In the digital age, ensuring the security and authenticity of documents is paramount due to increasing concerns over document forgery. This paper introduces an advanced system that integrates QR codes with blockchain technology and digital signatures to create smart documents, enhancing security and verification processes. The system uses distributed ledger technology to store document fingerprints securely, ensuring data immutability and supporting real-time verification. Digital signatures within QR codes maintain the integrity and origin of documents, significantly improving upon traditional security methods. Our innovative system, supported by blockchain, provides a decentralized, tamper-proof environment for document storage and validation. A comparative analysis confirms that this system surpasses conventional methods in security, efficiency, and scalability. Extensive testing demonstrates its effectiveness in preventing document fraud, showing significant improvements in document verification times from minutes to seconds, enhanced security through cryptographic algorithms, and high scalability suitable for widespread adoption across various sectors. The system not only advances document management and verification processes but also sets a new standard for secure and trustworthy document handling in the digital era, indicating a major shift towards more reliable and efficient digital document management systems.
Decentralized finance (DeFi) protocols are crypto projects developed on the blockchain to manage digital assets. Attacks on DeFi have been frequent and have resulted in losses exceeding \$77 billion. However, detection methods for malicious DeFi events are still lacking. In this paper, we propose DeFiTail, the first framework that utilizes deep learning to detect access control and flash loan exploits that may occur on DeFi. Since the DeFi protocol events involve invocations with multi-account transactions, which requires execution path unification with different contracts. Moreover, to mitigate the impact of mistakes in Control Flow Graph (CFG) connections, we validate the data path by employing the symbolic execution stack. Furthermore, we feed the data paths through our model to achieve the inspection of DeFi protocols. Experimental results indicate that DeFiTail achieves the highest accuracy, with 98.39% in access control and 97.43% in flash loan exploits. DeFiTail also demonstrates an enhanced capability to detect malicious contracts, identifying 86.67% accuracy from the CVE dataset.
Traditional covert transmission (CT) approaches have been hindering CT application while blockchain technology offers new avenue. Current blockchain-based CT approaches require off-chain negotiation of critical information and often overlook the dynamic updating of session keys, which increases the risk of message and key leakage. Additionally, in some approaches the covert transactions exhibit obvious characteristics that can be easily detected by third-parties. Moreover, most approaches do not address the issue of decreased reliability of message transmission in blockchain attack scenarios. Bitcoin-and Ethereum-based approaches also have the issue of transaction linkability, which can be tackled by Monero-based approaches because of the privacy protection mechanisms in Monero. However, Monero-based CT has the problem of sender repudiation. In this paper, we propose a novel$M$onero-$B$ased CT approach (MBCT), which enables on-chain session key dynamically updating without off-chain negotiation. MBCT can assure confidentiality of on-chain session key, non-repudiation of transmission parties, reliability of message transmission under blockchain attack, unlinkability and obscurity of covert transactions. They are achieved by the three components in MBCT, namely, a sender authentication method, a dynamically on-chain session key updating method and a state feedback method. We implement MBCT in Monero-0.18.1.0 and the experiment results demonstrate its high embedding capacity of MBCT.
In recent years, the usage of digital files has increased and therefore data theft has also increased. Traditional centralized platforms often suffer from vulnerabilities such as single points of failure and lack of transparency. In response, decentralized technologies such as Interplanetary File System (IPFS) and blockchain have emerged as promising solutions. This research study presents a novel decentralized platform built upon the Solana blockchain and IPFS, designed to address the shortcomings of centralized systems. The proposed platform uses the transparency and immutability of the Solana blockchain network to provide a secure ledger for file verification. In addition to verification, the platform facilitates seamless sharing of digital files among users through IPFS, a distributed file system. By utilizing IPFS’s decentralized architecture, data is stored across a chain of nodes, eliminating a single centralized server. It not only enhances data resilience and availability but also mitigates the risk of censorship and data manipulation. This paper proposes using Solana blockchain instead of traditional Ethereum blockchain for better scalability because Solana supports more than 2000 TPS (transaction per second) and reduced network fee.
