首页 > 最新文献
paperpass

Blockchain-Research and Applications最新文献

英文 中文
An auditable confidentiality protocol for blockchain transactions 区块链事务的可审计机密性协议
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-10-01 Epub Date: 2025-09-08 DOI: 10.1016/j.bcra.2025.100380
Aoxuan Li, Gabriele D'Angelo, Su-Kit Tang, Frank Fang, Baron Gong
Blockchain technology inherently exposes user payment details, including account balances, asset holdings, and transaction histories, posing significant security and privacy risks. Moreover, no existing cross-chain bridges support private transactions that protect users' trading histories. This paper introduces a novel confidentiality protocol that conceals user payments while ensuring auditability. The protocol employs a privacy committee, where encrypted secret shares of transaction data are distributed among committee members. Auditors can access private transaction data only with majority approval from the committee. Additionally, the protocol utilizes a zero-knowledge rollup scheme, batching multiple transactions to reduce private transaction costs by 90% compared to non-batched approaches. Implemented using ZoKrates and Solidity, the proposed scheme has been evaluated on the Ethereum test network, demonstrating a one-to-one private transaction latency of approximately 5 s. The protocol's security is rigorously analyzed using the standard real/ideal world paradigm.
区块链技术本质上暴露了用户支付细节,包括账户余额、资产持有和交易历史,带来了重大的安全和隐私风险。此外,没有现有的跨链桥支持保护用户交易历史的私人交易。本文介绍了一种新的保密协议,在保证可审计性的同时隐藏用户支付。该协议采用了一个隐私委员会,交易数据的加密秘密共享在委员会成员之间分发。审计人员只有在获得委员会多数同意的情况下才能访问私人交易数据。此外,该协议利用零知识累积方案,对多个事务进行批处理,与非批处理方法相比,可将私人交易成本降低90%。使用ZoKrates和Solidity实现的提议方案已在以太坊测试网络上进行了评估,证明了一对一的私人交易延迟约为5秒。使用标准的真实/理想世界范式严格分析了协议的安全性。
{"title":"An auditable confidentiality protocol for blockchain transactions","authors":"Aoxuan Li,&nbsp;Gabriele D'Angelo,&nbsp;Su-Kit Tang,&nbsp;Frank Fang,&nbsp;Baron Gong","doi":"10.1016/j.bcra.2025.100380","DOIUrl":"10.1016/j.bcra.2025.100380","url":null,"abstract":"<div><div>Blockchain technology inherently exposes user payment details, including account balances, asset holdings, and transaction histories, posing significant security and privacy risks. Moreover, no existing cross-chain bridges support private transactions that protect users' trading histories. This paper introduces a novel confidentiality protocol that conceals user payments while ensuring auditability. The protocol employs a privacy committee, where encrypted secret shares of transaction data are distributed among committee members. Auditors can access private transaction data only with majority approval from the committee. Additionally, the protocol utilizes a zero-knowledge rollup scheme, batching multiple transactions to reduce private transaction costs by 90% compared to non-batched approaches. Implemented using ZoKrates and Solidity, the proposed scheme has been evaluated on the Ethereum test network, demonstrating a one-to-one private transaction latency of approximately 5 s. The protocol's security is rigorously analyzed using the standard real/ideal world paradigm.</div></div>","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 5","pages":"Article 100380"},"PeriodicalIF":6.5,"publicationDate":"2026-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"149211213","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
CAVer: Compacting accumulation to reduce cross-chain verification overhead CAVer:压缩累积以减少跨链验证开销
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-10-01 Epub Date: 2025-09-08 DOI: 10.1016/j.bcra.2025.100381
Yi Guo, Yuying Wang, Jinyue Huang, Tiantian Duan, Linpeng Jia, Hanwen Zhang, Yi Sun
The data silos between heterogeneous blockchain platforms have given rise to cross-chain protocols. These cross-chain protocols enable secure interoperability between multiple distinct blockchains. Security requires that the target chain has the ability to verify whether cross-chain messages have been finalized on the source chain. Existing cross-chain protocols first synchronize source chain block headers to the target chain and validate them, then verify cross-chain messages included in the header's commitment value using native accumulators, like a Merkle tree. Cross-chain verification incurs significant on-chain overhead. Existing solutions primarily focus on optimizing header verification, while neglecting verification overhead for messages. It is worth noting that as the number of on-chain states increases, the number of elements in the accumulator multiplies, leading to a larger proof size that escalates message verification overhead on the target chain. To reduce message verification overhead on the target chain, we present CAVer. It removes non-cross-chain states from accumulators to minimize message proof size. CAVer incorporates three schemes: Fill-Weak, Fill-Mid, and Fill-Pro. Fill-Weak abandons blockchain's native accumulators by creating a new contract-based compacting accumulator exclusively for cross-chain messages on the source chain. Based on Fill-Weak, Fill-Mid, and Fill-Pro employ block-isolation and target-isolation, respectively, to further reduce verification overhead. Additionally, we design the algorithm AppendAndTailor to reduce storage cost on the source chain. It aims at trimming historical states when accumulating cross-chain messages. Evaluations on Ethereum-like blockchains demonstrate that CAVer reduces message verification overhead on the target chain by 76% compared to the existing state-of-the-art scheme.
