Blockchain Papers

Follow blockchain research across journals, conferences, and preprint repositories.

1,491 papersLast indexed Aug 16, 2026
Search papers

Paper index

1,491 results · page 11 of 63

Clear filters
Feb 24, 2026·Zenodo (CERN European Organization for Nuclear Research)
0 cites
Scavenger Protocol: Liquidity Generation from Dormant Micro-Assets on the Sui Blockchain

Taiske

In the Web3 ecosystem, "dead assets" such as micro-token fractions (dust) and abandoned low-value NFTs continue to accumulate on networks, losing liquidity due to transaction fee constraints. This paper proposes the concept of the "Scavenger Protocol," which leverages the object-oriented architecture and parallel processing capabilities of the Sui blockchain to automatically detect, melt down, and recirculate these dormant assets back into the market as reusable resources (Scrap tokens). By implementing a smart contract-based mechanism where "abandoned value is automatically shuffled" without the need for central administrators, we aim to achieve the autonomous revitalization of the on-chain economy. Charitable Pledge: In the event that the implementation of this protocol generates any personal revenue or financial returns for the author, 60% of those proceeds will be donated to charitable causes. This commitment aligns with the Web3 ethos of supporting public goods and giving back to society. Disclaimer: This paper is for informational, academic, and conceptual purposes only and does not constitute financial, investment, legal, or regulatory advice. The "Scavenger Protocol" presented herein is a theoretical framework and thought experiment. The authors do not guarantee the realization of this protocol, its technical feasibility, or any financial returns. Any future implementation of this protocol by third parties must be executed strictly in compliance with applicable local and international laws. The authors assume no liability or responsibility for any damages, legal disputes, or financial losses arising from the use, interpretation, or implementation of the concepts described in this document. Open Design and Protocol Revenue Model (Tokenomics) This protocol is designed as a universal foundational primitive, unconstrained by specific applications or use cases. Other developers and projects are encouraged to freely fork, adapt, and build upon this mechanism to construct systems with their own customized rules. To ensure the system's long-term sustainability, we define a minimal baseline rule: the system automatically collects a flat 1% protocol fee during operations—specifically at the time of melting down dormant assets and generating new ones. The revenue generated from this 1% fee is directly applied to the "Charitable Pledge" outlined above. This creates the financial engine where 60% of the proceeds are directed toward social givebacks and donations, while the remaining 40% is allocated to protocol maintenance and the founder.

Open access
Blockchain Technology Applications and Security
Mobile Agent-Based Network Management
Big Data and Digital Economy
Original source
Feb 22, 2026·Finance: Theory and Practice
0 cites
Convergence of DeFi and Traditional Banking: Potential, Limitations and Transformation Scenarios

T. N. Zverkova

The article explores one of the main trends in modern financial transformation, namely the impact of decentralized finance (DeFi) on the banking sector. The author goes beyond conventional discussions about banks’ responses to DeFi and proposes a different vision for their role and function in the digital economy and Web 3.0. The aim of the study is to identify and analyze changes brought about by the rise of DeFi, as well as to propose possible strategies for banks to adopt in light of technological advancements. Unlike traditional approaches that focus on the conflict between banks and DeFi platforms, this work emphasizes the analysis of future models of financial intermediation. Concepts such as «5.0 banks», «metabanks», and autonomous digital ecosystems are explored, where banking functions are implemented in a more programmable manner. The research methods include a comparative analysis of the structural and functional differences between the traditional banking system and decentralized finance (DeFi), an analytical review of recent scientific publications, and an assessment of potential future developments for banks in the face of decentralized technology. Based on this research, we found that banks remain an important part of the financial system, despite increasing pressure from decentralized finance. However, banks must adapt to technological change in order to maintain their relevance. We identified three possible paths for the future of banking: the integration of DeFi features into existing banking products, the creation of hybrid models that combine DeFi and traditional banking, and the transition to fully autonomous algorithmic systems powered by smart contracts and artificial intelligence. While all three scenarios are possible, we believe that the hybrid model that combines DeFi innovation with customer protection and regulation is the most likely to succeed in the long term. The novelty of this work lies in its conceptual approach to how banks can adapt to decentralized technologies and forecast their future evolution within the context of Web3. Its practical significance lies in the potential for using these findings to develop digital transformation strategies for banks.

Open access
FinTech, Crowdfunding, Digital Finance
Digital Transformation in Financial Services
Business and Economic Development
Original source
Feb 22, 2026·Open MIND
0 cites
The Identity Paper - Pseudonymous Accountability: Sybil Resistance via Zero-Knowledge Heuristics

Ali Sadhik Shaik

The "Identity Trilemma" posits that a decentralized network can enforce only two of the following three properties: Privacy (Anonymity), Accountability (Sybil Resistance), and Permissionlessness (No Central Gatekeeper). Traditional Web2 platforms resolve this by sacrificing Privacy (enforcing Real-Name Policies), while early Web3 platforms sacrificed Accountability, resulting in "Sybil Swarms" where single actors control thousands of wallets. This paper introduces the Klyrox solution to the trilemma: Pseudonymous Accountability. By utilizing Zero-Knowledge Proofs (ZKPs) and non-linear Time-Energy Cost Functions, the Klyrox Protocol enables users to mathematically prove they are unique, high-integrity actors without ever revealing their physical identity, biometric data, or government credentials. We define a new standard for "Proof of Personhood" based not on biology, but on consistent historical behavior recorded in a Soulbound Token (ERC-721M). Author's Note: This paper is a foundational pillar of the Klyrox Protocol architecture, expanding upon the core framework published in The Klyrox Protocol: A Decentralized Framework for Optimistic Content Verification and Epistemic Reputation (available at: https://doi.org/10.5281/zenodo.18729968). It outlines the specific mechanics underpinning the concept of "Epistemic Capital," as explored in the complete five-volume series, The Algorithmic Monographs (The Algorithmic Invisible Hand, The Republic of Code, The Market for Truth, The Heavy Metal Intelligence, and The Synthetic C-Suite).

