Muhammad Razali, Azrul Amri Jamal, Syed Abdullah Fadzli, Muhammad D. Zakaria · 6 authors
The act of voting is an inherent and essential entitlement that is universally granted to all individuals. Electronic voting, commonly known as e-voting, is a voting method that utilises electronic equipment to facilitate and manage the process of casting and tallying votes. Electronic voting systems are employed to expedite the process of tallying ballots. Furthermore, it will reduce the amount of money needed to pay for counting staff while also reducing human error. The implementation of remote voting would greatly benefit individuals residing at a considerable distance from their designated polling location, as it would afford them the convenience of casting their vote at any given time and from any geographical area. The utilisation of blockchain technology presents novel opportunities for the creation and advancement of innovative digital services. The implementation of Blockchain-Enabled e-Voting has promise in mitigating instances of election fraud and enhancing voter accessibility. The voting process involved the utilisation of electronic devices, such as computers or smartphones, by those who met the criteria for voter eligibility. This method ensured that the voting process maintained the principle of anonymity. The significance of electronic credibility services has seen substantial development, becoming as a crucial element inside the contemporary information era. This project seeks to implement the objective of constructing an electronic voting system utilising blockchain technology. The two-level architecture ensures secure voting without relying on current (non-blockchain) technologies for redundancy. The blockchain-based voting project is made up of two components that work together to make the whole thing operate. One will be the admin, who will be in charge of creating elections, as well as adding candidates to the smart contract elections. The other type of user is the voter, who can vote for their preferred candidate and have their vote recorded on the blockchain to make it tamper-proof.
Open access
Blockchain Technology Applications and Security
Internet Traffic Analysis and Secure E-voting
Advanced Steganography and Watermarking Techniques
Election systems often face severe challenges regarding security and trust. Threats such as vote falsification and lack of transparency in vote counting have shaken the integrity of elections in various countries. The use of blockchain technology in e-voting has been proposed as an attractive solution to overcome this problem. Several studies use blockchain for the security of electronic voting systems. The existing methods are not resistant against impersonation attacks and man-in-the-middle attacks. This research proposes a new scheme to strengthen a blockchain-based e-voting system. The blockchain used in the proposed method is Ethereum. The proposed scheme uses the modified framework and The Goldreich-Goldwasser-Halevi (GGH) signature scheme. Digital signatures generated using Goldreich-Goldwasser-Halevi (GGH) can strengthen the identity of the message sender so that enemies cannot imitate someone. In this research, the Voter's public key and anonymous ID are used by the Voter to maintain the Voter's anonymity. Based on the experimental results, it can be concluded that the proposed scheme is stronger than the previous scheme because the probability of success in impersonating the sender with the proposed scheme using an impersonation attack and man-in-the-middle attack is small.
Open access
Blockchain Technology Applications and Security
Internet Traffic Analysis and Secure E-voting
Advanced Steganography and Watermarking Techniques
Omer Aziz, Muhammad Shoaib Farooq, Adel Khelifi, Mahdia Shoaib
Abstract The rapid evolution of the digital landscape has catalyzed the integration of blockchain technology within the domain of cultural heritage, particularly in virtual museums within the Metaverse. This study introduces ArchaeoMeta, a novel framework designed to leverage blockchain technology to enhance security, authenticity, and visitor interaction in a virtual museum environment. Utilizing smart contracts deployed on the Ethereum Sepolia testnet, the framework manages visitor interactions and secures digital artifacts, addressing challenges associated with scalability and user experience under varying loads. The performance evaluation involved simulating user interactions, scaling up to ten thousand concurrent users, to assess the impact on transaction latency, gas usage, and blockchain size. Findings reveal significant scalability challenges, as transaction latency and blockchain size increased with the number of users, highlighting areas for optimization in managing high user traffic within the blockchain infrastructure. This study contributes to the understanding of blockchain applications in cultural heritage, suggesting that while ArchaeoMeta offers a robust platform for virtual museums, enhancements in scalability through layer-2 solutions or alternative blockchain platforms are essential for its practical implementation. The framework sets a precedent for future research in the convergence of blockchain technology and cultural heritage preservation, promising a transformative impact on how digital cultural experiences are curated and consumed.
