Pierre Schutz, Stanislas Gal, Dimitris Chatzopoulos, Pan Hui
Abstract Peerâtoâpeer (P2P) networks utilize centralized entities (trackers) to assist peers in finding and exchanging information. Although modern P2P protocols are now trackerless and their function relies on distributed hash tables (DHTs), centralized entities are still needed to build file indices (indexing) and assist users in joining DHT swarms (bootstrapping). Although the functionality of these centralized entities are limited, every peer in the network is expected to trust them to function as expected (e.g. to correctly index new files). In this work, a new approach for designing and building decentralized online applications is proposed by introducing DIBDApp. The approach combines blockchain, smart contracts and BitTorrent for building up a combined technology that permits to create decentralized applications that do not require any assistance from centralized entities. DIBDApp is a software library composed of Ethereum smart contracts and an API to the BitTorrent protocol that fully decentralizes indexing, bootstrapping and file storing. DIBDApp enables any peer to seamlessly connect to the designed smart contracts via the Web3J protocol. Extensive experimentation on the Rinkeby Ethereum testnet shows that applications built using the DIBDApp library can perform the same operations as in traditional backâend architectures with a gas cost of a few USD cents.
Yojna Arora, Mr. Vivek Birla, Mr. Rajat Gupta, Mr. Samarth Tiku
Voting is a constitutional part of governmental systems which gives the people of the nation the liberty to express their opinions. The contemporary system constitutes Electronic Voting Machines (EVM) that is a pile-up of data natively and centralized, making it implausible. Since the data is amassed locally over the EVM(s) prior to the election's cessation, it could be hacked. Furthermore, there have been events of "polling booth hijacking" in some regions during the elections. Ethereum blockchain technology addresses concerns regarding integrity, security, and accessibility of current voting systems. Expanding e-voting into Ethereum based blockchain technology is one potential application of the emerging blockchain technology. This paper presents a decentralized, incognito, and limpid e-voting system named "DILE". It will escalate accessibility as the users could cast their votes without paying a visit to the polling booths. DILE makes practical and effective use of Ethereum's blockchain technology and smart contracts for its implementation.
Open access
Internet Traffic Analysis and Secure E-voting
Blockchain Technology Applications and Security
Advanced Steganography and Watermarking Techniques
Abstract Recent years have witnessed a widespread interest in healthcare issues and the search for faster and safer service for patients. Electronic health record was established to provide advanced health services. Researchers seek to provide permanent and simplified ways to monitor patients remotely using remote patient monitors. One of these methods is the use of Internet of Things (IoT) devices, where the healthcare provider can monitor the patient remotely. However, with the current centralized electronic patient record system and increase in number of IoT devices, security and privacy issues have arisen, as some patients may not want to disclose their data, in addition to particular concerns or risks that affect the patientâs life. To reduce these issues, several studies have presented the use of blockchain technology as a trustworthy network of solutions to ensure patient information security and secure the transfer of IoT devicesâ data. In this regard, this research is an attempt to present a new framework that facilitates the storage and transfer of patient data in the blockchain by merging the electronic health record and remote patient monitoring techniques into a single framework using Django. This framework allows the transfer of data from IoT devices to multiple peers, making use of the smart contract provided by the Ethereum platform.
Constant function market makers (CFMMs) such as Uniswap, Balancer, Curve, and mStable, among many others, make up some of the largest decentralized exchanges on Ethereum and other blockchains. Because all transactions are public in current implementations, a natural next question is if there exist similar decentralized exchanges which are privacy-preserving; i.e., if a transaction's quantities are hidden from the public view, then an adversary cannot correctly reconstruct the traded quantities from other public information. In this note, we show that privacy is impossible with the usual implementations of CFMMs under most reasonable models of an adversary and provide some mitigating strategies.
Today, blockchain applications are being developed for a wide variety of areas of activity - from trade and advertising to logistics and social networks. Building an application using a ready-made blockchain on one of the specialized platforms is the most efficient way to develop. The development of a decentralized voting system on one of the most functional blockchain platforms Ethereum with a developed infrastructure for creating smart contracts is being considered.
Solidity, a programming language used to write smart contracts, has been improved since its initial release, but a number of vulnerabilities remain. As smart contracts are usually related to cryptocurrency, these vulnerabilities should be avoided to prevent the risk of financial loss. In this paper, we classify common vulnerabilities of function calls of Solidity programs into three groups and suggest a method to avoid them. The proposed method makes use of Ethereum Virtual Machine as well as Solidity extension. Experimental results with real-world smart contracts show that our method will detect and avoid these vulnerabilities.