스마트 컨트랙트는 운영 주체 없이 당사자 간 계약이 이루어지고, 솔리디티를 통해 거래를 코드 형태로 구현 가능하다. 그러나 한번 배포되면 수정 및 삭제가 어렵다는 특성이 있어 기존에 배포된 컨트랙트 내 취약성을 악용하는 공격들이 증가하고 있으며, 피해 규모 또한 상당하다. 본 논문은 정규식 패턴매칭 기반으로 솔리디티 레벨 취약점을 내포한 컨트랙트를 수집, 검출 및 분석하는 자동화된 취약점 분석 프레임워크를 제안한다. 수집단계에서는 최신 이더리움 네트워크에서 발생하는 토큰, 오픈 소스를 대상으로 패턴화한 정규식 매칭을 통해 잠재적인 취약성을 내포한 컨트랙트를 데이터베이스화하여 저장한다. 분석단계에서는 현존하는 스마트 컨트랙트 취약점 분석도구로 수집한 컨트랙트의 오탐 여부 및 분석 성능을 비교 분석한다. 제안한 프레임워크를 통해, 스마트 컨트랙트 생태계에서의 제로데이 취약점 동향 및 분석 도구의 효용성을 평가할 수 있을 것으로 기대한다.
Smart contracts carry complex business logic and have a significant impact on digital assets. Therefore, conducting security audits on smart contracts is crucial to ensure both the correctness of their operation and the security of the assets involved. However, for contracts lacking source code, analysis often requires collaboration with relevant bytecode disassembly tools. While the Move compiler provides disassembly functionality from Move binary bytecode to Move opcodes, the stack-based opcodes are not conducive to manual analysis. Hence, we propose MoveHelper, a disassembly tool specifically designed for Move smart contract bytecode. It transforms Move bytecode into a register-based expression more suitable for manual reading. MoveHelper supports the generation of the module's functions’ signature, control flow graphs within functions, function call graphs, and other information to better assist auditors in understanding the contract. We demonstrate how MoveHelper can be used to analyse the bytecode of a non-open-source Move contract using a simple example, showcasing MoveHelper's valuable assistance in auditing Move contract bytecode.
The number of artistic projects which engage with simulated realities, immersive story-telling and virtual world-building has surged over the past few years. These creative explorations of ‘world-building’ have been in part propelled by advances in blockchain technology and the development of technical standards for non-fungible tokens. This chapter focuses on the increasing legal and ethical complexities of artist-led world-building projects. It maps out the contractual relationships of typical stakeholders in such projects, and traverses through the web of copyright-protected works and other subject matter that world-building can be built upon.
Tor's original design does not have an incentive mechanism but relies on volunteers to maintain their relay nodes for free, eventually leading to the current situation of centralization and lack of relay nodes. Current incentive schemes designed for Tor generally rely on centralized roles, thus presenting a risk of destroying Tor's anonymity. This paper proposes R2E, a decentralized scheme that treats Tor relay services as cryptocurrency mining and rewards the relays with generated tokens while addressing the challenge of how to design decentralized protocols that quantify workload while ensuring fairness and anonymity. We construct the Proof-of-Relay protocol in R2E that enforces random circuit selection, limits the number of nonce attempts, and exploits one-time keys and zero-knowledge proofs to protect participants' identities. We implemented a prototype of R2E based on Ethereum and conducted the trial operation and several confirmation experiments involving$2^{20}$clients,$2^{10}$to$2^{16}$nodes, and 256 circuits for each client to demonstrate its applicability. Analysis and experimental results show that R2E can effectively ensure the anonymity of participants' identities and fairness of incentive allocation while showing good performance in overhead and scalability, making it easy to be quickly applied in practical deployments.