Manali Agrawal, Rui Dias, Mohammad Irfan, Rosa Galvão · 5 authors
Decentralised Finance (DeFi) provides a new way to perform complex financial transactions by exploiting blockchain's ability to maintain a decentralised ledger of transactions without being constrained by centralised systems or human intermediaries. DeFi provides alternative financial instruments that might lessen portfolio risk, especially given the erratic state of the financial markets today. This study analyses the association between the year of the coin in which it was introduced and the market capitalisation of the respective companies. Furthermore, the study also tries to understand the volatility associated with cryptocurrencies using EGARCH & GJR-GARCH models. The results reveal that market capitalisation is not similar for all three stages of the age of cryptocurrency. Also, negative news tends to impact Bitcoin more than positive news, and the volatility is persistent and long-lasting. Ethereum, BNB & Solana see more volatility from absolute past shocks; however, Tether exhibits low but persistent volatility as a stablecoin.
This paper presents an innovative Web 3.0 authentication technique, designed for a user-centric internet environment. Addressing the rising demand for authentication techniques suitable for Web 3.0, it defines the essential features of such systems and introduces a new approach using smart contracts. This approach utilizes mother and child tokens in conjunction with the lock smart contract to ensure secure authentication. The approach is thoroughly tested against various security threats, including man-in-the-middle, replay, and brute-force attacks, and its practicality is evaluated on Ethereum-based networks.
Decentralized Finance (DeFi), a pivotal component of the emerging Web3 landscape, is gaining popularity but remains vulnerable to market manipulations, such as wash trading. Wash trading is an illegal practice, where traders buy and sell assets to themselves within cryptocurrency exchanges to artificially inflate trading volumes and distort market perceptions. However, current research primarily focuses on traditional exchanges based on the Order-book mechanism (similar to stock markets), while ignoring the Automated Market Maker (AMM) exchanges, which dominate over 75% of the market and represent a significant innovation within the DeFi. This study utilizes entity recognition technology to detect wash trading on AMM exchanges within Ethereum-like systems, based on the understanding that colluding addresses (perceived as the same entity) must use ETH for transaction fees and exhibit direct or indirect ETH transfer links. We identify wash trading when addresses with transfer connections almost simultaneously buy and sell assets while their total asset holdings remain nearly constant. This comprehensive blockchain network analysis, compared to focusing solely on transactions within exchanges, unveils covert wash trading activities. Our detection method achieves a 95.9% recall and a 96.7% true negative rate in identifying pools affected by wash trading, demonstrating its superiority over existing methods. Furthermore, we apply our method to 98,945 pools from Uniswap V2 & V3 (the most popular AMM exchanges on Ethereum) and identify 1,070,626 abnormal transactions, totaling $27.51 billion in trading volume. Analysis of these transactions uncovers insights into wash traders’ behaviors, including the utilization of multiple addresses and the dual roles of certain addresses as wash traders and liquidity providers. These insights are crucial for developing more effective strategies to combat fraudulent activities in the DeFi ecosystem and enhance financial scrutiny.
This study explores the application of a Graph Attention Networks version 2 (GATv2) model in analyzing the Ethereum blockchain network, addressing the challenge posed by its inherent anonymity. We constructed a heterogeneous graph representation of the network to categorize contract accounts (CAs) into different decentralized application (DApp) categories, such as DeFi, gaming, and NFT markets, using transaction history data. Additionally, we developed a link prediction model to forecast transactions between externally owned accounts (EOAs) and CAs. Our results demonstrated the effectiveness of the heterogeneous graph model in improving node embedding expressiveness and enhancing transaction prediction accuracy. The study offers practical tools for analyzing DApp flows within the Web3 ecosystem, facilitating the automatic prediction of CA service categories and identifying active DApp usage. While currently focused on the Ethereum network, future research could expand to include layer 2 networks like Arbitrum One, Optimism, and Polygon, thereby broadening the scope of analysis in the evolving blockchain landscape.