异构区块链平台之间的数据孤岛导致了跨链协议的出现。这些跨链协议实现了多个不同区块链之间的安全互操作性。安全性要求目标链具有验证跨链消息是否已在源链上完成的能力。现有的跨链协议首先将源链块头同步到目标链并验证它们,然后使用本地累加器(如Merkle树)验证头的承诺值中包含的跨链消息。跨链验证会导致显著的链上开销。现有的解决方案主要关注于优化报头验证,而忽略了消息的验证开销。值得注意的是,随着链上状态数量的增加,累加器中的元素数量会增加,从而导致更大的证明大小,从而增加目标链上的消息验证开销。为了减少目标链上的消息验证开销,我们提出了CAVer。它从累加器中删除非跨链状态,以最小化消息证明大小。CAVer包含三种方案:Fill-Weak、Fill-Mid和Fill-Pro。Fill-Weak通过为源链上的跨链消息创建一个新的基于契约的压缩累加器来放弃区块链的本地累加器。在Fill-Weak的基础上,Fill-Mid和Fill-Pro分别采用了块隔离和目标隔离,进一步降低了验证开销。此外,我们还设计了AppendAndTailor算法,以减少源链上的存储成本。它的目的是在积累跨链消息时修剪历史状态。对类似以太坊的区块链的评估表明,与现有的最先进方案相比,CAVer将目标链上的消息验证开销减少了76%。
{"title":"CAVer: Compacting accumulation to reduce cross-chain verification overhead","authors":"Yi Guo,&nbsp;Yuying Wang,&nbsp;Jinyue Huang,&nbsp;Tiantian Duan,&nbsp;Linpeng Jia,&nbsp;Hanwen Zhang,&nbsp;Yi Sun","doi":"10.1016/j.bcra.2025.100381","DOIUrl":"10.1016/j.bcra.2025.100381","url":null,"abstract":"<div><div>The data silos between heterogeneous blockchain platforms have given rise to cross-chain protocols. These cross-chain protocols enable secure interoperability between multiple distinct blockchains. Security requires that the target chain has the ability to verify whether cross-chain messages have been finalized on the source chain. Existing cross-chain protocols first synchronize source chain block headers to the target chain and validate them, then verify cross-chain messages included in the header's commitment value using native accumulators, like a Merkle tree. Cross-chain verification incurs significant on-chain overhead. Existing solutions primarily focus on optimizing header verification, while neglecting verification overhead for messages. It is worth noting that as the number of on-chain states increases, the number of elements in the accumulator multiplies, leading to a larger proof size that escalates message verification overhead on the target chain. To reduce message verification overhead on the target chain, we present CAVer. It removes non-cross-chain states from accumulators to minimize message proof size. CAVer incorporates three schemes: Fill-Weak, Fill-Mid, and Fill-Pro. Fill-Weak abandons blockchain's native accumulators by creating a new contract-based compacting accumulator exclusively for cross-chain messages on the source chain. Based on Fill-Weak, Fill-Mid, and Fill-Pro employ block-isolation and target-isolation, respectively, to further reduce verification overhead. Additionally, we design the algorithm <span>AppendAndTailor</span> to reduce storage cost on the source chain. It aims at trimming historical states when accumulating cross-chain messages. Evaluations on Ethereum-like blockchains demonstrate that CAVer reduces message verification overhead on the target chain by 76% compared to the existing state-of-the-art scheme.</div></div>","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 5","pages":"Article 100381"},"PeriodicalIF":6.5,"publicationDate":"2026-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"149211224","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Enhancing health data integrity through on-chain verification and cryptographic proofs 通过链上验证和加密证明增强健康数据的完整性
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-10-01 Epub Date: 2025-08-27 DOI: 10.1016/j.bcra.2025.100373
Fausto Neri da Silva Vanin, Blanda Helena de Mello, Rodrigo da Rosa Righi, Cristiano André da Costa, Rodolfo Stoffel Antunes
The integration of blockchain technology in healthcare has gained significant attention due to its potential to address critical challenges such as data privacy, interoperability, and health record integrity. Although electronic health record (EHR) standards such as health level 7 fast healthcare interoperability resources (HL7 FHIR) and OpenEHR provide frameworks for data consistency and interoperability, concerns persist regarding the privacy and security of sensitive patient information, particularly in compliance with regulations. Existing solutions often store only hashed representations of data on blockchain nodes, making direct on-chain validation impossible and increasing the risk of invalid or malicious data entering the system. This paper introduces maximize, encrypt, prove, comply and adapt (MEPCA), a novel blockchain-based framework designed to enhance on-chain EHR data processing using cryptographic techniques. The model incorporates an innovative method to generate cryptographic proofs of data validity, enabling direct on-chain verification of hash digests. We present practical use case implementations and perform a technical evaluation of a fully on-chain MEPCA approach within the HL7 FHIR ecosystem. Our analysis examines the processing time of the hash proof algorithm, comparing it with existing methods based on transactions per second (TPS), latency, and computational efficiency in a multi-host network environment. The experimental results show that the MEPCA framework achieves a maximum of 83.2 TPS, with a latency below 1.5 s and the hash-proof computation taking 1.6 ms. Our primary contribution is to demonstrate viable healthcare scenarios for a fully on-chain approach, providing strategic guidance for the adoption of decentralized solutions in healthcare through technical evaluation and real-world applications.
