2204.01499), [:octocat:Code](https://github.com/rdz98/FedRecAttack)
 
 ## 2021
 + **A Black-Box Attack Model for Visually-Aware Recommender Systems**, *WSDM*, [📝Paper](https://arxiv.org/abs/2011.02701)