Skip to Content
  • Article
  • Open Access

18 December 2025

Blockchain Variables and Possible Attacks: A Technical Survey

and
1
Department of Computers and Information Technology, Politehnica University of Timisoara, 2 V. Parvan Blvd, 300006 Timisoara, Romania
2
Department of Computers and Information Technology, Faculty of Electrical Engineering and Information Technology, University of Oradea, 410087 Oradea, Romania
*
Authors to whom correspondence should be addressed.

Abstract

Blockchain technology has rapidly evolved as a cornerstone of decentralized computing, transforming how trust, data integrity, and transparency are achieved in digital ecosystems. However, despite extensive adoption, significant gaps remain in understanding how key blockchain variables, such as block size, consensus mechanisms, and network latency, affect system vulnerabilities and susceptibility to cyberattacks. This survey addresses this gap by combining qualitative and quantitative analyses across multiple blockchain environments. Using simulation tools such as Ganache and Bitcoin Core, and reviewing peer-reviewed studies from 2016 to 2024, the research systematically maps blockchain parameters to cyberattack vectors including 51% attacks, Sybil attacks, and double-spending. Findings indicate that design choices like block size, block interval, and consensus type substantially influence resilience against attacks. The Blockchain Variable Quantitative Risk Framework (BVQRF) introduced here integrates NIST’s cybersecurity principles with quantitative scoring to assess risks. This framework represents a novel contribution by operationalizing theoretical security constructs into actionable evaluation metrics, enabling predictive modeling and adaptive risk mitigation strategies for blockchain systems.

1. Introduction

Blockchain technology enables multiple participants to maintain a shared, tamper-resistant ledger without centralized control. It underpins applications such as cryptocurrencies, supply chain systems, voting mechanisms, and decentralized finance (DeFi). Its transparency and trustless design offer significant advantages, yet vulnerabilities persist due to flaws in configuration and protocol design.
Empirical studies, such as “Secure framework for land record management using blockchain technology” [1] and “A novel permissioned blockchain approach for scalable and privacy-preserving IoT authentication” [2], demonstrate that design weaknesses can expose networks to critical threats. Ref. [3] emphasize, blockchain’s potential to enhance transparency, integrity, and accountability is counterbalanced by its susceptibility to exploitation if governance and technical safeguards are insufficient.
Core variables including block size, creation interval, consensus mechanisms, and encryption methods directly affect blockchain performance and security [4]. Poorly configured parameters can enable attacks or degrade system resilience [5]. Major platforms such as Bitcoin, Ethereum, and Polkadot adjust these parameters to balance scalability and protection [6]. As Nakamoto observed, even a successful attacker cannot arbitrarily alter transactions or create new funds.
This study analyzes how blockchain design variables influence security risks and proposes strategies to mitigate them, emphasizing that a systematic understanding of these parameters is essential for developing resilient distributed ledger systems.

Objectives and Methodology

The main objectives of this study are to
  • Identify and categorize key blockchain design variables.
  • Map these variables to major attack vectors.
  • Analyze how variable manipulation influences vulnerability through empirical examples and simulations.
  • Propose mitigation strategies and design recommendations for future blockchain systems.
A mixed-methods approach is employed, combining qualitative analysis through a literature review of peer-reviewed studies and documented cyberattacks (2016–2024) and quantitative analysis via data modeling and visualization in simulated blockchain environments [7,8,9,10,11,12].
Simulation tools include Ganache, a private Ethereum testing framework, and Bitcoin Core [13], which validates and maintains consensus for the Bitcoin network [14]. An example of shared agreement (consensus) mechanisms is provided in Table 1.
Table 1. Example of shared agreement (consensus).
The case study examines blockchain attacks and their financial impact between 2016 and 2024 using the following tools:
-
Ganache is a private Ethereum environment used for controlled simulation of blockchain transactions.
-
Bitcoin Core validates transaction chains through consensus, ensuring only legitimate blocks are accepted while enhancing decentralization, privacy, and user security.
-
Python 3.12.3 with Matplotlib 3.9.2 used for data modeling and visualization [15].
-
Mythril and Slither are Ethereum smart contract analysis tools. Mythril 0.24.2 applies symbolic execution and taint analysis to detect vulnerabilities such as overflow and reentrancy, while Slither 0.10.4 performs static code analysis and identifies optimization opportunities within frameworks like Truffle and Hardhat. A schematic representation of the Slither algorithm is shown in Figure 1.
Figure 1. Representation of the Slither algorithm.
A schematic representation of the Slither algorithm is shown below:

2. Literature Review

Existing literature extensively explores blockchain’s technical evolution [16], yet limited attention is given to quantitative modeling of variable-specific vulnerabilities. Refs. [9,17] categorize security threats across consensus, data, and network layers, while Ref. [18] emphasize architectural dependence of attack surfaces. However, most prior studies adopt qualitative perspectives, leaving the relationship between blockchain configuration variables and attack likelihoods underexplored [19,20,21,22,23]. This study bridges that gap by developing a unified analytical framework, the BVQRF, which integrates prior security taxonomies with empirical case studies (from 2016 to 2024). By synthesizing research from both academic and applied contexts, this review establishes the theoretical foundation for the quantitative analysis presented herein.