• Comparative analysis of Bitcoin and Ethereum electricity consumption and returns. • Ethereum's transition to PoS shows a stronger link between returns and energy use. • Shannon and Rényi transfer entropy reveal bidirectional information flow dynamics. • Ethereum returns significantly impact energy consumption, unlike Bitcoin. • A dynamic approach captures time-varying effects of market changes on energy use. Understanding energy consumption associated with cryptocurrency mining gained increasing attention, with the literature focusing mainly on Bitcoin. This study uses data from the two energy consumption indices, to estimate static and dynamic transfer entropies. The results provide a nuanced understanding of the bidirectional relationships and their implications. The dominant direction of information flow for Bitcoin is from electricity consumption to returns, while for Ethereum, it is from returns to electricity consumption, suggesting that Ethereum's returns significantly impact electricity consumption patterns. Results highlight the need for policies that integrate energy forecasting and environmental sustainability considerations and has significant implications for policymaking.
Ebenezer Fiifi Emire Atta Mills, Yuexin Liao, Zihui Deng
Due to the recent fluctuations in cryptocurrency prices, Ethereum has gained recognition as an investment asset. Given its volatile nature, there is a significant demand for accurate predictions to guide investment choices. This paper examines the most influential features of the daily price trends of Ethereum using a novel approach that combines the Random Forest classifier and the ReliefF method. Integrating the Adaptive Neuro-Fuzzy Inference System (ANFIS) and Short-Time Fourier Transform (STFT) resulted in high accuracy and performance metrics for Ethereum price trend predictions. This method stands out from prior research, primarily based on time series analysis, by enhancing pattern recognition across time and frequency domains. This adaptability leads to better prediction capabilities with accuracy reaching 76.56% in a highly chaotic market such as cryptocurrency. The STFT's ability to reveal cyclical trends in Ethereum's price provides valuable insights for the ANFIS model, leading to more precise predictions and addressing a notable gap in cryptocurrency research. Hence, compared to models in literature such as Gradient Boosting, Long Short-Term Memory, Random Forest, and Extreme Gradient Boosting, the proposed model adapts to complex data patterns and captures intricate non-linear relationships, making it well-suited for cryptocurrency prediction.
Andrew R. Short, Τheofanis G Orfanoudakis, Helen C. Leligou
This research paper discusses security issues with current deployments of Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition Systems (SCADA) in the industry and proposes a solution that enables PLC devices to query a blockchain infrastructure for commands and setpoints. The blockchain assumes a dual role in this context: serving as an immutable audit trail database as well as a trusted source for critical commands and setpoints. In contrast to the conventional paradigm, this novel approach does not require write access at the PLC level, thus minimizes its attack surface and helping to protect against known and zero-day vulnerabilities often used in cyberwarfare, such as in the case of the notorious Stuxnet worm. Applications that enforce the logging of user operations for Good Manufacturing Practices (GMP) or compliance purposes use the blockchain network as an audit trail database for user actions. Any attempt to maliciously circumvent the logging operation would not affect the operation of a critical process. Additionally, a prototype implementation developed as part of this research finds that modern PLC devices are more than capable of interacting with private Ethereum blockchain nodes. The required libraries and user code consume a small percentage of available resources, while the duration of a complete request-response cycle measured around 22msec. The authors anticipate that PLCBlox can be used as a drop-in replacement for applications requiring higher security standards and logging enforcement, such as nuclear power plants or other critical infrastructure.
Chihiro Kado, Naoto Yanai, Jason Paul Cruz, Kyosuke Yamashita · 5 authors
Vulnerabilities in Ethereum smart contracts often cause significant financial damage. Whereas the Solidity compiler has been updated to mitigate vulnerabilities, the effectiveness of these updates remains undisclosed to the best of our knowledge. In this paper, we aim to shed light on the impact of compiler versions on reducing vulnerabilities in Ethereum smart contracts. To achieve this, we collected 497,344 contracts with Solidity source codes from the Ethereum blockchain and analyzed their vulnerabilities. For three vulnerabilities of high severity, i.e., Locked Money , Using tx.origin , and Unchecked Call , we illustrate their appearance rate changes, showing decreases attributed to major updates of the Solidity compiler. Subsequently, we found the following four key insights. Firstly, updates to version 0.6 and version 0.8 led to decreased appearance rates for Locked Money . Secondly, regardless of compiler updates, the appearance rate for Using tx.origin was significantly low. Thirdly, the appearance rate for Unchecked Call significantly decreased from version 0.5 to version 0.8. Lastly, as an incidental discovery from our empirical study, we identified implications for code clones, which merit attention from subsequent researchers and developers.
