Blockchain Variables and Possible Attacks: A Technical Survey

Andrei Alexandru Bordeianu; Daniela Elena Popescu

doi:10.3390/computers14120567

journal article Open Access Dec 18, 2025

Blockchain Variables and Possible Attacks: A Technical Survey

Andrei Alexandru Bordeianu Daniela Elena Popescu

Computers Vol. 14 No. 12 pp. 567 · MDPI AG

View at Publisher Save 10.3390/computers14120567

Abstract

Blockchain technology has rapidly evolved as a cornerstone of decentralized computing, transforming how trust, data integrity, and transparency are achieved in digital ecosystems. However, despite extensive adoption, significant gaps remain in understanding how key blockchain variables, such as block size, consensus mechanisms, and network latency, affect system vulnerabilities and susceptibility to cyberattacks. This survey addresses this gap by combining qualitative and quantitative analyses across multiple blockchain environments. Using simulation tools such as Ganache and Bitcoin Core, and reviewing peer-reviewed studies from 2016 to 2024, the research systematically maps blockchain parameters to cyberattack vectors including 51% attacks, Sybil attacks, and double-spending. Findings indicate that design choices like block size, block interval, and consensus type substantially influence resilience against attacks. The Blockchain Variable Quantitative Risk Framework (BVQRF) introduced here integrates NIST’s cybersecurity principles with quantitative scoring to assess risks. This framework represents a novel contribution by operationalizing theoretical security constructs into actionable evaluation metrics, enabling predictive modeling and adaptive risk mitigation strategies for blockchain systems.

Topics

No keywords indexed for this article. Browse by subject →

References

67

[1]

Addula "Novel Permissioned Blockchain Approach for Scalable and Privacy-Preserving IoT Authentication" J. Cyber Secur. Risk Audit. (2025) 10.63180/jcsra.thestap.2025.4.3

[2]

Addula, S.R., Norozpour, S., and Amin, M. (2025, November 20). Risk Assesment for Identifying Threats, Vulnerabilities and countermeasures in Cloud Computing. Jordanian J. Inform. Comput, Available online: https://www.semanticscholar.org/paper/Risk-Assessment-for-Identifying-Threats%2C-and-in-Addula-Norozpour/e068f77951f00ca2ba4e2aca41a7f86a4c945789.

[3]

Aljumaiah "Analyzing cybersecurity risks and threats in IT infrastructure based on the NIST framework" J. Cyber Secur. Risk Audit. (2025)

[4]

Almanasir "Classification of Threats and Countermeasures of Cloud Computing" J. Cyber Secur. Risk Audit. (2025) 10.63180/jcsra.thestap.2025.2.3

[5]

(2025, November 20). Available online: https://www.bbc.com/news/articles/c2kgndwwd7lo.

[6]

Alkhalifah, A., Ng, A., Kayes, A.S.M., Chowdhury, J., and Alazab, M. (2022). A taxonomy of blockchain threats and vulnerabilities. Blockchain for Cybersecurity in Cyber-Physical Systems, Springer.

[7]

(2025, November 20). Available online: https://www.bl.uk/home/british-library-cyber-incident-review-8-march-2024.pdf/.

[8]

Li "A Survey on the Security of Blockchain Systems" Future Gener. Comput. Syst. (2020) 10.1016/j.future.2017.08.020

[9]

Liu "A survey on blockchain systems: Attacks, defenses, and privacy preservation" High-Confid. Comput. (2021)

[10]

Nakamoto, S. (2025, May 18). Bitcoin: A Peer-to-Peer Electronic Cash System. Available online: https://bitcoin.org/bitcoin.pdf.

[11]

Grigaitis "A Systematic Review and Empirical Analysis of Blockchain Simulators" IEEE Access (2021) 10.1109/access.2021.3063324

[12]

Polge "BlockPerf: A Hybrid Blockchain Emulator/Simulator Framework" IEEE Access (2021) 10.1109/access.2021.3101044

[13]

(2025, November 20). Available online: https://www.bl.uk/cyber-incident/.