3. Blockchain System

Blockchain, also known as Distributed Ledger Technology (DLT), enables digital storage and exchange of assets through interconnected data blocks. Each block securely links to the previous one, creating an immutable chain resistant to tampering. The technology ensures transparency, decentralization, and digital document integrity.
Unlike conventional systems where files are copied or transferred, blockchain distributes synchronized data across participants, preventing unauthorized alteration. As noted by [24] blockchain is “a method of recording information that makes it difficult or impossible to change, hack, or manipulate.”
Each block contains four core components:
-
Previous hash which links to the preceding block.
-
Transaction details that records processed transactions.
-
Nonce which is a random cryptographic number ensuring uniqueness.
-
Block hash which is a unique 256-bit identifier generated via hashing.
Mining involves solving cryptographic puzzles to validate transactions through proof-of-work, as described by [25]. The general structure of a blockchain [26] is illustrated in Figure 2. The first miner to find the correct hash receives a reward, reinforcing the network’s integrity and consensus.
Figure 2. The blockchain structure.

3.1. Types of Blockchain

Blockchain networks [25] include public, private, consortium, and hybrid models, each differing in transparency, control, and scalability (Figure 3).
Figure 3. Types of blockchain.
Blockchain networks are classified into several types, each designed for specific purposes and use cases(Table 2).
Table 2. Blockchain types and access levels.
The pie chart in Figure 4 illustrates the distribution of blockchain types according to access level and governance model.
Figure 4. Distribution of Blockchain.

3.2. Properties of a Blockchain

Blockchain is a transformative technology offering decentralization, security, transparency, and immutability. As it evolves, new applications will continue to emerge. The following key features highlight its significance(Table 3). The core properties of blockchain technology are summarized in Figure 5.
Table 3. Properties of Blockchain.
Figure 5. Properties of blockchain.
Blockchain is crucial for transforming the banking industry. As the digital era evolves, banks must adapt quickly, and blockchain offers a secure, efficient, and cost-effective way to process transactions and improve operations.

4. Key Blockchain Variables

Blockchain records and shares digital information through immutable transaction logs [27]. Its key variables include
(a)
Block size which determines data capacity per block. Larger sizes increase throughput but also propagation delays and vulnerability to forking or selfish mining. Bitcoin addressed this with SegWit and the Lightning Network.
(b)
Block interval is the time between block creations affects transaction speed and security. Short intervals raise fork risks, while long ones slow confirmations.
(c)
Consensus algorithm defines network security and efficiency.
PoW—secure but energy-heavy and prone to 51% attacks.
PoS—energy-efficient but vulnerable to stake centralization and long-range attacks [28,29].
DPoS—fast but relies on few validators, risking collusion.
(d)
Network topology and latency. The peer-to-peer structure and communication delays impact consensus reliability. Poor connectivity can enable eclipse attacks by isolating nodes.

4.1. Blockchain Design Variables and Their Effects

Blockchain variables include block size, block interval, consensus mechanism, network topology, node identity system, and smart contract layer, each influencing security differently. Their impacts and platform examples are summarized in Table 4.
Table 4. Key Blockchain variables and their effects.

4.2. Blockchain Layers

Blockchain has evolved beyond cryptocurrencies into a transformative technology across industries. Its layered architecture ensures scalability, security, and interoperability, with each layer serving a distinct role:
(a)
Network layer
Forms the foundation of Distributed Ledger Technology (DLT) through a decentralized P2P network. Full nodes store the entire ledger and enforce consensus, while lightweight nodes handle transactions. Network size, peer discovery, and latency affect performance.
(b)
Consensus layer
Ensures all nodes agree on the ledger’s state. Main types include proof-based systems like Proof of Work (PoW), which secures Bitcoin but is resource-intensive, and Practical Byzantine Fault Tolerance (PBFT), offering faster, less energy-demanding alternatives.
(c)
Data layer
Stores and secures blockchain data using blocks, hashes, Merkle trees, and timestamps. These structures maintain integrity and resistance to tampering, though they can be energy and time-intensive.
While Merkle trees ensure secure and decentralized transactions, they can be energy-intensive and slow to process because each transaction’s hash must be repeatedly computed and verified through multiple hierarchical levels of the tree. This recursive hashing requires substantial computational power, especially in large-scale blockchains like Bitcoin, where thousands of hashes are generated and validated per block. Moreover, any change to a single transaction triggers recalculation of all parent hashes up to the Merkle root, increasing time complexity and energy consumption. The verification process, while essential for data integrity, thus contributes to latency and reduced throughput in decentralized networks.
(d)
Execution layer
Hosts runtime environments (e.g., virtual machines) for executing smart contracts, self-enforcing programs that establish trust and automate transactions across nodes.
(e)
Application layer
Connects decentralized applications (dApps) to the blockchain. It powers cryptocurrencies, wallets, and smart contracts, and extends to IoT-based systems like smart cities, healthcare, and agriculture.
A layered architecture of modern blockchain systems is depicted in Figure 6.
Figure 6. Blockchain layers.