区块链技术在医疗保健领域的集成受到了广泛关注,因为它有可能解决数据隐私、互操作性和健康记录完整性等关键挑战。尽管电子健康记录(EHR)标准(如健康级别7的快速医疗保健互操作性资源(HL7 FHIR)和OpenEHR)为数据一致性和互操作性提供了框架,但仍然存在对敏感患者信息的隐私和安全性的担忧,特别是在遵守法规方面。现有的解决方案通常只在区块链节点上存储数据的散列表示,这使得无法进行直接的链上验证,并增加了无效或恶意数据进入系统的风险。本文介绍了最大化、加密、证明、遵守和适应(MEPCA),这是一种基于区块链的新型框架,旨在使用加密技术增强链上EHR数据处理。该模型采用了一种创新的方法来生成数据有效性的加密证明,从而可以直接在链上验证哈希摘要。我们提出了实际的用例实现,并对HL7 FHIR生态系统中的全链MEPCA方法进行了技术评估。我们的分析检查了哈希证明算法的处理时间,并将其与多主机网络环境中基于每秒事务数(TPS)、延迟和计算效率的现有方法进行了比较。实验结果表明,MEPCA框架最大可达到83.2 TPS,延迟低于1.5 s,防哈希计算时间为1.6 ms。我们的主要贡献是展示完全链上方法的可行医疗方案,通过技术评估和实际应用程序为在医疗保健中采用分散解决方案提供战略指导。
{"title":"Enhancing health data integrity through on-chain verification and cryptographic proofs","authors":"Fausto Neri da Silva Vanin,&nbsp;Blanda Helena de Mello,&nbsp;Rodrigo da Rosa Righi,&nbsp;Cristiano André da Costa,&nbsp;Rodolfo Stoffel Antunes","doi":"10.1016/j.bcra.2025.100373","DOIUrl":"10.1016/j.bcra.2025.100373","url":null,"abstract":"<div><div>The integration of blockchain technology in healthcare has gained significant attention due to its potential to address critical challenges such as data privacy, interoperability, and health record integrity. Although electronic health record (EHR) standards such as health level 7 fast healthcare interoperability resources (HL7 FHIR) and OpenEHR provide frameworks for data consistency and interoperability, concerns persist regarding the privacy and security of sensitive patient information, particularly in compliance with regulations. Existing solutions often store only hashed representations of data on blockchain nodes, making direct on-chain validation impossible and increasing the risk of invalid or malicious data entering the system. This paper introduces maximize, encrypt, prove, comply and adapt (MEPCA), a novel blockchain-based framework designed to enhance on-chain EHR data processing using cryptographic techniques. The model incorporates an innovative method to generate cryptographic proofs of data validity, enabling direct on-chain verification of hash digests. We present practical use case implementations and perform a technical evaluation of a fully on-chain MEPCA approach within the HL7 FHIR ecosystem. Our analysis examines the processing time of the hash proof algorithm, comparing it with existing methods based on transactions per second (TPS), latency, and computational efficiency in a multi-host network environment. The experimental results show that the MEPCA framework achieves a maximum of 83.2 TPS, with a latency below 1.5 s and the hash-proof computation taking 1.6 ms. Our primary contribution is to demonstrate viable healthcare scenarios for a fully on-chain approach, providing strategic guidance for the adoption of decentralized solutions in healthcare through technical evaluation and real-world applications.</div></div>","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 5","pages":"Article 100373"},"PeriodicalIF":6.5,"publicationDate":"2026-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"149211212","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Virtual influence, real impact: Deciphering social media sentiment and its effects on cryptocurrency market dynamics 虚拟影响,真实影响:解读社交媒体情绪及其对加密货币市场动态的影响
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-10-01 Epub Date: 2025-08-23 DOI: 10.1016/j.bcra.2025.100375
Iheb Ghazouani, Ines Ghazouani, Abdelwahed Omri
This research investigates the effect of social media sentiment on the cryptocurrency market, particularly focusing on Bitcoin and Ethereum. Using TensorFlow as a machine learning tool, we developed a sentiment index from 66,582 Reddit posts about Bitcoin and 23,231 about Ethereum, collected in 2022. The sentiment scores, ranging from −1 (negative) to 1 (positive), were categorized into positive, neutral, and negative classes and analyzed alongside daily return and volatility metrics for both cryptocurrencies using a Vector Autoregression (VAR) model. Our study identifies significant impacts of social media sentiment on cryptocurrency markets. Specifically, Bitcoin’s returns show a heightened sensitivity to negative sentiment, whereas Ethereum’s returns remain unaffected by any sentiment type. However, the volatility of both cryptocurrencies is affected by neutral sentiment. These findings highlight distinct behavioral patterns across cryptocurrencies and uncover a bidirectional relationship between market dynamics and social media sentiment. This study offers novel insights into how public perception influences digital asset markets, thereby contributing to the behavioral finance literature and providing practical implications for investors and policymakers.
