IJITCS Vol. 18, No. 4, 8 Aug. 2026
Cover page and Table of Contents: PDF (size: 724KB)
PDF (724KB), PP.1-16
Views: 0 Downloads: 0
Blockchain Security, Sybil Attacks, Front-Running, Multi-Signature, Key Management, GDPR
Blockchain technology has emerged as a transformative tool for secure data sharing across decentralised systems, particularly in finance, healthcare, and governance. However, despite its promise, the widespread adoption of blockchain platforms remains constrained by unresolved security threats and architecture-specific vulnerabilities. This paper presents a systematic literature review (SLR) that critically evaluates the security risks and countermeasures associated with blockchain-based data sharing models. The review focuses on three widely referenced platforms: Ethereum, Hyperledger Fabric, and MedRec, which are chosen for their relevance to public, permissioned, and healthcare-oriented blockchain deployments, respectively. The review analyzed 30 peer-reviewed publications from 2018 to 2025 sourced from IEEE Xplore, SpringerLink, ScienceDirect, and other digital libraries. Empirical insights from the reviewed literature indicate that Sybil attacks remain prevalent on public blockchains, although adaptive Proof-of-Stake protocols are reported to reduce their success rate considerably. Front-running and Miner Extractable Value–related behaviors are frequently observed in Ethereum-based decentralised finance ecosystems, often resulting in significant financial losses. Unauthorised access persists as a major concern, particularly for software wallets, which are commonly exposed to phishing and malware attacks. The findings underscore unique trade-offs across platforms: Ethereum supports transparency but is prone to transaction manipulation; Hyperledger ensures strong access control yet faces insider threat challenges; and MedRec enhances patient privacy but lacks robust mobile integration. This study provides a structured synthesis of existing threats, platform-level responses, and design trade-offs, offering guidance for stakeholders aiming to strengthen security in blockchain-based data-sharing infrastructures.
Godwin Mandinyenya, Vusumuzi Malele, "From Sybil to Zero-Knowledge: A Systematic Review of Blockchain Data Sharing Solutions", International Journal of Information Technology and Computer Science(IJITCS), Vol.18, No.4, pp.1-16, 2026. DOI:10.5815/ijitcs.2026.04.01
[1]S. Nakamoto, "Bitcoin: A Peer-to-Peer Electronic Cash System," White Paper, 2008. [Online]. Available: https://bitcoin.org/bitcoin.pdf
[2]A. Gervais, G. O. Karame, K. Wüst, V. Glykantzis, H. Ritzdorf, and S. Capkun, "On the Security and Performance of Proof of Work Blockchains," in Proc. 2016 ACM SIGSAC Conf. Comput. Commun. Secur., 2016, pp. 3–16.
[3]P. Daian et al., "Flash Boys 2.0: Frontrunning in Decentralized Exchanges, Miner Extractable Value, and Consensus Instability," in Proc. IEEE Symp. Secur. Priv., 2020, pp. 910–927, doi: 10.1109/SP40000.2020.00031.
[4]S. Eskandari and J. Clark, "On the Feasibility of Decentralized MEV Prevention," in Proc. Financial Cryptography Workshops, LNCS vol. 13459, Springer, 2022, pp. 93–111.
[5]L. Luu et al., "SmartPool: Practical Decentralized Pooling," in Proc. USENIX Secur. Symp., 2017, pp. 477–492.
[6]M. Al-Bassam, A. Sonnino, S. Bano, and G. Danezis, "Chainspace: A Sharded Smart Contracts Platform," in Proc. Network Distrib. Syst. Secur. Symp. (NDSS), 2018.
[7]V. Buterin, "A Next-Generation Smart Contract and Decentralized Application Platform," White Paper, 2014. [Online]. Available: https://ethereum.org/en/whitepaper/
[8]Chainalysis, "Crypto Crime Report," 2023. [Online]. Available: https://go.chainalysis.com/crypto-crime-report-2023.
[9]Y. Sompolinsky and A. Zohar, "PHANTOM: A Scalable BlockDAG Protocol," in Proc. Financial Cryptography Data Secur., 2019.
