blockchain integration

Cross-blockchain transactions suffer from insufficient auditability and non-repudiation, rendering them vulnerable to malicious denial or fraudulent accountability. This paper proposes InterSnap, a secure interoperability framework leveraging cross-chain transaction receipts and on-demand distributed ledger snapshots. InterSnap innovatively binds cryptographic receipts with lightweight, dynamically generated ledger snapshots, immutably preserving evidence via decentralized storage. Snapshots are generated on demand and transmitted with low overhead, balancing security and efficiency. Evaluated on Hyperledger Fabric, the prototype demonstrates that InterSnap enables complete recovery of cross-chain credentials following adversarial attacks, supports high-concurrency workloads and cross-cloud deployments, and significantly enhances verifiability, non-repudiation, and system resilience in heterogeneous blockchain interactions.

This study addresses critical vulnerabilities in existing paper-based and digital document management systems—namely forgery, loss, and unauthorized access—which undermine security, authenticity, and operational efficiency. To overcome these challenges, this work proposes a novel document management architecture that integrates blockchain technology, cryptographic protocols, and decentralized storage. By leveraging decentralized digital notarization, tamper-proof digital signatures, and fine-grained access control mechanisms, the system ensures transparent, secure, and efficient handling of official documents. It simultaneously preserves data integrity and user privacy while significantly enhancing procedural trustworthiness and administrative efficiency. The proposed framework offers a scalable technical paradigm for digital governance and trustworthy document management in increasingly digitized institutional environments.

To address inherent deficiencies in log management for distributed systems—specifically tamper resistance, scalability, and real-time performance—this paper proposes a blockchain-based log auditing framework tailored for large-scale deployments. The approach employs a hybrid on-chain/off-chain architecture: on-chain smart contracts automate log validation, enforce fine-grained access control, and anchor cryptographic hash timestamps; off-chain logs are stored immutably in IPFS, with zero-knowledge proofs enabling privacy-preserving, regulatory-compliant verification. Experimental evaluation demonstrates sustained throughput exceeding 10⁴ logs per second, support for over ten million logs, end-to-end latency under 200 ms, and a 67% reduction in storage overhead. The framework fully satisfies audit requirements of China’s Multi-Level Protection Scheme (MLPS) Level 3 and the EU’s General Data Protection Regulation (GDPR).

This study addresses a critical gap in blockchain research, which has predominantly focused on on-chain transactions while neglecting the comprehensive lifecycle management of cryptographic assets. For the first time, the paper introduces the ISO 15489-1:2016 records management standard into the blockchain domain, leveraging records lifecycle theory to propose a seven-stage data lifecycle framework spanning from creation to disposition. The applicability of this model is demonstrated through case studies involving Bitcoin, fungible tokens, and non-fungible tokens. By elucidating the inherent characteristics of blockchain as a records management system, the framework clarifies the boundaries between on-chain and off-chain data and examines how privacy-enhancing technologies affect lifecycle visibility. This structured perspective offers valuable insights for the governance of crypto-assets, regulatory compliance, and forensic investigations.

Layer 2 rollups—particularly ZK-rollups—face critical security and censorship-resistance challenges stemming from flawed designs of forced transaction queues, blocklisting mechanisms, and upgrade protocols, compounded by insufficient L1 smart contract guarantees over L2 properties. Method: This work introduces the first formal modeling and state-machine verification of core rollup mechanisms in Alloy, enabling systematic identification of vulnerabilities. Contribution/Results: We uncover five fundamental security and censorship vulnerabilities; propose an enhanced forced submission protocol and a decentralized upgrade model; and establish an executable, falsifiable formal security benchmark. Our framework constitutes the first rigorously verifiable design for censorship-resistant L2 rollups and trustworthy protocol upgrades, establishing a new paradigm for formal security verification of rollup protocols.