本研究调查了社交媒体情绪对加密货币市场的影响,特别关注比特币和以太坊。使用TensorFlow作为机器学习工具,我们从2022年收集的关于比特币的66,582篇Reddit帖子和关于以太坊的23,231篇帖子中开发了一个情绪指数。情绪得分从- 1(负)到1(正),分为正、中性和负三类,并使用向量自回归(VAR)模型与两种加密货币的日回报和波动性指标一起进行分析。我们的研究确定了社交媒体情绪对加密货币市场的重大影响。具体来说,比特币的回报对负面情绪表现出高度敏感性,而以太坊的回报不受任何情绪类型的影响。然而,这两种加密货币的波动性都受到中性情绪的影响。这些发现突出了不同加密货币的不同行为模式,并揭示了市场动态和社交媒体情绪之间的双向关系。本研究为公众认知如何影响数字资产市场提供了新颖的见解,从而为行为金融学文献做出了贡献,并为投资者和政策制定者提供了实际意义。
{"title":"Virtual influence, real impact: Deciphering social media sentiment and its effects on cryptocurrency market dynamics","authors":"Iheb Ghazouani,&nbsp;Ines Ghazouani,&nbsp;Abdelwahed Omri","doi":"10.1016/j.bcra.2025.100375","DOIUrl":"10.1016/j.bcra.2025.100375","url":null,"abstract":"<div><div>This research investigates the effect of social media sentiment on the cryptocurrency market, particularly focusing on Bitcoin and Ethereum. Using TensorFlow as a machine learning tool, we developed a sentiment index from 66,582 Reddit posts about Bitcoin and 23,231 about Ethereum, collected in 2022. The sentiment scores, ranging from −1 (negative) to 1 (positive), were categorized into positive, neutral, and negative classes and analyzed alongside daily return and volatility metrics for both cryptocurrencies using a Vector Autoregression (VAR) model. Our study identifies significant impacts of social media sentiment on cryptocurrency markets. Specifically, Bitcoin’s returns show a heightened sensitivity to negative sentiment, whereas Ethereum’s returns remain unaffected by any sentiment type. However, the volatility of both cryptocurrencies is affected by neutral sentiment. These findings highlight distinct behavioral patterns across cryptocurrencies and uncover a bidirectional relationship between market dynamics and social media sentiment. This study offers novel insights into how public perception influences digital asset markets, thereby contributing to the behavioral finance literature and providing practical implications for investors and policymakers.</div></div>","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 5","pages":"Article 100375"},"PeriodicalIF":6.5,"publicationDate":"2026-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"149159523","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Security checklists for Ethereum smart contract development: Patterns and best practices 以太坊智能合约开发的安全清单:模式和最佳实践
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-08-01 Epub Date: 2025-08-25 DOI: 10.1016/j.bcra.2025.100367
Lodovica Marchesi, Livio Pompianu, Roberto Tonelli
Context: Smart contracts and decentralized applications (DApps) are becoming increasingly important and widespread. DApps are often business-critical, and strong security guarantees must be ensured. However, developing safe and reliable smart contracts remains a challenging task. Despite growing literature, simple and actionable tools to address security issues are still lacking. Objective: This study identifies design patterns and best practices for DApp security. We categorize them into twelve critical areas based on their security goals and map them to the architecture of decentralized applications. For each item, we define concrete actions to support secure implementation. These are further structured into three security assurance checklists. Method: We analyze existing literature and manually review 224 security items, consolidating duplicates and harmonizing terminology. This process results in 84 unique items, divided into 36 design patterns and 48 best practices, further grouped into 12 categories. We also map the items into three checklists based on the development phase of the DApp lifecycle. Finally, for each pattern and practice, we derive 374 actionable security tasks to guide secure development. Results: To the best of our knowledge, this is the most comprehensive and structured collection of DApp security items to date. The proposed framework and checklists help developers ensure the consistent and complete application of secure design principles. Conclusion: Focusing on Ethereum and Solidity, we present a comprehensive framework for improving DApp security. Our work supports ongoing efforts to reduce vulnerabilities in decentralized applications and provides developers with practical tools to build safer, more reliable systems.