We provide an economic model of Execution Tickets and use it to study the ability of the Ethereum protocol to capture MEV from block construction. We demonstrate that Execution Tickets extract all MEV when all buyers are homogeneous, risk neutral and face no capital costs. We also show that MEV capture decreases with risk aversion and capital costs. Moreover, when buyers are heterogeneous, MEV capture can be especially low and a single dominant buyer can extract much of the MEV. This adverse effect can be partially mitigated by the presence of a Proposer Builder Separation (PBS) mechanism, which gives ET buyers access to a market of specialized builders, but in practice centralization vectors still persist. With PBS, ETs are concentrated among those with the highest ex-ante MEV extraction ability and lowest cost of capital. We show how it is possible that large investors that are not builders but have substantial advantage in capital cost can come to dominate the ET market.
Kripto paralar herhangi bir geleneksel ekonomik anlayışla değerlendirme olanağına sahip olunmayan ve giderek yaygınlaşan para birimleridir. Dolayısıyla, bu çalışma başladığı tarih itibariyle en yüksek piyasa değerine sahip kripto ERC-20 (ERC, “Ethereum Request for Comments”) standartlarına uygun bir şekilde üretilmiş olan 5 tane kripto para arasında Nedensellik ilişkisi olup olmadığını araştırmaktadır. Çalışma kullanılan tokenler: DAI Token (DAI), SHIBA Inu (SHIBA), Tether USDt (TETHER), Uniswap (UNI) ve USD Coin (USDC)’dir. Çalışma VAR (Vektör Otoregresif) model kullanmaktadır ve buna dayalı olarak Granger Nedensellik, Etki-Tepki ve Varyans Ayrıştırması analizleri yapmaktadır. Çalışmada 01.10.2021-05.02.2024 dönemini kapsamakta olup ve serilerin günlük getirileri kullanılmaktadır. Bu bağlamda 10 tane model tahmin edilmekte olup, 4’ünde herhangi bir nedensellik ilişkisi tespit edilmezken 3’ünde tek yönlü ve 3’ünle çift yönlü nedensellik ilişkisi tespit edilmektedir. Etki-tepki analizleri, genelde bir kripto paraların kendinde meydana gelen şoklara duyarlığı olduğunu ve diğerinde meydana gelen şoklara duyarlı olmadığını göstermekle beraber (10 modelin 5’nde durum böyledir.), karşılıklı ve tek yönlü etkilerden söz edilebilir. Etki-tepki analizlerinin en çarpıcı sonucu USDC meydana gelen şoklar TETHER üzerinde oldukça uzun-dönem etkili olmaktadır. Varyans ayrıştırması sonuçlarının en çarpıcısı, DAI’nin USDC üzerindeki varyasyonun ana belirleyicisi olması ve bu etkinin tüm dönemler itibariyle yaklaşık olarak %70 civarı olduğu ifade edilebilir. USDC’de meydana gelen varyasyonun 3’de 2’sinden biraz fazlası DAI’de meydana gelen varyasyon kaynaklıdır. Bir diğer çarpıcı bulgu bu bağlamda Buna karşılık TETHER’deki varyasyon, DAI’nin USDC üzerinde yaptığı etki kadar büyük olmasa bile oldukça yüksek miktarda USDC varyasyonu açıklamaktadır. Bu etki 1. dönemde en yüksek seviyesinde olup (yaklaşık %39.5 iken) 4. dönemden sonra %35.3 civarında stabil bir hâl almaktadır.
Voting is the primary mechanism through which DAOs, or Decentralised Autonomous Organisations, reach decisions. Although transparent, the voting process can be complex: it can involve many interacting smart contracts. The nexus of the decision-making process can be relocated and the true voter demographic obfuscated. Furthermore, DAOs can govern other DAOs - metagovernance. We present a method for identifying DAO-to-DAO metagovernance on the Ethereum blockchain. We focus on the links between DAOs and token contracts. We employ a signature-matching algorithm to flexibly handle a variety of DAO frameworks and voting schemes. Once we establish token-to-DAO relationships, we gather and process voting data to produce a list of metagovernance relationships. We apply this algorithm to an initial set of sixteen DAOs and we extend the dataset as more DAOs are identified. We produce a metagovernance network with 61 DAOs and 72 metagovernance relationships. We examine three case studies that show metagovernance of various forms: strategic, decisive, and centralised where a DAO becomes a nexus for metagovernance. We demonstrate that metagovernance obscures voting context and introduces entities driven by self-interest that can significantly influence governance. We highlight instances of metagovernance between DAOs operating on the Ethereum blockchain where current governance tools inadequately reveal such dynamics. To preserve the transparency-centric ethos of DAOs and mitigate risks associated with metagovernance, there is a pressing need for enhanced tools to address such issues.