[10]M. Conti, S. S. Kumar, and C. Lal, "A Survey on Security and Privacy Issues of Bitcoin," IEEE Commun. Surveys Tuts., vol. 20, no. 4, pp. 3416–3452, 2018.
[11]C. Reitwiessner, "Solidity Documentation," 2023. [Online]. Available: https://docs.soliditylang.org.
[12]D. Boneh and V. Shoup, "A Graduate Course in Applied Cryptography," 2020. [Online]. Available: https://crypto.stanford.edu/~dabo/cryptobook.
[13]A. Shamir, "How to Share a Secret," Commun. ACM, vol. 22, no. 11, pp. 612–613, 1979.
[14]Intel, "Intel Software Guard Extensions (SGX)," 2022. [Online]. Available: https://www.intel.com/content/www/us/en/developer/tools/software-guard-extensions/overview.html.
[15]N. Atzei, M. Bartoletti, and T. Cimoli, "A Survey of Attacks on Ethereum Smart Contracts," in Proc. Int. Conf. Principles Secur. Trust, Springer, 2017.
[16]D. Chaum, ‘Zero-Knowledge Proofs and Their Applications’, IEEE Security & Privacy, vol. 16, no. 2, pp. 12–17, 2018.
[17]A. Mühle, A. Grüner, T. Gayvoronskaya, and C. Meinel, "A Survey on Essential Components of a Self-Sovereign Identity," Comput. Sci. Rev., vol. 30, pp. 1–27, 2018.
[18]M. Alammary, S. Alhazmi, M. Almasri, and S. Gillani, "Blockchain-Based Applications in Education: A Systematic Review," Appl. Sci., vol. 9, no. 12, pp. 2400–2421, 2019.
[19]B. Yu, D. Yang, and K. Liu, "A Scalable Blockchain-Based Platform for Secure Personal Data Management," IEEE Access, vol. 8, pp. 123944–123956, 2020.
[20]A. Dorri, S. S. Kanhere, R. Jurdak, et al., "Blockchain: A Distributed Solution to Automotive Security and Privacy," IEEE Commun. Mag., vol. 55, no. 12, pp. 119–125, 2017.
[21]Z. Zheng, S. Xie, H. Dai, X. Chen, and H. Wang, "Blockchain Challenges and Opportunities: A Survey," IEEE Access, vol. 8, pp. 144321–144356, 2020.
[22]M. Ahmed and R. Dharaskar, "Blockchain and GDPR: How to Reconcile the Irreconcilable," IEEE Technol. Eng. Manag. Rev., vol. 9, no. 4, pp. 23–31, 2021.
[23]J. Glöckler et al., "A Systematic Review of Identity and Access Management in Blockchain Systems," Bus. Inf. Syst. Eng., vol. 66, no. 4, pp. 421–440, 2024.
[24]R. Belchior, A. Vasconcelos, S. Guerreiro, and M. Correia, "A Survey on Blockchain Interoperability: Past, Present, and Future Trends," ACM Comput. Surv., vol. 53, no. 6, pp. 1–34, 2020.
[25]K. Christidis and M. Devetsikiotis, "Blockchains and Smart Contracts for the Internet of Things," IEEE Access, vol. 4, pp. 2292–2303, 2016.
[26]World Food Programme, "Building Blocks Project: Blockchain for Humanitarian Aid," 2023. [Online]. Available: https://innovation.wfp.org/project/building-blocks.
[27]N. Kshetri, "Blockchain and International Standardization: Challenges and Opportunities," IEEE IT Prof., vol. 23, no. 1, pp. 57–64, 2021.
[28]T. Gräning and B. Müller, "ISO/TC 307 and Global Blockchain Governance," in Proc. Int. Conf. E-Governance, 2019, pp. 103–115.
[29]X. Wang, L. Chen, and K. Li, "Attribute-Based Encryption for Blockchain Access Control," J. Netw. Comput. Appl., vol. 154, p. 102535, 2020.
[30]J. Albrecht and I. Coyne, "Blockchain Regulation in Emerging Markets: A Review of ISO Standard Relevance," J. Inf. Syst., vol. 37, no. 2, pp. 121–139, 2023.