The practice of writing smart contracts for the Ethereum blockchain is quite recent and still in development. A blockchain developer should expect constant changes in the security software field, as new bugs and security risks are discovered, and new good practices are developed. Following the security practices accepted in the blockchain community is not enough to ensure the writing of secure smart contracts. The paper aims to study the practice of code cloning among the smart contracts by analyzing two corpora. The first corpus, the "Smart-Corpus", includes smart contracts already deployed in the Ethereum blockchain. The second corpus, the "Open-Zeppelin's Solidity Library", is supervised by a community of developers who constantly take care to increase the security and efficiency of the smart contracts included in the corpus. From the comparative analysis of the corpora, we observe that the smart contracts developers frequently duplicate the code by cloning already existing smart contracts which are not part of the "OpenZeppelin corpus". In particular, we found that 79.1% of smart contracts contain duplicated code and only 18.4% of smart contracts reuse the code by implementing a smart corpus belonging to the OpenZeppelin repository. The paper discusses the advantages and the disadvantages of code duplication in the Ethereum blockchain ecosystem, and suggests to refer to the smart contracts of the OpenZeppelin's Solidity Library. The Ethereum blockchain community can indeed benefit from using the tested code presented in OpenZeppelin's Solidity Library to increase its security.
Recently, we witnessed the advent of blockchain technology. Initially a means of cryptocurrency management, it later evolved into the concept of Smart Contracts, real programs running on the blockchain. The most important ecosystem for the development and distribution of SCs, is currently the Ethereum blockchain through the Solidity programming language. It is enjoying increasing popularity, and several applications in the real world have already been developed [1].
Abstract Ethereum attracts extensive attention due to its distinctive function of smart contract and decentralized applications (Dapps). Since the number of contracts on blockchain has increased vigorously, various security vulnerabilities come up. Researchers rely on static symbolic analysis method at first, and it seems to perform well in the accuracy of vulnerability detection. However, this method requires manual analysis in advance and it needs to traverse all the possible execution paths to find out the vulnerable ones. The deeper the path goes, the more time it costs to detect the contracts. This paper proposes an approach to detect smart contracts vulnerability on blockchain by using machine learning(ML) methods. This approach aims to build a general benchmark for new vulnerability detection in order to reduce the demand of expert manpower. Moreover, the high-speed-performance ML algorithm makes quick detection comes true. As long as we adjust the threshold of the model, it can work as a fast prefilter for the traditional symbolic analysis tools in further improvement of accuracy.
The Ethereum blockchain enables executing and recording smart contracts. The smart contracts can facilitate, verify, and implement the negotiation between multiple parties, also guaranteeing transactions without a traditional legal entity. Many tools supporting the smart contracts development in different areas are flourishing because in Ethereum blockchain valuable assets are often involved. Some of the tools help the developer to find security vulnerabilities via static and/or dynamic analysis or to reduce the Gas fees consumption. Despite the plethora of such tools, there is no tool supporting smart contracts evaluation and analysis via a graphical representation for expert developers.The paper embraces this way to facilitate the developers’ analysis activity, by proposing a graphical representation model to visualize smart contract source code. The paper makes available a tool via a web interface, which accepts the smart contract address as an input and produces a graphical representation of the smart contract as an output. The graphical representation can help developers to better understand the structure of smart contracts and share it with other developers. Moreover, some metrics, such as the relations among smart contracts, are easier to be understood via "spatial" than "tabular" representation. Indeed, representing smart contracts’ metrics via visual representation facilitates the developers, who are used to analyse the source code by directly inspecting it or using other tools that provide the metrics in a table format. Finally, the paper provides detailed data regarding a smart contract to the developers and proposes a graphical representation of the smart contracts without obscuration of details, also highlighting areas of the code that are possibly too big in size and/or too complex via a diagram displaying their connections.
Smart contracts are programs that automatically execute on the blockchain system such as Ethereum. Everybody can write and deploy smart contracts on Ethereum, which causes a large collection of similar contracts via code reuse. In practice, code reuse in smart contract may amplify severe threats like security attacks, resource waste, etc. In this paper, we conduct an empirical study of code reuse in smart contracts for understanding the code reuse practice in the smart contract ecosystem. We first collect 146,452 open-source smart contract projects from Ethereum and then perform a detailed analysis. We first study how often the smart contract projects reuse and then we identify the top reused smart contracts and analyze how the developers revise smart contracts during reuse. Our research suggests that the code reuse in smart contract is quite frequent because about 26% contract code blocks are reused and the average time of reuse is 14.6. And the top reused contracts are almost all related to ERC20 token, which reveals that the current smart contract ecosystem is relatively homogenous. At last, we summarize 7 common types of code revision in smart contracts.