Escalating security challenges in blockchain and decentralized applications under scalability enhancements necessitate a systematic security reference architecture. Method: We integrate game-theoretic modeling, formal verification, zero-knowledge proofs, trusted execution environments (TEEs), and atomic swap protocol design. Contributions: (1) A novel DAG-based consensus model resilient against selfish mining and undercutting attacks; (2) An OTP-enhanced two-factor wallet and a privacy-preserving, dynamic-revotable electronic voting framework—scalable to millions of users and formally verified; (3) A secure logging system guaranteeing non-repudiation, integrity, and auditable evidence with millisecond-level write latency; (4) The first strongly consistent, cross-ledger atomic interoperability protocol for central bank digital currencies (CBDCs). Collectively, these advances significantly enhance system robustness and verifiable security across consensus, wallet infrastructure, e-voting, logging, and CBDC interoperability domains.

This work addresses the limitations of existing file integrity verification schemes, which often rely on centralized authorities or incur excessive resource overhead, thereby struggling to achieve a balance among lightweight design, decentralization, and long-term trustworthiness. Building upon the Haber-Stornetta hash anchoring paradigm, the authors propose a lightweight verification mechanism deployed on the Solana blockchain that immutably records SHA-256 hashes of files, enabling efficient and deterministic integrity checks. The approach innovatively decouples proof of existence from proof of authorship, ensuring verifiability of file existence even in the event of private key loss. Furthermore, a four-layer trust architecture is introduced to support cross-chain persistence over extended periods. Empirical evaluation across file sizes ranging from 1 KB to 500 MB demonstrates the system’s feasibility, security against second-preimage attacks, and robust integrity guarantees.

This work addresses the unfair revenue distribution and erosion of trust in mining pools caused by Block Withholding Attacks (BWAs) by proposing an auditable Proof-of-Work (PoW) mechanism. The approach enables miners to retrospectively verify each other’s historical mining efforts through accountable nonce-space rescan, detecting BWAs without reliance on trusted hardware or third parties. As the first scheme to introduce an orthogonal auditability layer into PoW, it achieves verifiable mining attribution in decentralized pools, substantially diminishing the economic incentives for BWAs. Built upon Hashcash-style nonce search, the design integrates probabilistic claims with verifiable work, supports difficulty adjustment and public verification, preserves compatibility with existing PoW properties, and can be deployed at the pool level as a “pay-per-audit” mechanism to enhance both security and fairness.

This paper addresses the design challenge of Untrusted-State, Unforgeable, Stateful, and client-Oblivious (USO) asset systems—i.e., systems lacking global state, ensuring asset unforgeability, maintaining local state, and preserving client obliviousness. We propose Sark, a reference architecture comprising two core components: Sloop, a permissioned CFT blockchain, and Porters, a commitment-aggregation subsystem. Sark introduces a novel *stealthy state-update protocol* that decouples state maintenance from privacy preservation. We formalize the *Integrity Locus* concept within the CIA security model to rigorously characterize decentralization trade-offs and achieve, for the first time, *verifiable asset integrity without global state*. Experimental evaluation confirms feasibility: Sark guarantees both client obliviousness and integrity, while quantitatively exposing an inherent trade-off between Porters’ localized centrality and overall system availability.

This work addresses the vulnerability of traditional firmware integrity verification mechanisms to insider threats and single points of failure, which undermines the security of cyber-physical systems (CPS). To overcome these limitations, the paper proposes the first decentralized firmware verification framework built on the Ethereum blockchain. By leveraging smart contracts to store SHA-256 hashes of firmware images, the framework enables tamper-proof, transparent, and trustless real-time verification. The design eliminates reliance on centralized authorities and seamlessly integrates with existing security mechanisms such as secure boot, Trusted Platform Modules (TPMs), and zero-trust architectures. Scalability is enhanced through Layer-2 solutions and IPFS integration. A prototype deployed on the Sepolia testnet demonstrates reliable verification with low gas consumption, highlighting the framework’s practical viability and potential for real-world adoption.