4.3. Platforms of Blockchain

Blockchain protocols define how data is recorded, shared, and secured, forming the foundation of blockchain networks. Platforms built on these protocols provide tools for developing and deploying decentralized applications (dApps) [30]. While protocols establish core functions, platforms extend them to enable practical applications. The choice of platform depends on the project’s needs [31].
(a)
Hyperledger Fabric
A modular, permissioned blockchain supporting private transactions and customizable consensus. It offers high modularity, low-latency finality, multi-language smart contracts, and queryable data [30].
(b)
Hyperledger Sawtooth
An open-source platform using Proof of Elapsed Time (PoET) consensus, developed by Hyperledger and the Linux Foundation. It provides flexibility through the Sawtooth Library and Splinter networking [31].
(c)
Ethereum
A public blockchain platform for decentralized applications and smart contracts. It supports tokenization, rapid deployment, and a large developer community, operating mainly on a Proof-of-Work system [30].

Emerging Blockchain Protocols with Advanced Cryptographic and AI Techniques

Recent blockchain research integrates elliptic curve cryptography (ECC) and artificial intelligence (AI), especially neural networks, to improve fairness, resilience, and efficiency. These advances strengthen consensus and communication layers, mitigating threats like Sybil and 51% attacks through adaptive cryptography and AI-based detection.
(a)
Neural Fairness Blockchain Protocol using Elliptic Curve Lottery
Ref. [32] proposed a protocol combining ECC and neural networks for fairness-driven consensus in permissionless blockchains (https://www.mdpi.com/2227-7390/10/17/3040) (accessed on 20 November 2025).
An ECC-based lottery securely selects consensus committee members, reducing centralization risks, while neural networks validate transactions and detect anomalies to prevent double-spending [32]
(b)
Neural Networks and ECC for Secure Communication:
Ref. [33] integrated neural networks with ECC to enhance secure peer-to-peer communication in blockchain systems (https://arxiv.org/abs/2407.08831) (accessed on 20 November 2025).
Neural models manage asymmetric cryptography to protect data exchanges and resist eavesdropping, while multiple ECC curves and lightweight design suit IoT applications [33].
These protocols demonstrate how ECC and AI can reinforce blockchain security and fairness, though further testing is needed to ensure scalability and robustness.
The role of elliptic curve cryptography in the two emerging AI-enhanced protocols is represented in Figure 7.
Figure 7. Elliptic curve cryptography in emerging blockchain protocols.
P1 = Traditional ECC-based asymmetric key generation and signing
P2 = Neural network layer used for transaction validation and anomaly detection
P3 = Hybrid consensus committee selection via ECC lottery combined with neural fairness scoring

6. Mapping Blockchain Variables to Attack Vectors

6.1. Potential Vulnerabilities

Blockchain technology offers trust, transparency, and security in digital transactions but remains vulnerable when key variables such as transaction data, consensus mecha-nisms, cryptographic keys, or network con-ditions which are manipulated, enabling attacks that compromise its integrity and reliability. Potential vulnerabilities and their mapped attack vectors [64] are detailed in Table 7.
Table 7. Potential vulnerabilities and mapped attack vectors.
To assess how variable manipulation affects a system’s vulnerability, we examine blockchain as an example sensitive to variables like transaction data, cryptographic keys, consensus mechanisms, and timestamps. In such systems, altering key variables can undermine integrity and increase attack susceptibility.