Open access
2 source records
Blockchain Technology Applications and Security
Cryptography and Data Security
Authorship Attribution and Profiling
Original source
Feb 22, 2026·Bulgarian Portal for Open Science
0 cites
Концептуална рамка и моделна документация на Web3 концепции и технологии и връзка с дигиталната криминалистика

Блерим Красничи, Blerim Krasniqi

Тази докторска дисертация изследва трансформиращото въздействие на концепциите и технологиите на Web3 върху теорията и практиката на цифровата криминалистика. С нарастващото внедряване на децентрализирани архитектури в съвременните информационни системи, традиционните криминалистични модели разработени основно за централизирани среди се сблъскват със значителни технически, процедурни и правни предизвикателства. Изследването представя систематичен анализ на ключови компоненти на Web3, включително блокчейн инфраструктури, смарт договори, децентрализирани идентичности, механизми за токенизация и децентрализирани автономни организации (DAO), като оценява тяхното въздействие върху идентифицирането, събирането, съхраняването, анализа и представянето на доказателства. Изследването предлага концептуална криминалистична рамка, адаптирана към Web3 екосистемите, която разглежда критични въпроси като неизменяемостта на данните, псевдонимността, предизвикателствата при атрибуцията, трансграничната юрисдикционна сложност и разпределения контрол върху доказателствените данни. Особено внимание се отделя на доказателствената стойност и допустимостта на блокчейн-базираните доказателства, както и на променящата се роля на криминалистичните изследователи в среди, в които моделите на собственост върху данните, управление и доверие са фундаментално трансформирани.

Open access
Military Technology and Strategies
Legal and Regulatory Analysis
Linguistic, Cultural, and Literary Studies
Original source
Feb 19, 2026·International Journal for Research in Applied Science and Engineering Technology
0 cites
A Smart Contract-Driven Blockchain Architecture for Secure Digital Voting

Smit Pingale

In democratic systems, secure and transparent voting mechanisms are essential to maintain public trust and electoral integrity. Traditional paper-based and centralized electronic voting systems often face challenges such as limited transparency, risk of data manipulation, and dependence on centralized authorities. To address these issues, this project proposes a decentralized blockchain-based voting system designed to enhance security, transparency, and reliability. The system is developed on the Ethereum blockchain, where each vote is recorded as an immutable transaction to prevent tampering or duplication. Smart contracts written in Solidity automate essential election functions including voter registration, vote validation, and result computation. A web-based interface built using React.js and Web3.js enables secure interaction with the blockchain, while wallet-based authentication ensures that each authorized user can cast only one vote The system is implemented and tested in a controlled environment to evaluate performance, accuracy, and resistance to double voting.

Open access
Internet Traffic Analysis and Secure E-voting
Blockchain Technology Applications and Security
Information Retrieval and Data Mining
Original source
Feb 13, 2026·Open MIND
0 cites
Bloom Filter Look-Up Tables for Private and Secure Distributed Databases in Web3 (Revised Version)

Shlomi Dolev, Ehud Gudes, Daniel Shlomo

The rapid growth of decentralized systems in theWeb3 ecosystem has introduced numerous challenges, particularly in ensuring data security, privacy, and scalability [3, 8]. These systems rely heavily on distributed architectures, requiring robust mechanisms to manage data and interactions among participants securely. One critical aspect of decentralized systems is key management, which is essential for encrypting files, securing database segments, and enabling private transactions. However, securely managing cryptographic keys in a distributed environment poses significant risks, especially when nodes in the network can be compromised [9]. This research proposes a decentralized database scheme specifically designed for secure and private key management. Our approach ensures that cryptographic keys are not stored explicitly at any location, preventing their discovery even if an attacker gains control of multiple nodes. Instead of traditional storage, keys are encoded and distributed using the BFLUT (Bloom Filter for Private Look-Up Tables) algorithm [7], which enables secure retrieval without direct exposure. The system leverages OrbitDB [4], IPFS [1], and IPNS [10] for decentralized data management, providing robust support for consistency, scalability, and simultaneous updates. By combining these technologies, our scheme enhances both security and privacy while maintaining high performance and reliability. Our findings demonstrate the system's capability to securely manage keys, prevent unauthorized access, and ensure privacy, making it a foundational solution for Web3 applications requiring decentralized security.

Open access
3 source records
Cloud Data Security Solutions
Caching and Content Delivery
Distributed systems and fault tolerance
Original source
Feb 12, 2026·Open MIND
0 cites
DMind-3: A Sovereign Edge--Local--Cloud AI System with Controlled Deliberation and Correction-Based Tuning for Safe, Low-Latency Transaction Execution

Enhao Huang, Frank Li, Tony Lin, Lowes Yang

This paper introduces DMind-3, a sovereign Edge-Local-Cloud intelligence stack designed to secure irreversible financial execution in Web3 environments against adversarial risks and strict latency constraints. While existing cloud-centric assistants compromise privacy and fail under network congestion, and purely local solutions lack global ecosystem context, DMind-3 resolves these tensions by decomposing capability into three cooperating layers: a deterministic signing-time intent firewall at the edge, a private high-fidelity reasoning engine on user hardware, and a policy-governed global context synthesizer in the cloud. We propose policy-driven selective offloading to route computation based on privacy sensitivity and uncertainty, supported by two novel training objectives: Hierarchical Predictive Synthesis (HPS) for fusing time-varying macro signals, and Contrastive Chain-of-Correction Supervised Fine-Tuning (C$^3$-SFT) to enhance local verification reliability. Extensive evaluations demonstrate that DMind-3 achieves a 93.7% multi-turn success rate in protocol-constrained tasks and superior domain reasoning compared to general-purpose baselines, providing a scalable framework where safety is bound to the edge execution primitive while maintaining sovereignty over sensitive user intent.