{"title":"Security checklists for Ethereum smart contract development: Patterns and best practices","authors":"Lodovica Marchesi,&nbsp;Livio Pompianu,&nbsp;Roberto Tonelli","doi":"10.1016/j.bcra.2025.100367","DOIUrl":"10.1016/j.bcra.2025.100367","url":null,"abstract":"<div><div><strong>Context:</strong> Smart contracts and decentralized applications (DApps) are becoming increasingly important and widespread. DApps are often business-critical, and strong security guarantees must be ensured. However, developing safe and reliable smart contracts remains a challenging task. Despite growing literature, simple and actionable tools to address security issues are still lacking. <strong>Objective:</strong> This study identifies design patterns and best practices for DApp security. We categorize them into twelve critical areas based on their security goals and map them to the architecture of decentralized applications. For each item, we define concrete actions to support secure implementation. These are further structured into three security assurance checklists. <strong>Method:</strong> We analyze existing literature and manually review 224 security items, consolidating duplicates and harmonizing terminology. This process results in 84 unique items, divided into 36 design patterns and 48 best practices, further grouped into 12 categories. We also map the items into three checklists based on the development phase of the DApp lifecycle. Finally, for each pattern and practice, we derive 374 actionable security tasks to guide secure development. <strong>Results:</strong> To the best of our knowledge, this is the most comprehensive and structured collection of DApp security items to date. The proposed framework and checklists help developers ensure the consistent and complete application of secure design principles. <strong>Conclusion:</strong> Focusing on Ethereum and Solidity, we present a comprehensive framework for improving DApp security. Our work supports ongoing efforts to reduce vulnerabilities in decentralized applications and provides developers with practical tools to build safer, more reliable systems.</div></div>","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 4","pages":"Article 100367"},"PeriodicalIF":6.5,"publicationDate":"2026-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"148738727","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Smart contract vulnerability detection 智能合约漏洞检测
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-08-01 Epub Date: 2026-02-11 DOI: 10.1016/j.bcra.2026.100459
Jiachi Chen, Lingfeng Bao, Ting Chen
{"title":"Smart contract vulnerability detection","authors":"Jiachi Chen,&nbsp;Lingfeng Bao,&nbsp;Ting Chen","doi":"10.1016/j.bcra.2026.100459","DOIUrl":"10.1016/j.bcra.2026.100459","url":null,"abstract":"","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 4","pages":"Article 100459"},"PeriodicalIF":6.5,"publicationDate":"2026-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"148738697","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
EMCPF: Efficient multi-party conditional payment flow payment protocol on lightning payment channel network EMCPF:基于闪电支付通道网络的高效多方有条件支付流支付协议
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-08-01 Epub Date: 2025-08-08 DOI: 10.1016/j.bcra.2025.100359
Hasan Falah Hasan, Mohd Najwadi Yusoff, Je Sen Teh, Shams Mhmood Abdali
Payment channel networks are cryptocurrency-era scaling solutions designed to function atop the lightning network. They aim to address the blockchain scalability trilemma by offering low transaction fees and nearly instantaneous processing confirmation times. However, security and privacy remain as adoption growth obstacles. The hashed timelock contract is the well-known conditional payment transfer protocol designed for payment channel networks. However, it can disclose identities and exchange histories, making it vulnerable to wormhole attacks. Additionally, current solutions rely either on the ideal anonymous communication channel assumption or fail to provide complete path privacy protection. In this paper, we propose the efficient multi-party conditional payment flow (EMCPF) protocol. It is a lightning network-compatible and privacy-preserving payment protocol designed to protect all user identities, reduce collateral locking time, and resist wormhole attacks. Moreover, it does not rely on ideal routing assumptions and instead employs layered encryption. Security analysis conducted under the universal composability model shows that no information can be disclosed if there is at least one honest user within the payment path. Functional analysis was also provided to support our privacy and security claims. We also performed theoretical analyses that compare EMCPF with other existing payment protocols based on complexity, efficiency, and the phases involved. Our simulations using lightning network snapshots show that EMCPF outperforms the current state-of-the-art solutions in terms of computational time and communication overhead.