Haoxian Chen, Lan Lu, Brendan Massey, Yuepeng Wang · 5 authors
Smart contracts manage a large number of digital assets nowadays. Bugs in these contracts have led to significant financial loss. Verifying the correctness of smart contracts is, therefore, an important task. This paper presents an automated safety verification tool, DCV, that targets declarative smart contracts written in De-Con, a logic-based domain-specific language for smart contract implementation and specification. DCV proves safety properties by mathematical induction and can automatically infer inductive invariants using heuristic patterns, without annotations from the developer. Our evaluation on 23 benchmark contracts shows that DCV is effective in verifying smart contracts adapted from public repositories, and can verify contracts not supported by other tools. Furthermore, DCV significantly outperforms baseline tools in verification time.
Abstract: As a consequence of mass unemployment being the byproduct of COVID-19, people around the world discovered investment in cryptocurrency as a means to tackle their declining financial condition. Subsequently, the prominence of Ethereum as a platform for crypto transactions also gave rise to fraudulent transactions. The need to detect these frauds exists even today. This study proposes a token-based approach to detect fraud in Ethereum transactions incorporating the ERC20 standard, by employing machine learning techniques. After cleaning and preprocessing of the dataset, the transaction data was fed to Random Forest (RF), AdaBoost, Extra Trees (ET), Gradient Boosting (GB) and Extreme Gradient Boosting (XGB) classifiers in search of the most suitable model for fraud detection. Meticulous evaluation revealed that RF, ET and XGB classifiers yielded the highest accuracy of 95%. The proposed token-based approach hence presents a novel and efficient solution for fraud detection, with room for improvement and scalability.
Part III is central to this book and is specifically dedicated to the standardization approach of ETSI PDL [1] . All chapters in this part of the book exclusively detail the various contributions made by the ETSI PDL Industry Specification Group (ISG) over the years, ever since the inception of the ISG in November 2018. Note that copyright permissions were obtained from ETSI on all content reproduced in this book. In this chapter, we focus on applications which profit from using per-missioned distributed ledgers (PDLs) rather than a non-blockchain or public-ledger implementation. We also discuss important governance issues which need to be addressed and adhered to if applications were to run successfully with PDLs.
Kushal Patil, Asit Khobragade, Aditya Awati, Bharati Nikose
This paper presents the Blockchain-Based Decentralised File Sharing System (BBDFS),also called DecentraShare a complete, production-ready system that solves thethree fundamental weaknesses of cloud-based le sharing: lack of privacy, absence oftamper evidence, and susceptibility to censorship. The system integrates three tech-nologies: the InterPlanetary File System (IPFS) for peer-to-peer distributed storage,Ethereum-compatible smart contracts deployed on the Polygon Proof-of-Stake net-work for programmable access control, and AES-256-GCM symmetric encryptionperformed entirely inside the user's browser via the Web Crypto API.When a le is uploaded, it is encrypted locally before leaving the user's device the backend server never receives plaintext content. A content identier (CID)returned by IPFS is anchored on the blockchain alongside a SHA-256 integrity hash.Three Solidity 0.8.19 smart contracts FileRegistry.sol, AccessControl.sol,and IntegrityLedger.sol manage ownership, per-wallet permission grants andrevocations, and a chained integrity audit log respectively. A stateless Node.js 20/ Express 4.18 backend exposes 19 REST API endpoints, while real-time Server-Sent Events (SSE) deliver access notications to recipients within a median of 18milliseconds.Performance evaluation over 1,500 independent le-transfer trials demonstrates amedian upload latency of 2.58 seconds for 1MB payloads, on-chain conrmationwithin 2.1 seconds on Polygon, and 99.97% data retrievability under normal operat-ing conditions. Gas optimisation reduced smart contract deployment cost by 46.7%over naive reference implementations. Comparative analysis against Storj, Filecoin,Swarm, and AWS S3 conrms that BBDFS is the only evaluated system simultane-ously providing end-to-end encryption, on-chain access control, and tamper-evidentauditing.
