Security Challenges and Performance Trade-Offs in On-Chain and Off-Chain Blockchain Storage: A Comprehensive Review
Source abstract
Abstract
Blockchain-based data storage methods offer strong data integrity, decentralized security, and transparent access control but also face scalability challenges, high computational costs, and complex data management. This study provides a comprehensive review of on-chain, off-chain, and hybrid storage architectures, analyzing their security vulnerabilities, performance trade-offs, and industry-specific applications. On-chain data storage ensures immutability, data integrity, and high security by storing data directly on the blockchain; however, it is associated with high transaction costs and scalability limitations. In contrast, off-chain solutions reduce costs and enhance performance by storing data outside the blockchain but introduce risks related to data integrity and access security in decentralized environments. Hybrid approaches aim to balance security, cost, and scalability by integrating the strengths of both on-chain and off-chain solutions. This study examines the fundamental components of blockchain-based data storage systems, their sector-specific applications, and the technical challenges they present. Additionally, it explores the trade-offs between security, cost, and decentralization, offering insights into blockchain storage optimization strategies. As a result, this study evaluates the optimization of security protocols, the efficiency of hybrid systems, and the sustainability of distributed storage solutions, contributing to future research in this field.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Blockchain Technology Applications and Security · IoT and Edge/Fog Computing · Cloud Data Security Solutions
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Air Traffic Control, School of Civil Aviation, Fırat University, Elazig 23200, Türkiye
Department of Software Engineering, Faculty of Engineering, Fırat University, Elazig 23119, Türkiye
Department of Machine Program, Vocational School of Technical Sciences, Fırat University, Elazig 23119, Türkiye
Funding
Institution of Firat University Scientific Research Projects (FUBAP)
References (100+)
Show source-provided references
1. EDBLSD-IIoT: A comprehensive hybrid architecture for enhanced data security, reduced latency, and optimized energy in industrial IoT networks10.1007/s11227-024-06872-6 ↗
2. Lezzi, M., Del Vecchio, V., and Lazoi, M. (2024). Using blockchain technology for sustainability and secure data management in the energy industry: Implications and future research directions. Sustainability, 16.10.3390/su16187949 ↗
3. Blockchain and healthcare: A critical analysis of progress and challenges in the last five years10.3390/blockchains1020006 ↗
4. Blockchain technology in financial accounting: Enhancing transparency, security, and esg reporting10.3390/blockchains2030015 ↗
5. Lin, I.-C., Kuo, Y.-H., Chang, C.-C., Liu, J.-C., and Chang, C.-C. (2024). Symmetry in blockchain-powered secure decentralized data storage: Mitigating risks and ensuring confidentiality. Symmetry, 16.10.3390/sym16020147 ↗
6. Li, L., Qu, H., Wang, H., Wang, J., Wang, B., Wang, W., Xu, J., and Wang, Z. (2022). A blockchain-based product traceability system with off-chain EPCIS and IoT device authentication. Sensors, 22.10.3390/s22228680 ↗
7. Image privacy protection scheme based on high-quality reconstruction DCT compression and nonlinear dynamics10.1016/j.eswa.2024.124891 ↗
8. A secure digital evidence preservation system for an iot-enabled smart environment using ipfs, blockchain, and smart contracts10.1007/s12083-024-01855-z ↗
9. Attribute-based access control scheme for secure storage and sharing of EHRs using blockchain and IPFS10.1007/s10586-023-04038-2 ↗
10. Alizadeh, M., Andersson, K., and Schelén, O. (2020, January 16–18). Efficient decentralized data storage based on public blockchain and IPFS. Proceedings of the IEEE Asia-Pacific Conference on Computer Science and Data Engineering, Gold Coast, Australia.10.1109/CSDE50874.2020.9411599 ↗
11. Merlec, M.M., and In, H.P. (2024). Blockchain-based decentralized storage systems for sustainable data self-sovereignty: A comparative study. Sustainability, 16.10.3390/su16177671 ↗
12. Blockchain-based decentralized storage networks: A survey10.1016/j.jnca.2020.102656 ↗
13. Blockchain-based privacy preservation framework for healthcare data in cloud environment10.1080/0952813X.2022.2135611 ↗
14. A Framework for Privacy-Preserving Multiparty Computation with Homomorphic Encryption and Zero-Knowledge Proofs10.31449/inf.v48i21.6562 ↗
15. Toward decentralized cloud storage with IPFS: Opportunities, challenges, and future considerations10.1109/MIC.2022.3209804 ↗
16. hOCBS: A privacy-preserving blockchain framework for healthcare data leveraging an on-chain and off-chain system design10.1016/j.ipm.2021.102535 ↗
17. A survey on blockchain scalability: From hardware to layer-two protocols10.1109/COMST.2024.3376252 ↗
18. Recent advances in sharding techniques for scalable blockchain networks: A review10.1109/ACCESS.2024.3523256 ↗
19. Blockchain scaling using rollups: A comprehensive survey10.1109/ACCESS.2022.3200051 ↗
20. Saif, M.B., Migliorini, S., and Spoto, F. (2024). A survey on data availability in layer 2 blockchain rollups: Open challenges and future improvements. Future Internet, 16.10.3390/fi16090315 ↗
21. Nakamoto, S. (2025, February 08). Bitcoin: A Peer-to-Peer Electronic Cash System. Available online: https://bitcoin.org/bitcoin.pdf.