6.2. Variable Manipulation in Blockchain

The decentralized nature of blockchain eliminates central control but also introduces risks. Since it depends on variables like transaction data, consensus mechanisms, and timestamps to maintain a secure ledger, manipulation of these elements can compromise system integrity. Altering transaction data can enable double-spending, modifying consensus rules may lead to 51% attacks, and changing timestamps can reorder transactions, creating new vulnerabilities. Understanding these interactions helps strengthen blockchain resilience against exploits.
  • Example 1: Double-spending (Transaction data)
A double-spending attack occurs when an attacker sends the same funds twice (e.g., Andrew sends 100 BTC to both Jane and Adrian). If both transactions are confirmed by different miners, the same funds are spent twice, undermining trust and value stability.
  • Example 2: Consensus manipulation (PoS control)
In Proof of Stake (PoS) systems, voting power depends on stake size. If an attacker gains majority control, they can approve fraudulent transactions or block legitimate ones executing a 51% attack that compromises network trust.
  • Example 3: Timestamp manipulation
Each block’s timestamp maintains transaction order. If altered, an attacker can reorder blocks to make earlier transactions appear invalid or already spent, enabling double-spending and network confusion.
The effect of timestamp manipulation on transaction ordering is demonstrated in Figure 10.
Figure 10. Impact of time stamp manipulation on blockchain order.
Visualization:
  • Block 1: Transaction A → Andrew to Jane (12:00 PM)
  • Block 2: Transaction B → Andrew to Adrian (12:01 PM)
Attacker manipulates Block 2’s timestamp to 11:59 a.m., making it appear earlier than Block 1 creating confusion about transaction order and enabling double-spending vulnerabilities.
Empirical Example: 51% Attack on Bitcoin (PoW)
In Proof of Work systems like Bitcoin, an attacker controlling over 51% of total hash power can rewrite the blockchain.
Steps:
-
Gain majority mining power.
-
Mine blocks faster than the rest of the network.
-
Publish a longer, alternative chain.
-
Network accepts the attacker’s chain, invalidating the original.
Impact: Enables transaction reversal, double-spending, and widespread network disruption.
A graphical representation of a blockchain fork during a successful 51% attack is provided in Figure 11.
Figure 11. Blockchain fork during 51% attack (aligned transactions).
Graphical representation of attack susceptibility:
Before attack:
Blocks process sequential transactions (A → B → C → D).
During attack (51% Control):
The attacker forks from Block 3, mines faster, and creates a longer chain.
Original: Block 1 → Block 2 → Block 3 → Block 4
Attacker: Block 1 → Block 2 → Block 3 → Block 5 → Block 6
After attack:
The network adopts the attacker’s longer chain, invalidating previous transactions.
Variable manipulation of transaction data, consensus rules, or timestamps creates major vulnerabilities like double-spending and 51% attacks. Robust consensus design, cryptographic proofs, and timestamp validation are essential to preserve blockchain integrity.

7. Mitigation Techniques and Design Guidelines

To enhance blockchain resilience, developers should align consensus mechanisms with threat models and application needs. Optimizing block size and timing improves capacity and security, while peer diversity and latency controls help prevent eclipse attacks. Formal smart contract verification and economic incentives can deter Sybil and 51% attacks [66]. Emerging solutions like zero-knowledge proofs, layer-2 scaling, and decentralized identity systems further strengthen scalability and security.
Key strategies:
(a)
User education—promote phishing awareness, private key best practices, and hardware wallet use for secure storage.
(b)
Strengthened protocols—employ multi-signature wallets, decentralized identity frameworks, and conduct regular smart contract audits to minimize vulnerabilities.

7.1. Best Practices and Mitigation

Ensuring blockchain security and resilience demands comprehensive safeguards to maintain trust, performance, and sustainability as adoption grows across critical sectors. Recommended best practices and mitigation strate-gies are consolidated in Table 8.
Table 8. Best practices and mitigation strategies.

7.2. Risk Evaluation

(a)
Blockchain security framework
Ref. [4] in “Classification of threats and countermeasures of cloud computing” outlines a layered defense model addressing threats like data breaches, insecure APIs, and DoS attacks via encryption, IAM, segmentation, and monitoring. Adapting this framework to blockchain allows researchers to link design variables, such as block size, consensus type, and node identity, to specific vulnerabilities (e.g., weak consensus leading to Sybil or 51% attacks), thereby improving the resilience of decentralized systems.
(b)
Data encryption
Encryption safeguards private keys, transactions, and smart contract data using public-key cryptography (e.g., elliptic curve cryptography). It protects data both at rest and in transit, reducing breach and tampering risks.
(c)
Identity and access management (IAM)
IAM verifies and controls access to nodes, wallets, and contracts through decentralized identity systems and zero-knowledge proofs. For example, Ethereum uses private keys for wallet-based authentication. IAM prevents unauthorized actions and insider threats.
(d)
Network segmentation
Segmentation isolates nodes or layers to limit attack spread and enhance privacy. In Hyperledger Fabric, channels create private subnets for participants, preventing network-wide breaches and supporting scalability.
(e)
Monitoring protocols
Real-time monitoring tools (e.g., block explorers, IDS) track anomalies like double-spending or Sybil attacks. Continuous observation ensures auditability and rapid threat response, preserving network integrity.
(f)
Layered defense strategy
Combining encryption, IAM, segmentation, and monitoring builds a multi-layered defense that reduces attack surfaces and strengthens blockchain resilience.
(g)
Quantitative risk assessment
Risk metrics such as Annualized Loss Expectancy (ALE = SLE × ARO) help prioritize mitigation.
Example: A 51% attack on a mid-sized PoW network may have SLE ≈ $500 M and ARO = 0.1, yielding ALE = $50 M. Decentralization measures can cut ARO by 80%, reducing ALE to $10 M [29].
CVSS scoring (0–10) ranks vulnerabilities by impact; DAO reentrancy bugs rate 9.8 (Critical), underscoring the need for audits [26].