Secure and efficient communication between vehicles is a prerequisite for providing intelligent services in the Internet of Vehicles (IoV). The openness and high mobility of the IoV communication environment impose stringent requirements on privacy and efficiency. Hence, we propose an efficient hybrid anonymous message authentication scheme for the IoV environment. The scheme is based on utilizing discrete logarithm zero-knowledge proofs and combines global pseudo identity for communication between network entities and local pseudo identity for communication within a domain, aiming to achieve efficient and authenticated secure communication among vehicles with conditional privacy protection. Additionally, through the design of a verification tuple, the message receiver can authenticate the sender's identity upon receiving the message, addressing security vulnerabilities arising from the inability of traditional schemes to promptly revoke malicious vehicles. The performance analysis indicates that the scheme, in comparison to other similar solutions, successfully mitigates the drawback of high time expenditure in traditional message authentication schemes, demonstrating its efficiency and applicability, meeting the security and efficiency requirements of communication in the IoV environment. The feasibility analysis reveals that the total delay introduced by the scheme is significantly lower than the communication duration, meeting the requirements of high-speed dynamic scenarios in the Io V.
The advent of large language models (LLMs) has marked a significant milestone in the realm of artificial intelligence, with their capabilities often matching or surpassing human expertise in various domains. Among these achievements, their adeptness in translation tasks stands out, closely mimicking the intricate and preliminary processes undertaken by human translators to ensure the fidelity and quality of the translated content. Despite the advancements in utilizing LLMs for translating programming code across different languages, the domain of smart contract translation, particularly into languages not previously encountered by the LLM, remains largely unexplored. In our research, we present a pioneering approach, SolMover, which harnesses the synergy of two distinct LLMs within a unified framework. This framework is designed to grasp coding principles and apply this understanding to the translation of code into an unfamiliar language. Our study delves into the capacity of LLMs to mimic human learning processes, offering an in-depth evaluation of our methodology for converting smart contracts written in Solidity to Move, a language with limited resources. The framework employs one LLM to decipher coding conventions for the new language, creating a blueprint for the second LLM, which, lacking planning abilities, possesses coding expertise. The empirical evidence from our experiments suggests that SolMover substantially enhances performance compared to gpt-3.5-turbo-1106, and achieves superior results over competitors such as Palm2 and Mixtral-8x7B-Instruct. Additionally, our analysis highlights the efficacy of our bug mitigation strategy in elevating code quality across all models, even outside the SolMover framework.
Koteswara Rao Kodepogu, Mudigonda Dharmateja, J. M. S. V. Ravi Kumar, Muraboina Hari Pavan Gopi Krishna · 5 authors
In this exploration, our paper delves into the intricate implementation of robust authentication and transaction management within educational blockchain systems.Our project showcases a commitment to privacy and integrity, safeguarding interactions through advanced cryptographic techniques.The multifaceted capabilities of blockchain technology are showcased through the seamless maintenance of student records, the facilitation of secure voting processes, and the optimization of token transfers, collectively contributing to an ecosystem characterized by enhanced security, transparency, and efficiency.Our study uncovers insights into blockchain's transformative potential in education, redefining paradigms by introducing security measures and transparency to student-admin interactions.We highlight the successful implementation of blockchainbased authentication and transaction management systems, leading to enhanced educational processes.Additionally, we briefly outline our research design and methodology, emphasizing the rigorous approach to exploring blockchain applications.
Classical double entry accounting has provided the foundation for accounting within the firm for many centuries. The digitally signed receipt, an innovation from financial cryptography, gives rise to exactly duplicated entries for each of 3 parties or roles, the outcome of which we call triple entry accounting. This presents a challenge to double entry bookkeeping by expanding the use of accounting from inside firms to activity between the firms. When applied to digital cash and digital assets, the approach of negotiating a single signed receipt between parties lowers costs by delivering reliable data to support stronger accounting, and makes much stronger governance possible in a way that positively impacts on the future needs of corporate and public accounting. By turning the opinions of firm owners into facts agreed between firms, triple entry bookkeeping creates the bulletproof accounting layer to support aggressive uses and adversarial users such as are found in the Bitcoin system of transactions.