[14]

Alyounis "Secure Framework for Land Record Management using Blockchain Technology" J. Cyber Secur. Risk Audit. (2023) 10.63180/jcsra.thestap.2023.1.3

[15]

Antonopoulos, A.M. (2017). Mastering Bitcoin: Programming the Open Blockchain, O’Reilly Media. [2nd ed.].

[16]

(2025, November 20). Available online: https://jjic.thestap.com/archives/volume-2025-1/680f20ddcd605702a281651f.

[17]

Bellamkonda "Ransomware Attacks on Critical Infrastructure: A Study of the Colonial Pipeline Incident" Int. J. Res. Comput. Appl. Inf. Technol. (2024)

[18]

Belotti "A Vademecum on Blockchain Technologies: When, Which, and How" IEEE Commun. Surv. Tutor. (2019) 10.1109/comst.2019.2928178

[19]

Xinyi, Y., Yi, Z., and He, Y. (2018, January 6–9). Technical Characteristics and Model of Blockchain. Proceedings of the 2018 10th International Conference on Communication Software and Networks (ICCSN), Chengdu, China. Available online: https://www.researchgate.net/publication/328246761_Technical_Characteristics_and_Model_of_Blockchain. 10.1109/iccsn.2018.8488289

[20]

Yu "SybilGuard: Defending Against Sybil Attacks via Social Networks" IEEE/ACM Trans. Netw. (2008) 10.1109/tnet.2008.923723

[21]

Zhang "Smart contract-based access control for the Internet of Things" IEEE Internet Things J. (2019) 10.1109/jiot.2018.2847705

[22]

Zhang "Security and privacy on blockchain" ACM Comput. Surv. (2019) 10.1145/3158369

[23]

Zheng, Z., Xie, S., Dai, H., Chen, X., and Wang, H. (2017, January 25–30). An overview of blockchain technology: Architecture, consensus, and future trends. Proceedings of the 2017 IEEE International Congress on Big Data, Honolulu, HI, USA. 10.1109/bigdatacongress.2017.85

[24]

Cachin, C., and Vukolić, M. (2017). Blockchain consensus protocols in the wild. arXiv. 10.1109/edcc.2017.36

[25]

Caldarola, F., d’Atri, G., and Zanardo, E. (2022). Neural Fairness Blockchain Protocol Using an Elliptic Curves Lottery. Mathematics, 10. 10.3390/math10173040

[26]

(2025, November 20). Available online: https://www.tenable.com/cybersecurity-guide/principles/common-vulnerability-scoring-system-cvss.

[27]

Kaur "MBCP: Performance Analysis of Large Scale Mainstream Blockchain Consensus Protocols" IEEE Access (2021) 10.1109/access.2021.3085187

[28]

Saleh "Blockchain Without Waste: Proof-of-Stake" Rev. Financ. Stud. (2020) 10.1093/rfs/hhaa075

[29]

(2025, November 20). Available online: https://www.fintechfutures.com/blockchain-crypto-digital-assets/cryptocurrencies-and-the-critical-vulnerability-of-a-51-attack.

[30]

Chen "A survey on Ethereum systems security: Vulnerabilities, attacks, and defenses" ACM Comput. Surv. (2020)

[31]

(2025, November 20). Ethereum Classic Suffers Third 51% Attack in a Month. Available online: https://www.coindesk.com.

[32]

Cormen, T.H., Leiserson, C.E., Rivest, R.L., and Stein, C. (2009). Introduction to Algorithms, The MIT Press.