7.3. Cyber Security Risk and Threats

The NIST Cybersecurity Framework offers a structured method for assessing and mitigating IT security risks through its five core functions: identify, protect, detect, respond, and recover. Aligning assets, threat intelligence, and risk management with NIST standards helps organizations anticipate and minimize cyberattacks, ensuring resilience and compliance across industries.
Research by [9] identifies human vulnerabilities, errors, negligence, poor training, and social engineering as leading threats, with 12 documented cases in critical infrastructure.
According to [10], DPRK-linked groups stole $340.4 million in cryptocurrency in 2023, down from $1.65 billion in 2022, reflecting a decline but underscoring the persistence of advanced state-sponsored cyberattacks. Total value stolen in cryptocurrency hacks and money-laundering activities by DPRK-linked actors (2017–2024) is shown in Figure 12.
Figure 12. Total value stolen in cryptocurrency hacks and money-laundering activities by DPRK-linked actors (2017–2023) (own chart compiled from Chainalysis) [67].

7.4. Basic Framework: Blockchain Variable Quantitative Risk Framework

The NIST Cybersecurity Framework manages risks through five core functions: identify, protect, detect, respond, and recover. Integrating these with the proposed Blockchain Variable Quantitative Risk Framework (BVQRF) enhances blockchain-specific risk analysis by mapping NIST’s qualitative functions to variables such as block size, consensus mechanisms, and network topology. The BVQRF incorporates quantitative metrics to evaluate vulnerabilities like 51% attacks, Sybil attacks, and smart contract exploits, combining NIST’s qualitative structure with data-driven precision. The proposed Blockchain Variable Quantitative Risk Framework (BVQRF) is presented in Table 9, mapping NIST functions to blockchain variables and quantitative risk metrics
Table 9. Blockchain variable quantitative risk framework.
The Blockchain Variable Quantitative Risk Framework (BVQRF) introduces a variable-centric, predictive approach to modeling blockchain risks. By quantifying variable impacts, e.g., increasing node diversity can raise the eclipse attack mitigation factor from 0.75 to 0.9, reducing risk by 60% [8,46] BVQRF enhances security analysis through simulation tools like Ganache. Future research could automate BVQRF’s scoring with AI using real-time data (e.g., Chainalysis, Hexagate), test it on hybrid blockchains (e.g., Polkadot), and integrate human vulnerability metrics [9]. This mapping operationalizes NIST’s qualitative framework into a quantitative, data-driven blockchain security model.

8. Conclusions

This study advances blockchain security by introducing the Blockchain Variable Quantitative Risk Framework (BVQRF)—a novel, data-driven model that links qualitative cybersecurity theory with quantitative risk assessment. Using simulations and case data (2016–2025), BVQRF demonstrates that key blockchain variables—such as block size, interval, consensus design, and network topology—directly influence attack susceptibility, including 51% attacks, Sybil exploits, and smart contract vulnerabilities.
Findings show that optimizing variable configurations can reduce attack probability by up to 60%, notably through increased node diversity [8,46]. Quantitative analysis estimates an ALE of $50 million for mid-sized PoW networks, validated by incidents like Ethereum Classic and the 2025 Monero attack. Integrating NIST’s cybersecurity functions (identify–recover) with blockchain metrics, BVQRF transforms qualitative guidance into actionable, measurable security practices.
Future work should apply AI-driven real-time scoring to automate BVQRF assessments, test the framework across hybrid blockchains (e.g., Polkadot), and integrate human risk factors [9]. By quantifying the impact of blockchain design choices, BVQRF offers a predictive, scalable model for strengthening resilience and guiding secure blockchain development across critical industries.

Author Contributions

Conceptualization, A.A.B. and D.E.P.; methodology, A.A.B.; software, A.A.B.; validation, A.A.B. and D.E.P.; formal analysis, A.A.B.; investigation, A.A.B.; resources, A.A.B. and D.E.P.; data curation, A.A.B.; writing—original draft preparation, A.A.B.; writing—review and editing, A.A.B. and D.E.P.; visualization, A.A.B.; supervision, D.E.P.; project administration, D.E.P.; funding acquisition, D.E.P. All authors have read and agreed to the published version of the manuscript.

Funding

The article processing charge (APC) was funded by the University of Oradea, Romania.

Data Availability Statement

The data presented in this study are available on request from the corresponding authors. The raw simulation datasets generated using Ganache, Bitcoin Core, Python/Matplotlib scripts, and the statistical analyses of historical attack incidents (2016–2025) are not publicly archived due to their large size and ongoing use in follow-up research; however, they can be obtained upon reasonable request. All publicly available incident data (e.g., Chainalysis reports, CVE entries, and FBI press releases) are cited in the References section with corresponding access dates.

Conflicts of Interest

The authors declare no conflict of interest.