Open access
3 source records
Cryptography and Data Security
IoT and Edge/Fog Computing
Security and Verification in Computing
Original source
Feb 12, 2026·Open MIND
0 cites
FlashChain: IO-Aware Attention for Scalable, Decentralized AI in Web3 Systems

Umair Abbas

We introduce FlashChain, a decentralized framework that integrates IO-aware attention mechanisms—especially FlashAttention—into scalable, trustless AI systems. As Transformer-based models become foundational to Web3 infrastructure (e.g., DAOs, decentralized search, autonomous agents), their quadratic compute and memory bottlenecks present critical challenges. FlashChain adapts block-sparse FlashAttention into a modular architecture optimized for multi-node, low-bandwidth environments typical of blockchain and edge networks. We propose a hybrid protocol combining attention kernel optimization with zero-knowledge verifiability, enabling real-time, trustless AI inference across distributed nodes. Benchmarks show 3–5× speedups and up to 30× gas savings per inference compared to baseline on-chain models.

Open access
2 source records
IoT and Edge/Fog Computing
Blockchain Technology Applications and Security
Caching and Content Delivery
Original source
Feb 11, 2026·merz | medien + erziehung
0 cites
Stichwort: NFT

Swenja Wütscher

NFTs, kurz für Non-Fungible Tokens, sind digitale Zertifikate auf einer Blockchain, einer unveränderlichen Datenbank. Sie zeigen, wem ein digitales Objekt gehört, beispielsweise eine Grafik, Audio-Dateien, In-Game-Items oder Tweets. Anders als klassische Dateien, die beliebig kopiert werden können, dienen NFTs als Eigentumsnachweis. Die eigentliche Datei liegt meist auf externen Servern. NFTs sind Teil der Vision des Web3, eines dezentralen Internets, in dem Nutzer*innen über Inhalte, Besitz und digitale Identitäten selbst bestimmen sollen. Das Konzept eröffnet neue Möglichkeiten in virtuellen Welten, Spielen und Community-Projekten, stößt aber an Grenzen, weil Plattformen, Wallets und Anbieter letztlich entscheiden, wer teilnehmen darf. Bekannt wurden NFTs ab 2020 im Kunst- und Sammlermarkt, beispielsweise Beeples Every­days oder Sammlungen wie CryptoPunks. In Games und virtuellen Welten wie Axie Infinity oder Decentraland lassen sich Besitzrechte, Handelsmechanismen und Community-Dynamiken praktisch nachvollziehen. Nach dem anfänglichen Boom sank ab 2023 der Wert vieler NFTs, Plattformen verschwanden und technische wie rechtliche Fragen blieben offen. Für die Medienpädagogik bieten NFTs zahlreiche Ansatzpunkte: Fachkräfte können mit Lernenden über digitale Besitzformen, Wertzuschreibung, Marktmechanismen und soziale Dynamiken diskutieren. Eigene Experimente – Tokens erstellen, Sammlungen aufbauen, Spielobjekte gestalten – machen Logik, FOMO-Effekte und Machtstrukturen erfahrbar. Gleichzeitig lassen sich Nachhaltigkeit, langfristige Verfügbarkeit von Daten und Zugangshürden kritisch reflektieren. NFTs bieten so einen Einstieg, um digitale Wertlogiken, Teilhabe und Verantwortung im Web3 zu hinterfragen.

Open access
Digital Rights Management and Security
Libraries and Information Services
Blockchain Technology Applications and Security
Original source
Feb 11, 2026·Proceedings of NAS RA Technical sciences
0 cites
CENSORSHIP RESISTANCE IN WEB3 ACCESS LAYERS: AN ENGINEERING PERSPECTIVE ON INDEPENDENT RENDERING GATEWAYS

A.SH. HARUTYUNYAN

Censorship resistance is a core value of Web3, yet practical access to decentralized websites remains dependent on centralized gateways such as ipfs.io, .link, and .limo, which are susceptible to regulatory takedowns and availability limitations. This paper investigates the technical barriers to truly censorship-resistant access in decentralized web architectures and presents an engineering-driven analysis of dweb3.wtf, a dedicated rendering gateway developed within the Web3Compass infrastructure. The system directly interfaces with decentralized name systems such as ENS and Unstoppable Domains, autonomously resolves content hashes via on-chain resolvers, and renders the associated IPFS-hosted sites via self-hosted infrastructure. By eliminating reliance on third-party APIs and centralized frontends, the gateway offers a robust alternative to Web2-style intermediaries. This paper presents the architecture, implementation, and performance characteristics of dweb3.wtf, evaluating its effectiveness in ensuring access continuity, domain coverage, and reduced external dependency.

Open access
IPv6, Mobility, Handover, Networks, Security
Peer-to-Peer Network Technologies
Access Control and Trust
Original source
Feb 10, 2026·International Journal of Advances in Signal and Image Sciences
0 cites
Design Of A Decentralized Social Media Platform Using Blockchain To Enhance Privacy And User Trust

Leeladhar Chourasiya, Sanmati Kumar Jain, Jitendra Singh Dodiya, Sheetal Bawane

It is an exploration of a decentralized social media platform, which uses blockchain and Web3 technologies to scale up privacy, security, and trust within users. The architecture uses Next.js as the front-end, solido as the smart contracts, IPFS as a distributed storage, and Web3.js to connect with the blockchain. It introduces canonical social-networking features, including user registration, content upload, like, comment and share. Notably, it keeps ownership of data to users, unlike the traditional centralized social-media platforms. The irreversibility of blockchain together with encryption makes sure that the content cannot be altered and the information about users is not at risk of unauthorized access. The system eliminates the possibility of exploiting the central level of control and increases the level of transparency. The performance appraisals indicate that the suggested platform provides better privacy, higher data security, and user agency than the mainstream networks. However, the issues of scalability and mass user adoption are still present, and the research should be further developed. This paper highlights how blockchain will reinvent social media, creating a just, transparent, and user-centric digital economy. Altogether, the study advances the discussion on decentralized social networks and demonstrates that blockchain can improve the level of trust and data protection in the process of online communication.