[33]

Dunphy "A First Look at Identity Management Schemes on the Blockchain" IEEE Secur. Priv. (2018) 10.1109/msp.2018.3111247

[34]

Decker, C., and Wattenhofer, R. (2013, January 9–11). Information Propagation in the Bitcoin Network. Proceedings of the IEEE P2P 2013 Proceedings, Trento, Italy. Available online: https://ieeexplore.ieee.org/document/6688704. 10.1109/p2p.2013.6688704

[35]

Wan "Security in blockchain: A systematic literature review" IEEE Access (2020)

[36]

Woien, M.C., Catak, F.O., Kuzlu, M., and Cali, U. (2024). Neural Networks Meet Elliptic Curve Cryptography: A Novel Approach to Secure Communication. arXiv. 10.1109/vcc63113.2024.10914360

[37]

(2025, November 20). Available online: https://blockchain.gov.in/Home/BlockChain?blockchain=blockchain.

[38]

(2025, November 20). Available online: https://crustlab.com/blog/types-of-blockchain-technology-a-complete-overview/.

[39]

(2025, November 20). Available online: https://encyclopedia.pub/entry/24357.

[40]

(2025, November 20). Available online: https://ntiprit.gov.in/pdf/blockchainanddistributed/Blockchain_Introduction_KR.pdf.

[41]

(2025, November 20). Available online: https://www.bbc.com/news/technology-58331959.

[42]

(2025, November 20). Available online: https://www.h-x.technology/blog/top-3-smart-contract-audit-tools.

[43]

(2025, November 20). Available online: https://www.ibm.com/think/topics/blockchain.

[44]

(2025, November 20). Available online: https://www.researchgate.net/publication/386014193_Ransomware_Attacks_On_Critical_Infrastructure_A_Study_Of_The_Colonial_Pipeline_Incident.

[45]

Eyal, I., and Sirer, E.G. (2014). Majority is Not Enough: Bitcoin Mining is Vulnerable. Financial Cryptography and Data Security; Lecture Notes in Computer Science, Spring. Available online: https://www.researchgate.net/publication/258224002_Majority_Is_Not_Enough_Bitcoin_Mining_Is_Vulnerable. 10.1007/978-3-662-45472-5_28

[46]

Heilman, E., Kendler, A., Zohar, A., and Goldberg, S. (2015, January 12–14). Eclipse Attacks on Bitcoin’s Peer-to-Peer Network. Proceedings of the 24th USENIX Security Symposium, Washington, DC, USA. Available online: https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-heilman.pdf.

[47]

Atzei, N., Bartoletti, M., and Cimoli, T. (2017, January 22–29). A Survey of Attacks on Ethereum Smart Contracts Sok. Proceedings of the 6th International Conference on Principles of Security and Trust, Uppsala, Sweden. 10.1007/978-3-662-54455-6_8

[48]

Bartoletti "Dissecting Ponzi schemes on Ethereum: Identification, analysis, and impact" Future Gener. Comput. Syst. (2020) 10.1016/j.future.2019.08.014

[49]

Carter, L., and Ubacht, J. (June, January 30). Blockchain applications in government. Proceedings of the 19th Annual International Conference on Digital Government Research: Governance in the Data Age, Delft, The Netherlands. Available online: https://www.researchgate.net/publication/325497149_Blockchain_applications_in_government.

[50]

Catalini, C., and Gans, J.S. (2025, November 20). The Blockchain Ecosystem. SSRN Electron. J., Available online: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2874598.

Showing 50 of 67 references

Metrics

2

Citations

67

References

Details

Published: Dec 18, 2025
Vol/Issue: 14(12)
Pages: 567
License: View

Authors

A

Andrei Alexandru Bordeianu

Department of Computers and Information Technology, Politehnica University of Timisoara, 2 V. Parvan Blvd, 300006 Timisoara, Romania

D

Daniela Elena Popescu

Department of Computers and Information Technology, Faculty of Electrical Engineering and Information Technology, University of Oradea, 410087 Oradea, Romania

Funding

University of Oradea, Romania

Cite This Article

Andrei Alexandru Bordeianu, Daniela Elena Popescu (2025). Blockchain Variables and Possible Attacks: A Technical Survey. Computers, 14(12), 567. https://doi.org/10.3390/computers14120567

Blockchain Variables and Possible Attacks: A Technical Survey

You May Also Like