References

  1. Addula, S.R.; Aitizaz, A. Novel Permissioned Blockchain Approach for Scalable and Privacy-Preserving IoT Authentication. J. Cyber Secur. Risk Audit. 2025, 2025, 222–237. [Google Scholar] [CrossRef]
  2. Addula, S.R.; Norozpour, S.; Amin, M. Risk Assesment for Identifying Threats, Vulnerabilities and countermeasures in Cloud Computing. Jordanian J. Inform. Comput. 2025. Available online: https://www.semanticscholar.org/paper/Risk-Assessment-for-Identifying-Threats%2C-and-in-Addula-Norozpour/e068f77951f00ca2ba4e2aca41a7f86a4c945789 (accessed on 20 November 2025).
  3. Aljumaiah, O.; Jiang, W.; Addula, S.R.; Almaiah, M.A. Analyzing cybersecurity risks and threats in IT infrastructure based on the NIST framework. J. Cyber Secur. Risk Audit. 2025, 2025, 2–15. [Google Scholar] [CrossRef]
  4. Almanasir, R.; Al Al-Solomon, D.; Indrawes, S.; Amin Almaiah, M.; Islam, U.; Alshar’e, M. Classification of Threats and Countermeasures of Cloud Computing. J. Cyber Secur. Risk Audit. 2025, 2025, 27–42. [Google Scholar] [CrossRef]
  5. Available online: https://www.bbc.com/news/articles/c2kgndwwd7lo (accessed on 20 November 2025).
  6. Alkhalifah, A.; Ng, A.; Kayes, A.S.M.; Chowdhury, J.; Alazab, M. A taxonomy of blockchain threats and vulnerabilities. In Blockchain for Cybersecurity in Cyber-Physical Systems; Springer: Berlin/Heidelberg, Germany, 2022; pp. 3–28. [Google Scholar] [CrossRef]
  7. Available online: https://www.bl.uk/home/british-library-cyber-incident-review-8-march-2024.pdf/ (accessed on 20 November 2025).
  8. Li, X.; Jiang, P.; Chen, T.; Luo, X.; Wen, Q. A Survey on the Security of Blockchain Systems. Future Gener. Comput. Syst. 2020, 107, 841–853. [Google Scholar] [CrossRef]
  9. Liu, Y.; Hei, X.; Xu, W.; Yu, T. A survey on blockchain systems: Attacks, defenses, and privacy preservation. High-Confid. Comput. 2021, 1, 100002. [Google Scholar] [CrossRef]
  10. Nakamoto, S. Bitcoin: A Peer-to-Peer Electronic Cash System. 2008. Available online: https://bitcoin.org/bitcoin.pdf (accessed on 18 May 2025).
  11. Paulavičius, R.; Grigaitis, S.; Filatovas, E. A Systematic Review and Empirical Analysis of Blockchain Simulators. IEEE Access 2021, 9, 38010–38028. [Google Scholar] [CrossRef]
  12. Polge, J.; Ghatpande, S.; Kubler, S.; Robert, J.; Le Traon, Y. BlockPerf: A Hybrid Blockchain Emulator/Simulator Framework. IEEE Access 2021, 9, 107858–107872. [Google Scholar] [CrossRef]
  13. Available online: https://www.bl.uk/cyber-incident/ (accessed on 20 November 2025).
  14. Alyounis, S.; Yasin, M.M. Secure Framework for Land Record Management using Blockchain Technology. J. Cyber Secur. Risk Audit. 2023, 2023, 19–48. [Google Scholar] [CrossRef]
  15. Antonopoulos, A.M. Mastering Bitcoin: Programming the Open Blockchain, 2nd ed.; O’Reilly Media: Sebastopol, CA, USA, 2017. [Google Scholar]
  16. Available online: https://jjic.thestap.com/archives/volume-2025-1/680f20ddcd605702a281651f (accessed on 20 November 2025).
  17. Bellamkonda, S. Ransomware Attacks on Critical Infrastructure: A Study of the Colonial Pipeline Incident. Int. J. Res. Comput. Appl. Inf. Technol. 2024, 7, 1423–1433. [Google Scholar] [CrossRef]
  18. Belotti, M.; Bozic, N.; Pujolle, G.; Secci, S. A Vademecum on Blockchain Technologies: When, Which, and How. IEEE Commun. Surv. Tutor. 2019, 21, 3796–3838. [Google Scholar] [CrossRef]
  19. Xinyi, Y.; Yi, Z.; He, Y. Technical Characteristics and Model of Blockchain. In Proceedings of the 2018 10th International Conference on Communication Software and Networks (ICCSN), Chengdu, China, 6–9 July 2018; pp. 562–566. Available online: https://www.researchgate.net/publication/328246761_Technical_Characteristics_and_Model_of_Blockchain (accessed on 20 November 2025).
  20. Yu, H.; Gibbons, P.B.; Kaminsky, M.; Flaxman, A. SybilGuard: Defending Against Sybil Attacks via Social Networks. IEEE/ACM Trans. Netw. 2008, 16, 576–589. [Google Scholar] [CrossRef]
  21. Zhang, Q.; Kasahara, S.; Shen, Y.; Jiang, X.; Wan, J. Smart contract-based access control for the Internet of Things. IEEE Internet Things J. 2019, 6, 1594–1605. [Google Scholar] [CrossRef]
  22. Zhang, R.; Xue, R.; Liu, L. Security and privacy on blockchain. ACM Comput. Surv. 2019, 52, 1–34. [Google Scholar] [CrossRef]