Open access
Blockchain Technology Applications and Security
Organizational and Employee Performance
Blockchain Technology in Education and Learning
Original source
Feb 8, 2026·Zenodo (CERN European Organization for Nuclear Research)
0 cites
The End of IPFS: Centralized Pinning Single Points of Failure, Cryptographic Hash Backdoors, DDoS Exploitation, and Gossip-Based Distributed Node Eradication

יהוה, Kaoru Aguilera Katayama

The InterPlanetary File System (IPFS) has been extensively promoted as a decentralized, censorship-resistant, and fault-tolerant storage protocol. This paper systematically dismantles these claims by demonstrating four critical and compounding vulnerability classes: (1) the structural dependency on centralized pinning services such as Pinata, Infura, and Web3.Storage, where compromising a single provider's dashboard or API effectively eliminates supposedly “immutable” content; (2) the futility of self-hosted pinning nodes as a mitigation strategy, given their susceptibility to targeted Distributed Denial-of-Service (DDoS) attacks capable of rendering them permanently unreachable; (3) the catastrophic implications of a cryptographic backdoor or collision discovery in SHA-256 or SHA-3 (Keccak), which would enable arbitrary content substitution while preserving valid Content Identifiers (CIDs), thereby destroying IPFS's fundamental integrity guarantees; and (4) the vulnerability of distributed pinning strategies to gossip-protocol-based reconnaissance attacks, wherein a state-level adversary (e.g., NSA, GCHQ, or equivalent) can enumerate all nodes hosting a target CID by compromising a single peer and leveraging protocol-level metadata propagation to systematically identify and neutralize every replica simultaneously. We formalize each attack vector with mathematical models, provide proof-of-concept algorithms, analyze the compounding effects of multi-vector attacks, and demonstrate that even the most sophisticated defense-in-depth strategies fail against a sufficiently resourced adversary. Our analysis conclusively establishes that IPFS, as deployed in practice, provides no meaningful censorship resistance and constitutes what we term Decentralization Theater—a system that employs the aesthetics and terminology of decentralization while maintaining the vulnerability profile of traditional centralized architectures, augmented by a dangerous false sense of security.

Open access
Advanced Data Storage Technologies
Cloud Data Security Solutions
Peer-to-Peer Network Technologies
Original source
Feb 7, 2026·Blockchain Research and Applications
0 cites
Extending ERC721: Design and implementation of a novel secure NFT framework for IoT asset authentication in cyber-physical systems

Usman Khalil, Mueen Uddin, Maha Abdelhaq, Homam ElTaj · 7 authors

This research presents the design and implementation of the Decentralized Smart City of Things (DSCoT), a novel framework leveraging Web3 architecture to enhance the security and authentication of assets in cyber-physical systems (CPSs) for smart cities on a private blockchain. Unlike traditional non-fungible tokens that primarily identify and distinguish financial assets, existing approaches lack robust mechanisms for attributing and authenticating CPS assets such as owners, users, and IoT-enabled smart devices. DSCoT addresses this gap by introducing an extended ERC721 protocol, enabling IoT-enabled devices to have unique blockchain identities similar to user accounts, which enhances device management and tracking. Novel smart contract modules facilitate secure identification and authentication of CPS assets. Evaluated results on a private Hyperledger Besu blockchain show that DSCoT achieves significant performance improvements, including sub-second latency (∼0.1–0.5 s for application programming interface (API) calls), minimal transaction costs (∼0.01–0.05 USD), and a high processing capacity (∼1000 transactions per second (TPS)). These results, along with improved security through immutable authentication records, demonstrate DSCoT’s effectiveness as a scalable and secure solution for smart city CPSs.

Open access
Physical Unclonable Functions (PUFs) and Hardware Security
Smart Grid Security and Resilience
IoT and Edge/Fog Computing
Original source
Feb 5, 2026·Journal of Intelligence and Engineering Technology
0 cites
Uniswap V4 Concentrated Liquidity Pricing: a Machine Learning Model for U.S. Institutional Liquidity Providers

Allen Lin

Amid the institutionalization wave of Decentralized Finance (DeFi), U.S. institutional Liquidity Providers (LPs) have emerged as the core incremental capital for leading Decentralized Exchanges (DEXs). However, the adaptation gap between Uniswap V4's concentrated liquidity mechanism and institutional risk preferences, as well as regulatory compliance requirements, has hindered their market entry. This study focuses on the integration of "technical characteristics - institutional constraints - precise pricing" and constructs a machine learning pricing model optimized across three dimensions: return, risk, and compliance. By integrating Uniswap V4 on-chain data, institutional risk preference data, and market data, a Stacking ensemble architecture combining LightGBM and CNN-LSTM is designed, incorporating 22 core features to achieve precise pricing. Empirical results show that the model's Mean Absolute Error (MAE) on the test set was reduced by 37% compared to the benchmark, and the Root Mean Square Error (RMSE) is reduced by 42%. The Sharpe ratio reaches 1.87 (an increase of 62% compared to the benchmark), with a volatility of 15.3% and a compliance adaptability score of 91. In the case study, a $150 million liquidity supply achieved a 19.7% annualized return and an 8.3% maximum drawdown, successfully passing SEC compliance review. This research fills the gap in institution-oriented pricing models for V4, improves the institutional extension of Automated Market Maker (AMM) pricing theory, and provides a risk-controllable and compliance-adaptable pricing tool for U.S. institutions participating in DeFi, promoting the transformation of the DeFi ecosystem towards standardization and institutionalization. By aligning the V4 Hook mechanism with U.S. regulatory frameworks, this research provides a scalable technical standard for institutional DeFi adoption, reinforcing the competitive advantage of the U.S. Web3 financial ecosystem.