Ruichao Liang, Jing Chen, Cong Wu, Kun He · 9 authors
Smart contracts, the cornerstone of decentralized applications, have become increasingly prominent in revolutionizing the digital landscape. However, vulnerabilities in smart contracts pose great risks to user assets and undermine overall trust in decentralized systems. Fuzzing, a prominent security testing technique, is extensively explored to detect vulnerabilities. But current smart contract fuzzers fall short of expectations in testing efficiency for two primary reasons. Firstly, smart contracts are stateful programs, and existing approaches, primarily coverage-guided, lack effective feedback from the contract state. Consequently, they struggle to effectively explore the contract state space. Secondly, coverage-guided fuzzers, aiming for comprehensive program coverage, may lead to a wastage of testing resources on benign code areas. This wastage worsens in smart contract testing, as the mix of code and state spaces further complicates comprehensive testing. To address these challenges, we propose Vulseye, a stateful directed graybox fuzzer for smart contracts guided by vulnerabilities. Different from prior works, Vulseyeachieves stateful directed fuzzing by prioritizing testing resources to code areas and contract states that are more prone to vulnerabilities. We introduceCode TargetsandState Targetsinto fuzzing loops as the testing targets of Vulseye. We use static analysis and pattern matching to pinpointCode Targets, and propose a scalable backward analysis algorithm to specifyState Targets. We design a novel fitness metric that leverages feedback from both the contract code space and state space, directing fuzzing toward these targets. With the guidance of code and state targets, Vulseyealleviates the wastage of testing resources on benign code areas and achieves effective stateful fuzzing. In comparison with state-of-the-art fuzzers, Vulseyedemonstrated superior effectiveness and efficiency. Notably, it uncovered 4,845 vulnerabilities in 42,738 real-world smart contracts, outperforming existing approaches by up to$9.7\times $, and identified 11 previously unknown vulnerabilities within the top 50 Ethereum DApps, involving approximately 2,500,000 USD.
Smart contracts are a major tool in Ethereum transactions. Therefore hackers can exploit them by adding code vulnerabilities to their sources and using these vulnerabilities for performing malicious transactions. This paper presents two successful approaches for detecting malicious contracts: one uses opcode and relies on GPT2 and the other uses the Solidity source and a LORA fine-tuned CodeLlama. Finally, we present an XGBOOST model that combines gas properties and Hexa-decimal signatures for detecting malicious transactions. This approach relies on early assumptions that maliciousness is manifested by the uncommon usage of the contracts' functions and the effort to pursue the transaction.
The Ethereum blockchain-based electronic voting (e-voting) systems can emerge as a viable strategy in this era of contemporary democracies to revolutionize political elections and augment the efficacy of the electoral process. There are myriad advantages that the Ethereum blockchain has to offer, from fairness to increased voting rates. Unlike traditional voting protocols, the Ethereum blockchain can assure substantial cost savings and eliminate the necessity for electoral intermediaries. The use of the Ethereum blockchain in political contexts also ensures that elections are held with integrity while preserving the voters’ privacy. Due to its popularity, provision of smart contracts logic, and various promising advantages, this systematic review aims to examine the potential deployment of decentralized e-voting systems integrated with Ethereum blockchain technology for democratic political elections. A systematic literature review (SLR) and the PICO approach, which stands for population, intervention, control, and outcomes, were adopted in this study to systematically analyze the existing literature. Key technological approaches identified in the voting system include the hybrid blockchain and privacy-preserving score voting. Among the noteworthy findings are the following: while adoption and complexity remain challenges across numerous e-voting frameworks, scalability, end-to-end security, enhanced efficiency, and effectiveness are key benefits. An exploration into the prospective future innovations, such as the integration of artificial intelligence and big data analytics into the Ethereum blockchain, was also included to further improve the reliability of the e-voting systems. It is believed that the Ethereum blockchain has a promising transformative impact on electoral politics and democratic processes, presenting a ray of hope for future elections.