支付通道网络是加密货币时代的扩展解决方案,旨在在闪电网络之上运行。他们的目标是通过提供低交易费用和几乎即时的处理确认时间来解决区块链可扩展性的三难困境。然而,安全和隐私仍然是采用增长的障碍。哈希时间锁合约是众所周知的为支付通道网络设计的有条件支付转移协议。然而,它可以泄露身份和交换历史,使其容易受到虫洞攻击。此外,当前的解决方案要么依赖于理想的匿名通信通道假设,要么无法提供完整的路径隐私保护。本文提出了一种高效的多方有条件支付流(EMCPF)协议。它是一种兼容闪电网络和保护隐私的支付协议,旨在保护所有用户身份,减少抵押品锁定时间,并抵御虫洞攻击。此外,它不依赖于理想的路由假设,而是采用分层加密。在通用可组合性模型下进行的安全性分析表明,如果在支付路径中至少有一个诚实用户,则不会泄露任何信息。功能分析也提供了支持我们的隐私和安全声明。我们还进行了理论分析,将EMCPF与其他现有的支付协议在复杂性、效率和所涉及的阶段进行了比较。我们使用闪电网络快照的模拟表明,EMCPF在计算时间和通信开销方面优于当前最先进的解决方案。
{"title":"EMCPF: Efficient multi-party conditional payment flow payment protocol on lightning payment channel network","authors":"Hasan Falah Hasan,&nbsp;Mohd Najwadi Yusoff,&nbsp;Je Sen Teh,&nbsp;Shams Mhmood Abdali","doi":"10.1016/j.bcra.2025.100359","DOIUrl":"10.1016/j.bcra.2025.100359","url":null,"abstract":"<div><div>Payment channel networks are cryptocurrency-era scaling solutions designed to function atop the lightning network. They aim to address the blockchain scalability trilemma by offering low transaction fees and nearly instantaneous processing confirmation times. However, security and privacy remain as adoption growth obstacles. The hashed timelock contract is the well-known conditional payment transfer protocol designed for payment channel networks. However, it can disclose identities and exchange histories, making it vulnerable to wormhole attacks. Additionally, current solutions rely either on the ideal anonymous communication channel assumption or fail to provide complete path privacy protection. In this paper, we propose the efficient multi-party conditional payment flow (EMCPF) protocol. It is a lightning network-compatible and privacy-preserving payment protocol designed to protect all user identities, reduce collateral locking time, and resist wormhole attacks. Moreover, it does not rely on ideal routing assumptions and instead employs layered encryption. Security analysis conducted under the universal composability model shows that no information can be disclosed if there is at least one honest user within the payment path. Functional analysis was also provided to support our privacy and security claims. We also performed theoretical analyses that compare EMCPF with other existing payment protocols based on complexity, efficiency, and the phases involved. Our simulations using lightning network snapshots show that EMCPF outperforms the current state-of-the-art solutions in terms of computational time and communication overhead.</div></div>","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 4","pages":"Article 100359"},"PeriodicalIF":6.5,"publicationDate":"2026-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"148776301","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Governance and maintenance for DAOs with physical assets – The case of No1s1 具有实体资产的dao的治理和维护——以第111例为例
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-08-01 Epub Date: 2025-08-12 DOI: 10.1016/j.bcra.2025.100357
Michael Blum, Nicola Crimi, Pascal Emmenegger, Florian Spychiger, Claudio J. Tessone
Recent research has introduced a decentralized autonomous organization (DAO) managing a house – No1s1 (no-ones-one). While the concept has been technically implemented, it remains open how to govern and maintain the house in a decentralized manner. In this study, we investigate how a DAO can govern and maintain physical assets. For this, we use a design science research methodology coupled with a requirements-driven approach and demonstrate through an artifact how such a governance and maintenance system can be implemented. The proposed system features two tokens rewarding active interaction with the physical house, leading to a local community. We evaluate the system with a scenario-based study with users, showing how the community can govern and maintain the house. Thus, the paper contributes to a better understanding of how a DAO with physical assets can be governed and interact with these assets, and to a better understanding of blockchain governance in general.