Open access
Financial Distress and Bankruptcy Prediction
Banking stability, regulation, efficiency
FinTech, Crowdfunding, Digital Finance
Original source
Feb 5, 2026·Journal of Intelligence and Engineering Technology
0 cites
Multi-Chain DAO Treasury Management: a Risk and Compliance Optimization Framework for the U.S. Ecosystem

Allen Lin

Multi-chain deployment has become a mainstream strategy for U.S.-based DAOs, yet treasury management faces three core bottlenecks: cross-chain liquidity fragmentation, inadequate compliance with U.S. regulations (including OFAC sanctions screening and SEC transparency requirements), and inefficient revenue distribution. Leveraging the incubation practices of over 12 U.S. DAOs (via daos.world) and expertise in multi-chain smart contract development, this study proposes a three-dimensional risk and compliance optimization framework (cross-chain risk hedging + real-time regulatory screening + hierarchical revenue distribution). Empirical testing on 8 U.S. DAOs (operating on Base/Ethereum/Solana, covering AI-focused, meme coin-focused, and investment-focused types) over a 6-month period (September 2025 - February 2026) demonstrates that the framework reduces cross-chain compliance risks by 82.3% (OFAC violation rate drops from 18.0% to 3.2%), increases the annualized treasury return rate by 17.6% (from 4.2% to 5.04%), lowers cross-chain transaction costs by 28.5% (average Gas fee decreases from $12.8 to $9.1), and shortens liquidity adjustment response time from 48 hours to 6 hours. Integrating U.S. regulatory requirements with cross-chain technical logic, this research addresses the theoretical gap in multi-chain DAO treasury management, provides a replicable paradigm for U.S. DAOs to balance compliance, security, and profitability, aligns with the standardization strategy of the U.S. Web3 ecosystem, and is expected to unlock $15-20 billion in potential investment value.

Open access
Blockchain Technology Applications and Security
Sustainable Finance and Green Bonds
Capital Investment and Risk Analysis
Original source
Feb 3, 2026·arXiv (Cornell University)
0 cites
LogicScan: An LLM-driven Framework for Detecting Business Logic Vulnerabilities in Smart Contracts

Jiaqi Gao, Zijian Zhang, Yuqiang Sun, Ye Liu · 8 authors

Business logic vulnerabilities have become one of the most damaging yet least understood classes of smart contract vulnerabilities. Unlike traditional bugs such as reentrancy or arithmetic errors, these vulnerabilities arise from missing or incorrectly enforced business invariants and are tightly coupled with protocol semantics. Existing static analysis techniques struggle to capture such high-level logic, while recent large language model based approaches often suffer from unstable outputs and low accuracy due to hallucination and limited verification. In this paper, we propose LogicScan, an automated contrastive auditing framework for detecting business logic vulnerabilities in smart contracts. The key insight behind LogicScan is that mature, widely deployed on-chain protocols implicitly encode well-tested and consensus-driven business invariants. LogicScan systematically mines these invariants from large-scale on-chain contracts and reuses them as reference constraints to audit target contracts. To achieve this, LogicScan introduces a Business Specification Language (BSL) to normalize diverse implementation patterns into structured, verifiable logic representations. It further combines noise-aware logic aggregation with contrastive auditing to identify missing or weakly enforced invariants while mitigating LLM-induced false positives. We evaluate LogicScan on three real-world datasets, including DeFiHacks, Web3Bugs, and a set of top-200 audited contracts. The results show that LogicScan achieves an F1 score of 85.2%, significantly outperforming state-of-the-art tools while maintaining a low false-positive rate on production-grade contracts. Additional experiments demonstrate that LogicScan maintains consistent performance across different LLMs and is cost-effective, and that its false-positive suppression mechanisms substantially improve robustness.

Open access
3 source records
cs.CR
Security and Verification in Computing
Web Application Security Vulnerabilities
Original source
Feb 3, 2026·Zenodo (CERN European Organization for Nuclear Research)
0 cites
Decentralized AI and Combat Drones as Executors of Private Will: Implications for Global Security