El presente proyecto tiene como objetivo promover transparencia en los procesos de cultivo e industrialización de la vid y el vino. Se plantea registrar la logística de la vid y todos sus movimientos enfocados en una solución de triple impacto que atraviesa a todas las personas involucradas, fomentando buenas prácticas. La idea del modelo de negocio analizado corresponde a un proyecto laboral en el que se desarrolló una plataforma de inversiones a través de criptomonedas, específicamente NFT, es un acrónimo para "token no fungible" (Non-Fungible Token). Un token es un activo digital encriptado que representa algo único y verificable, no son intercambiables con otros elementos, porque tienen representaciones únicas y activos digitales que se basan en tecnología <blockchain= para garantizar su autenticidad y propiedad, asegurados por una cadena de <bloques= de Ethereum y solo pueden tener un propietario a la vez. Quienes compran NFT buscan rentabilidad en sus inversiones con un tipo de moneda más estable y descentralizada. La idea central es que se incorpore un concepto de sostenibilidad ambiental y conciencia civil entendida ésta como la capacidad de conservar y proteger el medio ambiente de forma indefinida. Respetando el labor y la calidad de vid dentro de la cadena de producción del misma. Las etapas planteadas dentro de la investigación están orientadas a los siguientes objetivos: 1. Identificar el mapa de actores y roles que se desempeñan dentro del circuito de la vid, tanto en su cultivo como en la industrialización. 2. Explorar a fondo los procesos a los que se enfrentan las personas. 3. Promover una propuesta digital para las bodegas y transparentar esto en el historial de ese vino tokenizado. 4. Explorar factores externos como INTA, INTI, INV. Quienes se encuentran involucrados en el cultivo, tecnología y quienes forman parte de la fiscalización de la uva. 5. Analizar los hallazgos obtenidos de la investigación y establecer metas. 6. Idear soluciones y seleccionar las de mayor impacto. 7. Diseñar el Plan Estratégico y un modelo de dominio de datos a solicitar para la trazabilidad. El plan que se propone puede adaptarse fácilmente a cualquier bodega de características similares, que apunte a una transformación digital e innovadora.
Sonal Sahu, Alejandro Fonseca Ramírez, Jong‐Min Kim
This study investigates calendar anomalies and their impact on returns and volatility patterns in the cryptocurrency market, focusing on day-of-the-week effects before and during the COVID-19 pandemic. Using advanced statistical models from the GARCH family, we analyze the returns of Binance USD, Bitcoin, Binance Coin, Cardano, Dogecoin, Ethereum, Solana, Tether, USD Coin, and Ripple. Our findings reveal significant shifts in volatility dynamics and day-of-the-week effects on returns, challenging the notion of market efficiency. Notably, Bitcoin and Solana began exhibiting day-of-the-week effects during the pandemic, whereas Cardano and Dogecoin did not. During the pandemic, Binance USD, Ethereum, Tether, USD Coin, and Ripple showed multiple days with significant day-of-the-week effects. Notably, positive returns were generally observed on Sundays, whereas a shift to negative returns on Mondays was evident during the COVID-19 period. These patterns suggest that exploitable anomalies persist despite the market’s continuous operation and increasing maturity. The presence of a long-term memory in volatility highlights the need for robust trading strategies. Our research provides valuable insights for investors, traders, regulators, and policymakers, aiding in the development of effective trading strategies, risk management practices, and regulatory policies in the evolving cryptocurrency market.
Security bugs and trapdoors in smart contracts have been impacting the Ethereum community since its inception. Conceptually, the 1.45-million Ethereum's contracts form a single "gigantic program" whose behaviors are determined by the complex compositions of contracts. Can programmers be assured that this gigantic program conforms to high-level safety specifications, despite unforeseeable code-level intricacies? Static code verification cannot be faithful to this gigantic program due to its scale and high polymorphism. In this paper, we present a viable approach to achieve this goal. Our technology, called Theorem-Carrying Transactions (TCT), combines the benefits of concrete execution and symbolic proofs. Under the TCT protocol, every transaction carries a theorem that proves its adherence to the specified properties in the invoked contracts, and the runtime system checks the theorem before executing the transaction. Once a theorem is proven, it will be reused for future transactions, so TCT's runtime overhead is minimal. As case studies, we demonstrate that TCT secures token contracts without foreseeing code-level intricacies, such as integer overflow and reentrancy. TCT is also successfully applied to a Uniswap codebase, showcasing a complex decentralized finance (DeFi) scenario. Our evaluation shows a negligible runtime overhead, two orders of magnitude lower than a state-of-the-art approach for runtime checking of contract code safety.