最近的研究引入了一个分散的自治组织(DAO)来管理一个房子——No1s1 (no-ones-one)。虽然这个概念在技术上已经实现,但如何以分散的方式管理和维护房子仍然是开放的。在本研究中,我们研究了DAO如何管理和维护实物资产。为此,我们使用设计科学研究方法与需求驱动方法相结合,并通过工件演示如何实现这样的治理和维护系统。拟议的系统具有两个令牌,奖励与实体房屋的积极互动,从而导致当地社区。我们通过与用户进行基于场景的研究来评估系统,展示社区如何管理和维护房屋。因此,本文有助于更好地理解如何治理具有物理资产的DAO并与这些资产进行交互,并有助于更好地理解区块链治理。
{"title":"Governance and maintenance for DAOs with physical assets – The case of No1s1","authors":"Michael Blum,&nbsp;Nicola Crimi,&nbsp;Pascal Emmenegger,&nbsp;Florian Spychiger,&nbsp;Claudio J. Tessone","doi":"10.1016/j.bcra.2025.100357","DOIUrl":"10.1016/j.bcra.2025.100357","url":null,"abstract":"<div><div>Recent research has introduced a decentralized autonomous organization (DAO) managing a house – No1s1 (no-ones-one). While the concept has been technically implemented, it remains open how to govern and maintain the house in a decentralized manner. In this study, we investigate how a DAO can govern and maintain physical assets. For this, we use a design science research methodology coupled with a requirements-driven approach and demonstrate through an artifact how such a governance and maintenance system can be implemented. The proposed system features two tokens rewarding active interaction with the physical house, leading to a local community. We evaluate the system with a scenario-based study with users, showing how the community can govern and maintain the house. Thus, the paper contributes to a better understanding of how a DAO with physical assets can be governed and interact with these assets, and to a better understanding of blockchain governance in general.</div></div>","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 4","pages":"Article 100357"},"PeriodicalIF":6.5,"publicationDate":"2026-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"148844015","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Current understanding of impermanent loss risk in AMMs 当前对资产管理中非永久性损失风险的理解
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-08-01 Epub Date: 2025-08-18 DOI: 10.1016/j.bcra.2025.100360
Ignacio Ariel Del Monte, Juan Jose de Lucio, Miguel Angel Sicilia Urban
This systematic review examines the risk of impermanent loss (IL) in automated market makers within the decentralized finance (DeFi) ecosystem, employing the preferred reporting items for systematic reviews and meta-analyses for searching (PRISMA-S) methodology. Our comprehensive search across the Web of Science (WoS) and Scopus databases identified 38 relevant studies published between January 2020 and September 2024. The review reveals a predominant focus on constant product market makers, which comprise 56.4% of all mentions, underscoring their central role in DeFi markets. There are nine underlying causes affecting IL risk, and the most important ones are price volatility, asset imbalance, and risk/return management. According to our categorization, the most commonly used mitigation strategies are investment strategies, decentralized tools and technologies, and design and management of liquidity pools, hedging strategies and context strategies. IL risk research is calculated equally theoretically and empirically (nine references for each), and there are six research papers that calculate in a mixed way. Only 13 research papers employ market data in their reviews, and three of all papers measure IL risk quantitatively. We seek to focus our studies on a more detailed treatment of the risk of IL that will result in improvements to liquidity providers in DeFi.
本系统综述考察了分散金融(DeFi)生态系统中自动做市商的临时损失(IL)风险,采用首选报告项目进行系统综述和搜索元分析(PRISMA-S)方法。我们对Web of Science (WoS)和Scopus数据库进行了全面搜索,确定了2020年1月至2024年9月期间发表的38项相关研究。该审查显示,主要关注恒定产品做市商,占所有提及的56.4%,强调了他们在DeFi市场中的核心作用。影响投资风险的基本原因有九个,其中最重要的是价格波动、资产失衡和风险/回报管理。根据我们的分类,最常用的缓解策略是投资策略、分散的工具和技术、流动性池的设计和管理、对冲策略和背景策略。IL风险研究的理论计算和经验计算是平等的(各有九篇参考文献),有六篇研究论文以混合的方式计算。只有13篇研究论文在评论中使用了市场数据,其中3篇论文对IL风险进行了定量测量。我们试图将研究重点放在更详细地处理IL风险上,这将改善DeFi中的流动性提供者。
{"title":"Current understanding of impermanent loss risk in AMMs","authors":"Ignacio Ariel Del Monte,&nbsp;Juan Jose de Lucio,&nbsp;Miguel Angel Sicilia Urban","doi":"10.1016/j.bcra.2025.100360","DOIUrl":"10.1016/j.bcra.2025.100360","url":null,"abstract":"<div><div>This systematic review examines the risk of impermanent loss (IL) in automated market makers within the decentralized finance (DeFi) ecosystem, employing the preferred reporting items for systematic reviews and meta-analyses for searching (PRISMA-S) methodology. Our comprehensive search across the Web of Science (WoS) and Scopus databases identified 38 relevant studies published between January 2020 and September 2024. The review reveals a predominant focus on constant product market makers, which comprise 56.4% of all mentions, underscoring their central role in DeFi markets. There are nine underlying causes affecting IL risk, and the most important ones are price volatility, asset imbalance, and risk/return management. According to our categorization, the most commonly used mitigation strategies are investment strategies, decentralized tools and technologies, and design and management of liquidity pools, hedging strategies and context strategies. IL risk research is calculated equally theoretically and empirically (nine references for each), and there are six research papers that calculate in a mixed way. Only 13 research papers employ market data in their reviews, and three of all papers measure IL risk quantitatively. We seek to focus our studies on a more detailed treatment of the risk of IL that will result in improvements to liquidity providers in DeFi.