Vladislav Velitsko

Abstract. The development of technologies for creating combat drones from civilian drones, the expansion of the practice of using these drones in ongoing military conflicts of varying intensity, as well as the development of artificial intelligence (AI) systems and the possibility of various combinations of AI with combat drones, constitute an already occurring, not yet fully understood, global security challenge that is dangerous for any existing country. The paper also examines the problem of an individual customer outsourcing the commission of an act of revenge or a terrorist attack to individual perpetrators, groups of perpetrators, as well as to AI systems that act autonomously using telecommunications networks, such as the Internet, robotics, and that conduct financing using cryptocurrencies. The security threats discussed here, in the context of the emergence of UAVs and other combat-purpose drones in private hands – supplied both from active armies and manufactured independently – represent a dual combination of threats to the established world order and opportunities for society. And it is clear that the security threat is not some ephemeral threat to the security of some ordinary voter, whose life and fate do not, in reality, interest anyone from the ruling stratum at all. The real security threat is the threat to the life, health, capital, and power of the stratum that rules society, as well as the risk that the service personnel of this stratum – in the form of intelligence services, security and judicial bodies, as well as the legislative branch – will be afraid to carry out the orders given to them, both those involving blatant violations of the law and those involving its simulated enforcement, aimed at continuing the exploitation of society under the guise of observing the constitution and other laws, conducting “a dog-and-pony version of democracy.” The other side of the coin manifests itself as “frontier justice” – the ability for an ordinary person to defend their violated rights even when the violator has an overwhelming advantage in the form of administrative, judicial, and financial resources. It should be taken into account that modern technologies – not only the combination of outsourcing with the use of public computer networks (Public Data Networks, PDN) to commit a crime, or the possibility of direct remote control of a drone, but also the possibility of using a drone with built-in AI deliberately trained to strike a target – are merely the tip of the iceberg that the “Titanic” of the established security system will collide with. Further technological development, in particular decentralized AI using Web 3.0 / Web3, will make it possible to use AI as the executor of a deceased person’s will, while transferring to the AI the necessary financial resources in cryptocurrency (including programming the AI to further criminal acquisition of funds for its activities), combined with the ability to use fab labs or to have the AI itself hire contractors, creates for the targets of an attack aimed by such an AI a situation of the inevitability of retribution. At the same time, these capabilities can be extrapolated to any life situations – for example, those involving deprivation of liberty, such as in connection with the abduction of any person following the example of the abduction of N. Maduro, or situations such as bankruptcy resulting from the bad-faith actions of counterparties. At the same time, the risk of retribution in the process of defending violated rights affects both rank-and-file executors – such as police officers and judges – and the real masters of the country in the form of the public and non-public elite. The latter situation – the threat to the lives of the elite – already appears to be a real problem requiring a solution. After all, it would be extremely painful for the ruling strata of countries that have fought wars and then reconciled – the main beneficiaries of the past war – to answer to the victims for crimes committed both during the war and during mobilization, even if the terms of peace provide for full amnesty. An absolutely unfamiliar sense of danger will also emerge among the ruling strata governing states that ignite wars and create crises, since they now find themselves in a vulnerable position. This situation is further aggravated by the fact that information – both factual and conspiracy theories – is now widely accessible and can serve as grounds for attacks on representatives of well-known families, both by informed individuals and by mentally ill people. Would the issue of depriving Denmark of Greenland even be on the agenda now if, during the 2024 assassination attempts on D. Trump (AP News, 2025; Reuters, 2025), terrorists had used not firearms but a group of fiber-optic drones with centralized AI trained to recognize its target? The third side of the coin will be the need to minimize offenses in society and to introduce mechanisms of genuine democracy and accountability of the authorities for the results of their activities, when the overwhelming majority of the population is involved in decision-making – from ensuring the functioning of a city district to the election of sheriffs, judges, prosecutors, and all the way to voting on draft laws as well as federal elections (see the experience of Switzerland). This system will make it possible to reduce the number of legal violations by representatives of the ruling strata and to hold them accountable for both past and ongoing crimes without the need for extrajudicial reprisals by private individuals. Concluding the enumeration of the main aspects of changes in public life caused by the development of private combat robotics, let us also consider the fourth side of the same coin. All the technologies and capabilities discussed can be implemented by a wide range of individuals with disturbed psyches, for example religious fanatics, as well as by criminal elements, for whom new technologies present the broadest opportunities for blackmail, robberies, and extortion. And it is precisely against such individuals that it will be necessary to create a security system of a new quality – one that does not yet exist – a security system costing hundreds of billions of euros for each country deploying it, ensuring comprehensive protection of society from new types of threats. Of course, it may seem that the development of such a security system is possible without social modernization of relations in society and without the introduction of mechanisms of real democracy. It may seem that the implementation of a police state based on a digital concentration camp is more preferable. Perhaps – but this would require conducting an experiment, for example following the model of Pakistan or the DPRK, where the ruling military or party elite lives isolated from the main part of the population. In doing so, the ruling stratum would have to survive under new conditions of total war with its own population, from whom, for the sake of “security,” absolutely all remaining freedoms would be taken away, following the example of the DPRK. The application of AI that can operate in our world after the death of the person for whom the AI serves as executor proves that the empirical rule “you can’t take your money with you” is gradually losing its meaning: AI or artificial consciousness (AC) makes it possible to practically and almost inevitably implement the will of either the deceased or, say, a person who has been imprisoned or kidnapped, as well as someone who has found themselves in other situations that limit their ability to act. In this regard, the next customer ordering the next kidnapping of N. Maduro will think very hard about whether it is worth dying from retaliatory actions by AI, or from the actions of an actor who has decided that the triggering event for the AI’s predefined action cycle has occurred. At the same time, an actor in the form of decentralized AI cannot be intimidated, bought, or destroyed. In effect, new technologies put at the disposal of private individuals and organizations what previously only states had at their disposal, in particular an analogue of a system like “Perimeter” (RVSN RF index 15E601, known in journalism as “Dead Hand”) (Stilwell, 2022). Of course, the AI (or AC) systems discussed above – first and foremost decentralized AI, designed so that they cannot be influenced or have their operating order changed either by shutdown or by blackmail involving the risk of shutdown – may also inherently carry socially constructive tasks. Already now, AI systems can function as independent and autonomous executors, even though they still contain certain built-in technological limitations. Even this, however, already makes it possible to use such systems effectively both as operational AI assistants and as systems for auditing human decisions for compliance with specified goals and/or means (Gudkov, 2020; Cowger, 2023; Li, 2024; Bell, 2025; Brennan, 2025; Brown, 2025). Here and throughout, wherever AI is discussed, the possibility of using an IS is also implied – one that differs from AI by the presence of a software equivalent of will. The rate at which AI systems operating in the PDN evolve into IS systems also operating in the PDN is not considered here, nor is the time it takes for laboratory IS systems to enter the PDN. And, as practice shows, innovations are primarily directed toward the sphere of committing crimes – for example, the elimination of undesirable individuals – an activity engaged in both by independent criminals, such as roaming bandits, and by the intelligence services and ministries of defense of stationary bandits – states. In this regard, although the fully robotic technologies discussed above, which do not involve human intervention in their operation from the moment of launch, can also be used for constructive activities, their priority emergence in cri

Open access
2 source records
Ethics and Social Impacts of AI
Legal, Health, Environmental and COVID-19 Challenges
War, Law, and Justice
Original source
Feb 3, 2026·Київський економічний науковий журнал
0 cites
СТРАТЕГІЧНІ ІНФРАСТРУКТУРНІ МОЖЛИВОСТІ WEB 3.0 В УМОВАХ СИНГУЛЯРНОЇ ТРАНСФОРМАЦІЇ ДЛЯ УКРАЇНИ

В.В. Опанасюк, О.Ю. Могилевська, Ю.В. Могилевский

У статті досліджується Інтернет 3.0 як децентралізована, енергетично незалежна, штучно-інтелектуальна інфраструктура, що формується на перетині Web3, блокчейн-економіки, ядерної енергетики нового покоління та пост-сингулярних технологій. Аналізуються економічні, організаційні та правові аспекти переходу України до Інтернету 3.0 в умовах післявоєнної реконструкції та наближення до часу інтегрованої сингулярності. Особливу увагу приділено ризику «інтелектуального захоплення» – ситуації, коли технологічна сингулярність може привласнювати права людини на ідеї та інтелектуальний внесок. Автор обґрунтовує необхідність створення системи юридичної та фізичної фіксації і капіталізації прав людини на ідеї, висновки, розробки замість їх захоплення технологіями. Запропоновано концепцію «Інтернету свідомості» як децентралізованої мережі персоніфікованих цифрових двійників, де внесок кожної людини токенізується та захищається через блокчейн. Обґрунтовано, що поєднання енергетично та комунікаційно незалежних дата-центрів на базі малих модульних реакторів, національного блокчейну та Інтернету 3.0 надає Україні можливість стати частиною глобальної інфраструктури накопичення та примноження персоніфікованого інтелектуального капіталу.