  23. Zheng, Z.; Xie, S.; Dai, H.; Chen, X.; Wang, H. An overview of blockchain technology: Architecture, consensus, and future trends. In Proceedings of the 2017 IEEE International Congress on Big Data, Honolulu, HI, USA, 25–30 June 2017; pp. 557–564. [Google Scholar] [CrossRef]
  24. Cachin, C.; Vukolić, M. Blockchain consensus protocols in the wild. arXiv 2017, arXiv:1707.01873. [Google Scholar] [CrossRef]
  25. Caldarola, F.; d’Atri, G.; Zanardo, E. Neural Fairness Blockchain Protocol Using an Elliptic Curves Lottery. Mathematics 2022, 10, 3040. [Google Scholar] [CrossRef]
  26. Available online: https://www.tenable.com/cybersecurity-guide/principles/common-vulnerability-scoring-system-cvss (accessed on 20 November 2025).
  27. Kaur, M.; Khan, M.Z.; Gupta, S.; Noorwali, A.; Chakraborty, C.; Pani, S.K. MBCP: Performance Analysis of Large Scale Mainstream Blockchain Consensus Protocols. IEEE Access 2021, 9, 80931–80944. [Google Scholar] [CrossRef]
  28. Saleh, F. Blockchain Without Waste: Proof-of-Stake. Rev. Financ. Stud. 2020, 34, 1156–1190. [Google Scholar] [CrossRef]
  29. Available online: https://www.fintechfutures.com/blockchain-crypto-digital-assets/cryptocurrencies-and-the-critical-vulnerability-of-a-51-attack (accessed on 20 November 2025).
  30. Chen, H.; Pendleton, M.; Njilla, L.; Xu, S. A survey on Ethereum systems security: Vulnerabilities, attacks, and defenses. ACM Comput. Surv. 2020, 53, 1–43. [Google Scholar] [CrossRef]
  31. Coindesk. Ethereum Classic Suffers Third 51% Attack in a Month. 2020. Available online: https://www.coindesk.com (accessed on 20 November 2025).
  32. Cormen, T.H.; Leiserson, C.E.; Rivest, R.L.; Stein, C. Introduction to Algorithms; The MIT Press: Cambridge, MA, USA, 2009. [Google Scholar]
  33. Dunphy, P.; Petitcolas, F.A.P. A First Look at Identity Management Schemes on the Blockchain. IEEE Secur. Priv. 2018, 16, 20–29. [Google Scholar] [CrossRef]
  34. Decker, C.; Wattenhofer, R. Information Propagation in the Bitcoin Network. In Proceedings of the IEEE P2P 2013 Proceedings, Trento, Italy, 9–11 September 2013; Available online: https://ieeexplore.ieee.org/document/6688704 (accessed on 20 November 2025).
  35. Wan, Z.; Guan, Z.; Zhou, Y.; Gao, J. Security in blockchain: A systematic literature review. IEEE Access 2020, 8, 62296–62319. [Google Scholar] [CrossRef]
  36. Woien, M.C.; Catak, F.O.; Kuzlu, M.; Cali, U. Neural Networks Meet Elliptic Curve Cryptography: A Novel Approach to Secure Communication. arXiv 2024, arXiv:2407.08831. [Google Scholar] [CrossRef]
  37. Available online: https://blockchain.gov.in/Home/BlockChain?blockchain=blockchain (accessed on 20 November 2025).
  38. Available online: https://crustlab.com/blog/types-of-blockchain-technology-a-complete-overview/ (accessed on 20 November 2025).
  39. Available online: https://encyclopedia.pub/entry/24357 (accessed on 20 November 2025).
  40. Available online: https://ntiprit.gov.in/pdf/blockchainanddistributed/Blockchain_Introduction_KR.pdf (accessed on 20 November 2025).
  41. Available online: https://www.bbc.com/news/technology-58331959 (accessed on 20 November 2025).
  42. Available online: https://www.h-x.technology/blog/top-3-smart-contract-audit-tools (accessed on 20 November 2025).
  43. Available online: https://www.ibm.com/think/topics/blockchain (accessed on 20 November 2025).
  44. Available online: https://www.researchgate.net/publication/386014193_Ransomware_Attacks_On_Critical_Infrastructure_A_Study_Of_The_Colonial_Pipeline_Incident (accessed on 20 November 2025).
  45. Eyal, I.; Sirer, E.G. Majority is Not Enough: Bitcoin Mining is Vulnerable. In Financial Cryptography and Data Security; Lecture Notes in Computer Science; Spring: Berlin/Heidelberg, Germany, 2014; Volume 8437, Available online: https://www.researchgate.net/publication/258224002_Majority_Is_Not_Enough_Bitcoin_Mining_Is_Vulnerable (accessed on 20 November 2025).
  46. Heilman, E.; Kendler, A.; Zohar, A.; Goldberg, S. Eclipse Attacks on Bitcoin’s Peer-to-Peer Network. In Proceedings of the 24th USENIX Security Symposium, Washington, DC, USA, 12–14 August 2015; Available online: https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-heilman.pdf (accessed on 20 November 2025).