</div></div>","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 4","pages":"Article 100360"},"PeriodicalIF":6.5,"publicationDate":"2026-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"148854174","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Consortium blockchain integrated with industrial IoT devices to perform a real-time detection of air and water pollution 区块链联盟与工业物联网设备集成,对空气和水污染进行实时检测
IF 6.5 3区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2026-08-01 Epub Date: 2025-08-07 DOI: 10.1016/j.bcra.2025.100353
Alessandro Bigiotti, Gianmarco Mazzante, Leonardo Mostarda, Alfredo Navarra, Davide Sestili
The interest in blockchain for Industry 4.0 applications and the integration of the Industrial Internet of Things (IIoT) has grown considerably. This is due to the unique characteristics of blockchain, including the immutability of the distributed ledger, transparency, traceability of transactions, and security based on cryptographic techniques that certify the integrity of the data. So, the integration of blockchain can enhance data integrity, transparency, and security while eliminating trusted third parties. However, these characteristics make blockchains difficult to scale and typically involve high costs for a large number of transactions. It makes it difficult to manage large amounts of data, which are generally produced in IIoT environments. Some recent results have demonstrated how the use of private blockchains can improve the issues of scalability and transaction costs. This paper addresses the following research question: Can blockchain technology, in its current state, be suitable for implementing industrial monitoring applications that use IIoT devices? Our objective is to propose a blockchain-based application integrated with IIoT devices in order to control the air and water pollution produced by industrial activities. The application we propose complies with current European regulations. Finally, we perform an empirical evaluation of the solution's performance to understand its applicability in real-world scenarios.
对于工业4.0应用和工业物联网(IIoT)集成的区块链的兴趣已经大大增长。这是由于区块链的独特特征,包括分布式分类账的不变性、透明性、交易的可追溯性,以及基于证明数据完整性的加密技术的安全性。因此,区块链的集成可以增强数据完整性、透明度和安全性,同时消除受信任的第三方。然而,这些特征使得区块链难以扩展,并且通常涉及大量交易的高成本。这使得管理通常在工业物联网环境中产生的大量数据变得困难。最近的一些结果表明,使用私有区块链可以改善可扩展性和交易成本问题。本文解决了以下研究问题:区块链技术在目前的状态下,是否适合实施使用IIoT设备的工业监控应用?我们的目标是提出一个与工业物联网设备集成的基于区块链的应用程序,以控制工业活动产生的空气和水污染。我们提出的申请符合现行的欧洲法规。最后,我们对解决方案的性能进行了实证评估,以了解其在现实场景中的适用性。
{"title":"Consortium blockchain integrated with industrial IoT devices to perform a real-time detection of air and water pollution","authors":"Alessandro Bigiotti,&nbsp;Gianmarco Mazzante,&nbsp;Leonardo Mostarda,&nbsp;Alfredo Navarra,&nbsp;Davide Sestili","doi":"10.1016/j.bcra.2025.100353","DOIUrl":"10.1016/j.bcra.2025.100353","url":null,"abstract":"<div><div>The interest in blockchain for Industry 4.0 applications and the integration of the Industrial Internet of Things (IIoT) has grown considerably. This is due to the unique characteristics of blockchain, including the immutability of the distributed ledger, transparency, traceability of transactions, and security based on cryptographic techniques that certify the integrity of the data. So, the integration of blockchain can enhance data integrity, transparency, and security while eliminating trusted third parties. However, these characteristics make blockchains difficult to scale and typically involve high costs for a large number of transactions. It makes it difficult to manage large amounts of data, which are generally produced in IIoT environments. Some recent results have demonstrated how the use of private blockchains can improve the issues of scalability and transaction costs. This paper addresses the following research question: Can blockchain technology, in its current state, be suitable for implementing industrial monitoring applications that use IIoT devices? Our objective is to propose a blockchain-based application integrated with IIoT devices in order to control the air and water pollution produced by industrial activities. The application we propose complies with current European regulations. Finally, we perform an empirical evaluation of the solution's performance to understand its applicability in real-world scenarios.</div></div>","PeriodicalId":53141,"journal":{"name":"Blockchain-Research and Applications","volume":"7 4","pages":"Article 100353"},"PeriodicalIF":6.5,"publicationDate":"2026-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"148636830","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
期刊
Blockchain-Research and Applications
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
﹀
mjeditor
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1