Land registration is a important process that involves the felony recording of land possession, rights, and transactions. The current land registration structures in many nations frequently face demanding situations including corruption, inefficiency, and lack of transparency. Land Registration is a use case which entails lot of middlemen and critical authorities within the method which then puts trust within the gadget. keeping traces of who owns which part of land is challenging when there are hundreds or lots of land information to maintain. the use of Blockchain will take away the middlemen within the system and also will reduce corruption and increase pace of the process. Land Registration is a easy decentralized application which is build the usage of the Ethereum Blockchain principals. we will use this registration system as a replacement to bypass the present machine flaws. here the user who owns the land registers his land information and additionally enters marketplace value of the land with the aid of presenting all the important proofs. A central authority who traditionally looks into land registry is assigned as a land inspector can do the registration technique. Lands coming underneath a selected village can be registered to the gadget best via the inspector who's assigned to that village. The smart contract used here is written in this type of manner that the owner has to transfer his belongings completely to the buyer and no transaction of the land can be partial. Even we allow a government authority is involved in registration system, the complete manner is obvious and the transaction takes place most effective among the two customers.
Blockchain technology relies on consensus mechanisms, which are essential systems for validating transactions and ensuring their authenticity. These mechanisms maintain a permanent record of all valid transactions within a blockchain, establishing trust among users of cryptocurrencies like Bitcoin and Ethereum. By verifying and confirming transactions, consensus mechanisms Safeguard the integrity and protection of the blockchain network, safeguarding it from fraud or malicious activities. Once validated, a transaction is permanently added to the blockchain, becoming an immutable part of the network’s ledger. The process of building trust in a decentralized blockchain environment hinges on the consensus mechanism's ability to facilitate agreement among network participants (nodes). A variety of consensus methodologies have been developed to fulfill this need, each with its unique approach to ensuring security, transparency, and efficiency. For instance, Proof of Work (PoW) involves participants solving intricate mathematical puzzles to validate transactions, whereas Proof of Stake (PoS) grants validation rights based on the amount of cryptocurrency a participant owns. Moreover, more energy-efficient and scalable models like Delegated Proof of Stake (DPoS) and Practical Byzantine Fault Tolerance (PBFT) have been developed to tackle the challenges of blockchain scalability and sustainability. In this paper, we explore the various consensus mechanisms used in blockchain systems, comparing their strengths, weaknesses, and real-world applications. We aim to provide a comprehensive overview of how these mechanisms function, their role in maintaining security, and their impact on the broader blockchain ecosystem
Ethereum has officially provided a set of system-level cryptographic APIs to enhance smart contracts with cryptographic capabilities. These APIs have been utilized in over 10% of Ethereum transactions, motivating developers to implement various on-chain cryptographic tasks, such as digital signatures. However, since developers may not always be cryptographic experts, their ad-hoc and potentially defective implementations could compromise the theoretical guarantees of cryptography, leading to real-world security issues. To mitigate this threat, we conducted the first study aimed at demystifying and detecting cryptographic defects in smart contracts. Through the analysis of 2,406 real-world security reports, we defined nine types of cryptographic defects in smart contracts with detailed descriptions and practical detection patterns. Based on this categorization, we proposed Crysol, a fuzzing-based tool to automate the detection of cryptographic defects in smart contracts. It combines transaction replaying and dynamic taint analysis to extract fine-grained crypto-related semantics and employs crypto-specific strategies to guide the test case generation process. Furthermore, we collected a large-scale dataset containing 25,745 real-world crypto-related smart contracts and evaluated CRYSOL's effectiveness on it. The result demonstrated that CRySOL achieves an overall precision of 95.4% and a recall of 91.2%. Notably, CRySOL revealed that 5,847 (22.7%) out of 25,745 smart contracts contain at least one crvptographic defect” hiahlighting the prevalence of these defects.