22. Kudzin, A., Toyoda, K., Takayama, S., and Ishigame, A. (2022). Scaling Ethereum 2.0’s cross-shard transactions with refined data structures. Cryptography, 6.10.3390/cryptography6040057 ↗
23. EduRSS: A blockchain-based educational records secure storage and sharing scheme10.1109/ACCESS.2019.2956157 ↗
24. Secure Hashgraph for healthcare: Strengthening privacy and data security in patient records10.1109/TCE.2024.3370737 ↗
25. Ramadan, R.A., Khalifa, H.S., Dessouky, M., and Aboshosha, B.W. (2025, February 08). Blockchain Technology for Enhanced Security of IoT Healthcare Devices: A Novel Lightweight Hash Function Approach and Secure Management System. Available online: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4680105.10.2139/ssrn.4680105 ↗
26. A blockchain-based approach for drug traceability in healthcare supply chain10.1109/ACCESS.2021.3049920 ↗
27. Smart pharmaceutical manufacturing: Ensuring end-to-end traceability and data integrity in medicine production10.1016/j.bdr.2020.100172 ↗
28. HealthBlock: A secure blockchain-based healthcare data management system10.1016/j.comnet.2021.108500 ↗
29. Key issues in healthcare data integrity: Analysis and recommendations10.1109/ACCESS.2020.2976687 ↗
30. Flux (2025, February 13). The Decentralized Computational Network. Available online: https://fluxwhitepaper.app.runonflux.io/.
31. Blockchain for drug traceability: Architectures and open challenges10.1177/14604582211011228 ↗
32. Robust and trustworthy data sharing framework leveraging on-chain and off-chain collaboration
33. TPPSUPPLY: A traceable and privacy-preserving blockchain system architecture for the supply chain
34. Hellani, H., Sliman, L., Samhat, A.E., and Exposito, E. (2021). On blockchain integration with supply chain: Overview on data transparency. Logistics, 5.10.3390/logistics5030046 ↗
35. Linking permissioned blockchain to Internet of Things (IoT)-BIM platform for off-site production management in modular construction10.1016/j.compind.2021.103573 ↗
36. Scalable blockchain model using off-chain IPFS storage for healthcare data security and privacy10.1016/j.jpdc.2022.03.009 ↗
37. On-chain and off-chain data management for blockchain-Internet of Things: A multi-agent deep reinforcement learning approach10.1007/s10723-023-09739-x ↗
38. Trustworthy IoT data streaming using blockchain and IPFS10.1109/ACCESS.2022.3149312 ↗
39. Ali, M.S., Vecchio, M., Putra, G.D., Kanhere, S.S., and Antonelli, F. (2020). A decentralized peer-to-peer remote health monitoring system. Sensors, 20.10.3390/s20061656 ↗
40. Attribute-based access control10.1109/MC.2015.33 ↗
41. Role-based access control10.1016/S0065-2458(08)60206-5 ↗
42. Khanna, A., Sah, A., Bolshev, V., Burgio, A., Panchenko, V., and Jasiński, M. (2022). Blockchain–cloud integration: A survey. Sensors, 22.10.3390/s22145238 ↗
43. Liu, H., Yang, B., Xiong, X., Zhu, S., Chen, B., Tolba, A., and Zhang, X. (2023). A financial management platform based on the integration of blockchain and supply chain. Sensors, 23.10.3390/s23031497 ↗
44. Traditional and hybrid access control models: A detailed survey10.1155/2022/1560885 ↗
45. Decentralized access control with anonymous authentication of data stored in clouds10.1109/TPDS.2013.38 ↗
46. FACOS: Enabling privacy protection through fine-grained access control with on-chain and off-chain system10.1109/TIFS.2024.3427311 ↗
47. A blockchain-based efficient data integrity verification scheme in multi-cloud storage10.1109/ACCESS.2022.3211391 ↗
48. Mohanta, B.K., Awad, A.I., Dehury, M.K., Mohapatra, H., and Khan, M.K. (IEEE Internet Things J., 2025). Protecting IoT-Enabled Healthcare Data at the Edge: Integrating Blockchain, AES, and Off-Chain Decentralized Storage, IEEE Internet Things J., in press.10.1109/JIOT.2025.3528894 ↗
49. Delgado-von-Eitzen, C., Anido-Rifón, L., and Fernández-Iglesias, M.J. (2021). Blockchain applications in education: A systematic literature review. Appl. Sci., 11.10.3390/app112411811 ↗
50. Namane, S., and Ben Dhaou, I. (2022). Blockchain-based access control techniques for IoT applications. Electronics, 11.10.3390/electronics11142225 ↗
51. Almarri, M., and Aljughaiman, A. (2024). Blockchain technology for IoT security and trust: A comprehensive SLR. Sustainability, 16.10.3390/su162310177 ↗
52. Poon, J., and Buterin, V. (2025, February 08). Plasma: Scalable Autonomous Smart Contracts. Available online: https://www.plasma.io/plasma.pdf.