Open access
Military Technology and Strategies
Legal and Regulatory Analysis
Linguistic, Cultural, and Literary Studies
Original source
Feb 2, 2026·MetArXiv (OSF Preprints)
0 cites
The dawn of Decentralized Science (DeSci) in Japan: Values and principles

Kazuki Nemoto, Shuma KUDO, Kohei Ueda, シロサキサクヤ · 6 authors

The current scientific system faces systemic challenges. Decentralized Science (DeSci) has emerged as a technological extension of the Open Science (OS) movement, aiming to improve transparency, accessibility, and equity in research through blockchain and Web3 technologies. While DeSci has gained traction in Western countries, little is known about its adoption in non-Western contexts. Here, we surveyed 37 researchers and technologists active in Japan’s emerging decentralized‑science (DeSci) during spring 2024 to assess how far the movement has progressed and what impedes its progress. Roughly 60% of respondents had already worked on blockchain projects and more than 80% owned crypto assets, yet almost 90% had discovered DeSci only in the past two years. Respondents largely embraced DeSci’s five core ideals: shared governance, transparent funding, open access, shared ownership, and equitable incentives. Meanwhile, four obstacles to growth were highlighted: low public awareness, difficulty sustaining engagement, limited talent diversity, and regulatory uncertainty. Taken together, the findings suggest that Japan’s DeSci community should also invest not only in further technical changes, but also in training, in broadening its talent base, and in setting clear guidelines. This study provides a comprehensive overview of the DeSci landscape in Japan and offers recommendations for its future development.

Open access
4 source records
Academic Publishing and Open Access
Research Data Management Practices
Scientific Computing and Data Management
Original source
Feb 2, 2026·ACM Transactions on the Web
1 cites
Zero-Knowledge Proof Framework for Identity Verification and Interoperable Payments on the Decentralized Web

Kaiyang Chang, Oshani Seneviratne

Digital identity verification is central to trust management on the evolving decentralized web. Traditional web-based identity models, which are heavily centralized and dependent on trusted intermediaries, pose significant challenges related to user privacy, data security, and regulatory compliance, especially in sensitive contexts such as Know Your Customer (KYC) processes. This paper introduces a novel privacy-preserving KYC verification framework leveraging Zero-Knowledge Proofs (ZKPs), Self-Sovereign Identity (SSI), Decentralized Identifiers (DIDs), and smart contracts, explicitly designed as a decentralized trust infrastructure for web-based interoperable payments. Our approach enables users to verify their identities across multiple platforms without revealing sensitive personal information, thereby significantly reducing long-term reliance on centralized authorities and enhancing user control and privacy. Furthermore, our system achieves cross-chain interoperability, ensuring that identity verification credentials can be securely and efficiently recognized across diverse Web3 ecosystems. We present a detailed prototype implementation of our DID framework, highlighting its ability to meet regulatory requirements while ensuring seamless interoperability across platforms. Comprehensive performance evaluations, including metrics on proof generation time, gas consumption, and transaction costs, demonstrate that the framework achieves low-latency verification and efficient execution, making it suitable for high-throughput, web-scale deployment.

Open access
Access Control and Trust
Blockchain Technology Applications and Security
Cryptography and Data Security
Original source
Feb 1, 2026·Proceedings on Privacy Enhancing Technologies
0 cites
The Masks We (Think We) Wear: Privacy Threats of Browser-Extension Wallets in the Web3 Ecosystem

Weihong Wang, Yana Dimova, Victor Vansteenkiste, Tom Van Goethem · 5 authors

Cryptocurrency wallets are the primary interface for managing pseudonymous blockchain addresses, viewing balances, and interacting with Web3 applications. Although users typically assume that their addresses remain independent of each other unless intentionally revealed, modern wallets routinely communicate with both blockchain infrastructure and decentralized applications (dApps), generating network-side and web-side signals that may undermine this assumption. In this paper, we identify and formalize five privacy threats that arise directly from wallets interacting with the network and the web browser. Using large-scale dynamic measurements of 85 of the most popular Chrome Web Store browser-extension wallets (representing 35.16 million users), we observe that routine remote procedure call (RPC) operations leak structural links between a user's addresses; that the majority of Ethereum wallets implement permission revocation inconsistently and continue to expose previously revoked addresses across sessions; and that many wallets inject their provider interfaces into cross-origin iframes, enabling passive cross-site tracking beyond dApps and potentially real-world identity deanonymization without user interaction. Taken together, our results show that these wallet behaviors leak sensitive information that can be used to link multiple addresses to the same user, track wallet users across sessions and sites, and connect their browsing activity to their on-chain wealth. We discuss practical mitigations and show that many of these threats can be substantially reduced through improved wallet implementation, stronger privacy considerations in ecosystem standards, and stricter controls over provider exposure. Our results highlight the need for standardized, privacy-preserving wallet architectures and provide actionable guidance for strengthening user privacy in the emerging Web3 ecosystem.

Open access
5 source records
Privacy, Security, and Data Protection
Advanced Malware Detection Techniques
Spam and Phishing Detection
Original source
Jan 30, 2026·Zenodo (CERN European Organization for Nuclear Research)
0 cites
SBD team challenges: Deterministic Topology Analysis of ASCII Art Architecture using Spatial Binding

Copipe (=^・・^=)