The purpose of this research to test the cryptocurrency, gold and bonds as safe haven assets to Indonesian capital market. The data used in this study is the daily closing data of cryptocurrency, gold (GOLDIDR) and the Indonesian Government Bond Index (IGBI) during the period on August 2015 to December 2018 obtained from Investing, Yahoo Finance, and Spindices. The analysis of the data is used Ordinary Least Square (OLS) and Quantile Regression (QREG). The results found that ethereum can be a safe haven. While bitcoin, ripple, gold, and the Indonesian Government Bond Index (IGBI) cannot be a safe haven for the Indonesian capital market.
Farah Hasin, Tahmina Haque Munia, Nazmun Nahar Zumu, Kazi Abu Taher
This study represents a performance model of Automatic Dependent Surveillance-Broadcast (ADS-B) based ATM system using the security features of Ethereum blockchain technology. ADS-B based modernization of ATM is taking place in different parts of the world. ADS-B and other components of upcoming ATM exchange information through an unencrypted data link. More reliability of ATM on data link services caused fear of cyber threat to many aviation specialist and entities. To overcome the security-related concern of ADS-B based ATM, blockchain can be a promising technology. This paper systematically reviews the key concepts and process of Ethereum and Hyperledger blockchain technology and proposed a model using Ethereum blockchain in ATM comparing different key features of blockchain technology which ensures privacy, authenticity and confidentiality to overcome the cyber threat of ADS-B based ATM system. It is found that the proposed Ethereum based blockchain technique provides the opportunity of establishing secured ADS-B based ATM.
This paper investigates the long memory property of four cryptocurrencies (Bitcoin, Dash, Ethereum, and Litecoin) using the Rescaled Range Hurst analysis. The presence of long memory test for the validity of efficient market hypothesis in the cryptocurrency markets. First, we use traditional long memory tests (Hurst-Mandelbrot R/S, GSP and GPH) to investigate the long memory property in the returns and volatilities of cryptocurrency markets. We find that the volatility shows strong long memory property. Second, we employs the rolling sample approach and calculate time-varying long memory propertty in the returns and volatilities of cryptocurrency markets. Emprical results show that both the volatility and returns of cryptocurrency markets possess the time-varying long memory property. The average Hurst exponents are well above 0.5, indicating the presence of long memory. The long memory property of volatility is stronger than that of returns. The time-varying Hurst exponent values for BTC are significant higher than those of other cryptocurrencies (DASH, ETH, and LTC). This finding indicates that BTC is less efficient than other cryptocurrency markets. Therefore, the presence of long memory is important to predict future cryptocurrency prices, for asset allocation, and for portfolio assessment.
Johannes Rude Jensen, Victor von Wachter, Omri Ross
We document an ongoing research process towards the implementation and integration of a digital artefact, executing the lifecycle of a leveraged trade with permissionless blockchain technology. By employing core functions of the 'Dai Stablecoin system' deployed on the Ethereum blockchain, we produce the equivalent exposure of a leveraged position while deterministically automating the monitoring and liquidation processes. We demonstrate the implementation and early integration of the artefact into a hardened exchange environment through a microservice utilizing standardized API calls. The early results presented in this paper were produced in collaboration with a team of stakeholders at a hosting organization, a multi-national online brokerage and cryptocurrency exchange. We utilize the design science research methodology (DSR) guiding the design, development, and evaluation of the artefact. Our findings indicate that, while it is feasible to implement the lifecycle of a leveraged trade on the blockchain, the integration of the artefact into a traditional exchange environment involves multiple compromises and drawback. Generalizing the tentative findings presented in this paper, we introduce three propositions on the implementation, integration, and implications of executing key business processes with permissionless blockchain technologies. By conducting computational design science research, we contribute to the information systems discourse on the applied utility of permissionless blockchain technologies in finance and beyond.
Bitcoin and Ethereum transactions present some of the largest real-world complex networks that are publicly available for study, including a detailed picture of their time evolution. As such, they have received a considerable amount of attention from the network science community along with analyses from economic and cryptographic perspectives. Among these studies, in an analysis on the early instance of the Bitcoin network, we have shown the clear presence of the preferential attachment, or the ârich-get-richerâ phenomenon. Now, we revisit this question, using a recent version of the Bitcoin network that has grown almost 100-fold since our original analysis. Furthermore, we additionally carry out a comparison with Ethereum, the second most important cryptocurrency. Our results show that preferential attachment continues to be a key factor in the evolution of both the Bitcoin and Ethereum transactoin networks. To facilitate further analysis, we publish a recent version of both transaction networks, and an efficient software implementation that is able to evaluate linking statistics necessary for learn about preferential attachment on networks with several hundred million edges.