53. Chen, Z., Gu, J., and Yan, H. (2023). HAE: A hybrid cryptographic algorithm for blockchain medical scenario applications. Appl. Sci., 13.10.3390/app132212163 ↗
54. Blockchain technology: Beyond bitcoin
55. Yli-Huumo, J., Ko, D., Choi, S., Park, S., and Smolander, K. (2016). Where is current research on blockchain technology: A systematic review. PLoS ONE, 11.10.1371/journal.pone.0163477 ↗
56. Enhancing digital identity and financial security in decentralized finance (DeFi) through zero-knowledge proofs (ZKPs) and blockchain solutions for regulatory compliance and privacy
57. Xu, X., Weber, I.M., and Staples, M. (2019). Architecture for Blockchain Applications, Springer. [1st ed.].10.1007/978-3-030-03035-3 ↗
58. A blockchain-based Shamir’s threshold cryptography scheme for data protection in industrial internet of things settings10.1109/JIOT.2021.3125190 ↗
59. Threshold cryptography based secure access control for electronic medical record in an intensive care unit
60. A blockchain and smart contract-based data provenance collection and storing in cloud environment10.1007/s11276-022-02924-y ↗
61. Smart contract and IPFS-based trustworthy secure data storage and device authentication scheme in fog computing environment10.1007/s12083-022-01376-7 ↗
62. Storage State Analysis and Extraction of Ethereum Blockchain Smart Contracts10.1145/3548683 ↗
63. Khan, N., Aljoaey, H., Tabassum, M., Farzamnia, A., Sharma, T., and Tung, Y.H. (2022). Proposed model for secured data storage in decentralized cloud by blockchain Ethereum. Electronics, 11.10.3390/electronics11223686 ↗
64. Williams, S., and Diordiiev, M. (2025, February 08). Arweave: The Permanent Information Storage Protocol. Available online: https://www.arweave.org/files/arweave-lightpaper.pdf.
65. Williams, S., Diordiiev, M., Berman, L., Raybould, I., and Uemlianin, I. (2025, February 08). Arweave: A Protocol for Economically Sustainable Information Permanence. Available online: https://www.arweave.org/yellow-paper.pdf.
66. Frost, H. (2024). Incorporating Blockchain and Arweave Technologies into Archival Practices: An Exploration of the Rohingya Project’s R-Archive. [Ph.D. Thesis, University of California].
67. Dominating OP Returns: The Impact of Omni and Veriblock on Bitcoin10.1007/s10723-020-09537-9 ↗
68. Niu, Y., Wei, L., Zhang, C., Liu, J., and Fang, Y. (2017, January 22–24). An anonymous and accountable authentication scheme for Wi-Fi hotspot access with the Bitcoin blockchain. Proceedings of the 2017 IEEE/CIC International Conference on Communications in China (ICCC), Qingdao, China.10.1109/ICCChina.2017.8330337 ↗
69. XBlock-ETH: Extracting and Exploring Blockchain Data from Ethereum10.1109/OJCS.2020.2990458 ↗
70. Martha, G.I.R., Prabowo, H., Gaol, F.L., and Wiputra, R. (2024, January 28–29). Literature Review: Analysis of Essential Metadata Attributes of Digital Goods for Transaction in the Virtual World. Proceedings of the 2024 International Conference on Information Management and Technology, Bali, Indonesia.10.1109/ICIMTech63123.2024.10780804 ↗
71. A secure and efficient log storage and query framework based on blockchain10.1016/j.comnet.2024.110683 ↗
72. On the adoption of blockchain for business process monitoring10.1007/s10270-021-00959-x ↗
73. Liu, Z., Zhang, X., Li, G., Cui, H., Wang, J., and Xiao, B. (2024, January 9–13). A Secure and Reliable Blockchain-based Audit Log System. Proceedings of the ICC 2024 IEEE International Conference on Communications, Denver, CO, USA.10.1109/ICC51166.2024.10623012 ↗
74. Buterin, V. (2025, March 08). A Next-Generation Smart Contract and Decentralized Application Platform. Available online: https://blockchainlab.com/pdf/Ethereum_white_paper-a_next_generation_smart_contract_and_decentralized_application_platform-vitalik-buterin.pdf.