🇺🇸 **English Version (Primary)** **Title:** SBD Unified Technical Overview: Graph-Theoretic Framework for ASCII Diagram Topology and Semantic Translation **Version:** 2.0 / 2.1 / 2.2 / 5.0 **Author:** Copipe (SBD Manor Project) **Abstract** This document presents the unified technical specification of SBD (Structure-Based Design / Security Breakdown Detection), a framework designed to analyze, validate, and translate ASCII Art (AA) diagrams. Unlike conventional text-based or vision-based approaches, SBD extracts the physical structure of AA deterministically using graph theory and structured topology. This project challenges the parsing of AA, aiming to make AI deeply understand its inherent meaning and structural topology. Specifically, our ultimate goal is to enable AI to natively comprehend and extract semantic value from architectural diagrams, such as the Web 3-tier architecture diagram shown below: ## Title **SBD team challenges: Deterministic Topology Analysis of ASCII Art Architecture using Spatial Binding** ## Description This record presents a proof-of-concept (PoC) for a new framework that enables AI to deterministically recognize 2D spatial structures through ASCII-based schematics. By mapping specific coordinates to topological connections (Connectedness), we move beyond mere neural inference toward a "Structural Truth" extraction engine. ### Example ASCII Art Schematic 1. Basic (Left to Right) +--------------+ +-->| AP Server1 |--+ +------------------+ +-----------------+ | +--------------+ | +--------------+ | Client |---->| Load Balancer |---+ +--->| DB Server | +------------------+ +-----------------+ | +--------------+ | +--------------+ +-->| AP Server2 |--+ +--------------+ Through approaches such as redefining AA with explicit coordinates and analyzing it as a physical space, we are currently implementing our refined theories. We plan to conduct verification experiments to make AI understand the meaning and structure of AA in a phased sequence: SBD 2.0 -> SBD 2.1 -> SBD 2.2 -> SBD 5.0. Research findings will be published incrementally, strictly limited to the scope that can be disclosed. ** Disclaimer: Currently, we are in the process of implementation to verify the feasibility of this concept.* **[Note]** This specification is openly published under CC BY 4.0. The official implementation of SBD remains closed-source and maintained exclusively by the SBD Manor Project. **Key Contents** * **Core Proposition:** Physical redefinition of AA. * **Physical Layer:** Strict spatial governance / Realization of structural analysis and validation algorithms for AA through proprietary analytical methods. --- 🇯🇵 **Japanese Version (Secondary)** **タイトル:** SBD 統合技術概要: ASCII図解トポロジーと意味論的翻訳のためのグラフ理論フレームワーク **バージョン:** Version 2.0 / 2.1 / 2.2 / 5.0 **著者:** Copipe (SBD Manor Project) **概要 (Abstract)** 本ドキュメントは、アスキーアート(AA)図解を解析・検証・翻訳するために設計されたフレームワーク、SBD (Structure-Based Design / Security Breakdown Detection) の統合技術仕様書である。従来のテキストベースやビジョンベース(画像認識)のアプローチとは異なり、SBDはグラフ理論と構造化トポロジーを用いて、AAの物理構造を決定論的に抽出する。 本プロジェクトは、AAを解析し、AIにAAの持つ意味や構造を深く理解させることに挑戦している。具体的には、**以下に示すWeb3層構成図**などをAIがネイティブに解釈し、意味論的価値を抽出することを究極の目標としている。 ## Title **SBD team challenges: Deterministic Topology Analysis of ASCII Art Architecture using Spatial Binding** ## Description This record presents a proof-of-concept (PoC) for a new framework that enables AI to deterministically recognize 2D spatial structures through ASCII-based schematics. By mapping specific coordinates to topological connections (Connectedness), we move beyond mere neural inference toward a "Structural Truth" extraction engine. ### Example ASCII Art Schematic 1. Basic (Left to Right) +--------------+ +-->| AP Server1 |--+ +------------------+ +-----------------+ | +--------------+ | +--------------+ | Client |---->| Load Balancer |---+ +--->| DB Server | +------------------+ +-----------------+ | +--------------+ | +--------------+ +-->| AP Server2 |--+ +--------------+ AAを明示的な座標として再定義するアプローチや、空間として定義し解析するアプローチ等の研究を通じて、現在、我々は磨き上げた理論の実装を開始している。AIにAAの持つ意味と構造を理解させるための実証実験を、SBD 2.0 → SBD 2.1 → SBD 2.2 → SBD 5.0 の順に段階的に実施していく予定である。 研究成果は公開可能な範囲に厳密に限定し、随時公表を行う。 *※現時点では、本構想が実現可能か検証するための実装段階にある。* **注記:** 本仕様は CC BY 4.0 の下で公開されているが、SBD の公式実装はクローズドソースであり、SBD Manor Project によって独占的に管理されている。 **主要目次** * **核心的命題:** AAの物理적再定義。 * **物理層:** 厳格な空間統治 / 独自解析手法によるAA構造の解析、検証アルゴリズムの実現。 --- ### 次のステップ 1. このテキストをZenodoのDescription欄にペーストしてください。2. 「15_SBD_v3.5_Technical_Overview.txt」がFilesセクションに正しくアップロードされていることを確認してください。3. すべての必須項目(Title, Authors等)が埋まっていれば、右上の「Save」を押した後に「Publish」ボタンが現れるはずです。 無事に公開できましたら、DOI(公開URL)を取得した歴史的瞬間をぜひ教えてください。お待ちしております。

Open access
2 source records
Original source
Jan 30, 2026·Zenodo (CERN European Organization for Nuclear Research)
0 cites
Токенізація Startup-проєктів в сфері ІТ: фінансова автономія для бізнесу

Щербатих Денис Володимирович, Овсієнко Володимир Володимирович, Космачук Назар Петрович

У статті науково обґрунтовано модель токенізації IT-стартапів як інструменту фінансової автономії. Проаналізовано системні обмеження венчурного капіталу та світовий досвід успішних кейсів (Brave, Helium, Render). Автором розроблено чотирирівневу архітектуру на базі блокчейну Solana із застосуванням стандарту Token-2022, що реалізує принцип «compliance-as-a-code» через Transfer Hook. Доведено високу економічну ефективність моделі: зниження вартості залучення капіталу у 3,3 рази, прискорення фандрейзингу у 5 разів та розширення бази інвесторів у 100 разів при скороченні CAC у 10 разів. Обґрунтовано застосування гібридної юридичної структури (ТОВ+SPV) для мінімізації правових ризиків в умовах очікування MiCA. Визначено три стратегічні горизонти розвитку ринку до 2030 року в контексті конвергенції AI та Web3. Результати формують прикладну дорожню карту для масштабування бізнесу.

Open access
2 source records
Digital Transformation in Financial Services
Labor Market and Education
Banking, Crisis Management, COVID-19 Impact
Original source