Daniel Melero Martinez, Mohammed El‐Hajj, Dipti Kapoor Sarmah
Motivated by the need for an equitable and decentralized music streaming service, this paper presents a comprehensive solution focused on ensuring fair compensation for creators of musical content. It is anchored in five critical design principles: Security, scalability, anonymity, legality, and user incentivization. The implementation utilizes the IoTA distributed ledger technology to align closely with these essential criteria. Thereby offering valuable insights on the inherent challenges and possibilities of this innovative technology. The proposed solution consists of four primary components: a user-friendly mobile application enabling intuitive music playback, a distribution software that simplifies the dissemination of music, a website facilitating music management, and a smart contract that forms the decentralized foundation for handling payments and storing metadata. The study also incorporates a detailed analysis of the platform's scalability, focusing on its ability to accommodate an expanding user base and increasing data volume, ensuring sustained performance and security. Significant strides have been made in designing user-centric interfaces for decentralized music streaming, establishing a robust validation system to safeguard intellectual property rights, and pioneering novel strategies to optimize music distribution within the platform.
Recently, smart contract, a code script that autonomously runs on blockchains, has facilitated numerous decentralized applications and accelerated the boost of the Web3 ecosystem. However, the current underutilization of smart contracts and a large number of duplicate smart contracts have caused significant challenges to blockchains. Considering the reusability and composability of smart contracts, we can innovatively address these issues, promote diversity for decentralized projects, and increase efficiency for Web3 developers. In this tutorial paper, we first propose a novel service-oriented paradigm: Smart Contracts as a Service (SCaaS), then analyze the feasibility of SCaaS, delve into its application scenarios and finally explore the challenges and limitations and propose the potential solutions accordingly.
Marco Marcozzi, Ernestas Filatovas, Linas Stripinis, Remigijus Paulavičius
The consensus protocol plays a vital role in the performance and security of a specific Distributed Ledger Technology (DLT) solution. Currently, the traditional classification of consensus algorithms relies on subjective criteria, such as protocol families (Proof of Work, Proof of Stake, etc.) or other protocol features. However, such classifications often result in representatives with strongly different characteristics belonging to the same category. To address this challenge, a quantitative data-driven classification methodology that leverages machine learning—specifically, clustering—is introduced here to achieve unbiased grouping of analyzed consensus protocols implemented in various platforms. When different clustering techniques were used on the analyzed DLT dataset, an average consistency of 78% was achieved, while some instances exhibited a match of 100%, and the lowest consistency observed was 55%.
This paper introduces a novel approach to manage collections of artifacts through smart contract access control, rooted in on-chain role-based property-level access control. The proposed smart contract facilitates the lifecycle of these artifacts including allowing for the creation, modification, removal, and historical auditing of the artifacts through both direct and suggested actions. This method introduces a collection object designed to store role privileges concerning state object properties. User roles are defined within an on-chain entity that maps users' signed identities to roles across different collections, enabling a single user to assume varying roles in distinct collections. Unlike existing key-level endorsement mechanisms, this approach offers finer-grained privileges by defining them on a per-property basis, not at the key level. The outcome is a more flexible and fine-grained access control system seamlessly integrated into the smart contract itself, empowering administrators to manage access with precision and adaptability across diverse organizational contexts. This has the added benefit of allowing for the auditing of not only the history of the artifacts, but also for the permissions granted to the users.
Smart contracts, as a type of contract technology on the blockchain, can effectively address many shortcomings of traditional contract systems in digital environments, including opaque contract execution, regulatory difficulties, and low dispute resolution efficiency, provide publishers with a more