  47. Atzei, N.; Bartoletti, M.; Cimoli, T. A Survey of Attacks on Ethereum Smart Contracts Sok. In Proceedings of the 6th International Conference on Principles of Security and Trust, Uppsala, Sweden, 22–29 April 2017; Volume 10204, pp. 164–2186. [Google Scholar] [CrossRef]
  48. Bartoletti, M.; Carta, S.; Cimoli, T.; Saia, R. Dissecting Ponzi schemes on Ethereum: Identification, analysis, and impact. Future Gener. Comput. Syst. 2020, 102, 259–277. [Google Scholar] [CrossRef]
  49. Carter, L.; Ubacht, J. Blockchain applications in government. In Proceedings of the 19th Annual International Conference on Digital Government Research: Governance in the Data Age, Delft, The Netherlands, 30 May–1 June 2018; Available online: https://www.researchgate.net/publication/325497149_Blockchain_applications_in_government (accessed on 20 November 2025).
  50. Catalini, C.; Gans, J.S. The Blockchain Ecosystem. SSRN Electron. J. 2018. Available online: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2874598 (accessed on 20 November 2025).
  51. Hao, Y.; Li, Y.; Dong, X.; Fang, L.; Chen, P. Performance Analysis of Consensus Algorithm in Private Blockchain. In Proceedings of the 2018 IEEE Intelligent Vehicles Symposium (IV), Changshu, China, 26–30 June 2018; pp. 280–285. Available online: https://www.researchgate.net/publication/328457612_Performance_Analysis_of_Consensus_Algorithm_in_Private_Blockchain (accessed on 20 November 2025). [CrossRef]
  52. Available online: https://www.simplilearn.com/tutorials/blockchain-tutorial/blockchain-technology (accessed on 20 November 2025).
  53. Available online: https://crypto.com/glossary/the-dao-hack (accessed on 20 November 2025).
  54. Available online: https://techcrunch.com/2017/11/07/a-major-vulnerability-has-frozen-hundreds-of-millions-of-dollars-of-ethereum/ (accessed on 20 November 2025).
  55. Available online: https://www.reuters.com/article/technology/un-experts-point-finger-at-north-korea-for-281-million-cyber-theft-kucoin-li-idUSKBN2AA08T/ (accessed on 20 November 2025).
  56. Available online: https://www.reuters.com/technology/how-hackers-stole-613-million-crypto-tokens-poly-network-2021-08-12/ (accessed on 20 November 2025).
  57. Available online: https://www.cisa.gov/news-events/news/attack-colonial-pipeline-what-weve-learned-what-weve-done-over-past-two-years (accessed on 20 November 2025).
  58. Available online: https://therecord.media/us-agency-attributes-540-million-ronin-hack-to-north-korean-apt-group (accessed on 20 November 2025).
  59. Available online: https://www.fbi.gov/news/press-releases/fbi-confirms-lazarus-group-cyber-actors-responsible-for-harmonys-horizon-bridge-currency-theft (accessed on 20 November 2025).
  60. Available online: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35708 (accessed on 20 November 2025).
  61. Homoliak, I.; Venugopalan, S.; Hum, Q.; Reijsbergen, D.; Szalachowski, P.; Sun, Q. The security reference architecture for blockchains: Toward a standardized model for studying vulnerabilities, risks, attacks, and defenses. IEEE Commun. Surv. Tutor. 2020, 22, 3334–3395. [Google Scholar] [CrossRef]
  62. Hunter, J.D. Matplotlib: A 2D Graphics Environment. Comput. Sci. Eng. 2007, 9, 90–95. [Google Scholar] [CrossRef]
  63. Jimmy, F.N.U. Cyber security Vulnerabilities and Remediation Through Cloud Security Tools. J. Artif. Intell. Gen. Sci. (JAIGS) 2024, 2, 129–171. [Google Scholar]
  64. Saad, M.; Spaulding, J.; Njilla, L.; Kamhoua, C.; Shetty, S.; Nyang, D.; Mohaisen, A. Exploring the attack surface of blockchain: A comprehensive survey. IEEE Commun. Surv. Tutor. 2020, 22, 1977–2008. [Google Scholar] [CrossRef]
  65. Available online: https://arxiv.org/abs/2407.08831 (accessed on 20 November 2025).
  66. Available online: https://www.mdpi.com/2227-7390/10/17/3040 (accessed on 20 November 2025).
  67. Available online: https://www.chainalysis.com/blog/north-korea-russia-crypto-money-laundering/ (accessed on 20 November 2025).
Disclaimer/Publisher’s Note: The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of MDPI and/or the editor(s). MDPI and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content.

Article Metrics

Citations

Article Access Statistics

Multiple requests from the same IP address are counted as one view.