75. Sai, C.S., and Subramanian, N. (2022, January 24–26). Covert communication on IPFS using secured Filecoin-Slate blockchain. Proceedings of the 2022 IEEE 19th India Council International Conference, Kochi, India.10.1109/INDICON56171.2022.10039703 ↗
76. Guidi, B., Michienzi, A., and Ricci, L. (2022, January 7). Evaluating the decentralisation of Filecoin. Proceedings of the 3rd International Workshop on Distributed Infrastructure for the Common Good, Quebec City, QC, Canada.10.1145/3565383.3566108 ↗
77. Jadhav, S., Choudhari, G., Bhavik, M., Bura, R., and Bhosale, V. (2024, January 23–24). A Decentralized Document Storage Platform using IPFS with Enhanced Security. Proceedings of the 2024 8th International Conference on Computing, Communication, Control and Automation (ICCUBEA), Pune, India.10.1109/ICCUBEA61740.2024.10774730 ↗
78. Benet, J. (2014). IPFS-content addressed, versioned, p2p file system. arXiv.
79. Wilkinson, S., Boshevski, T., Brandoff, J., and Buterin, V. (2025, February 08). Storj: A Peer-to-Peer Cloud Storage Network. Available online: https://storj.io/storjv2.pdf.
80. Vorick, D., and Champine, L. (2025, February 08). Sia: Simple Decentralized Storage. Nebulous Inc.. Available online: https://sia.tech/sia.pdf.
81. Huang, H.-S., Chang, T.-S., and Wu, J.-Y. (2020, January 8–10). A secure file sharing system based on IPFS and blockchain. Proceedings of the International Electronics Communication Conference, Singapore.
82. Blockchain-based public auditing for big data in cloud storage10.1016/j.ipm.2020.102382 ↗
83. Public auditing scheme for integrity verification in distributed cloud storage system
84. On the adoption of erasure code for cloud storage by major distributed storage systems
85. Optimized proactive recovery in erasure-coded cloud storage systems10.1109/ACCESS.2023.3267106 ↗
86. Distributed storage scheme for encryption speech data based on blockchain and IPFS10.1007/s11227-022-04702-1 ↗
87. Tron, V., and Schonfeld, F. (2025, February 08). Swarm: The Decentralized Data Storage and Distribution Infrastructure for the Ethereum Web 3.0 Stack Whitepaper V0.3. Available online: https://www.ethswarm.org/The-Book-of-Swarm.pdf.
88. Niranjana, J., Daniel, E., Durga, S., and Kathiresan, V. (2024, January 14–16). Enhancing Storage Efficiency for Health Data Records through Block chain-Based Storj Mechanism. Proceedings of the 2024 3rd International Conference on Intelligent Technologies, Control, Optimization, and Signal Processing, Krishnankoil, Tamil Nadu, India.10.1109/INCOS59338.2024.10527538 ↗
89. Lobo, P.A., and Sarasvathi, V. (2021, January 1–3). Distributed file storage model using IPFS and blockchain. Proceedings of the 2021 2nd Global Conference for Advancement in Technology, Bangalore, India.10.1109/GCAT52182.2021.9587537 ↗
90. Kumar, R., Marchang, N., and Tripathi, R. (2020, January 7–11). Distributed off-chain storage of patient diagnostic reports in healthcare system using IPFS and blockchain. Proceedings of the International Conference on Communication Systems and Network, Bengaluru, India.10.1109/COMSNETS48256.2020.9027313 ↗
91. Towards secure and privacy-preserving data sharing in e-health systems via consortium blockchain10.1007/s10916-018-0995-5 ↗
92. A Closer Look into IPFS: Accessibility, Content, and Performance10.1145/3656015 ↗
93. Liu, Y., Liang, C., Mang, G., and Dong, Z. (July, January 28). Blockchain-based spectrum sharing over 6G hybrid cloud. Proceedings of the 2021 International Wireless Communications and Mobile Computing (IWCMC), Harbin City, China.10.1109/IWCMC51323.2021.9498978 ↗
94. Bartolucci, S., Caccioli, F., and Vivo, P. (2020). A percolation model for the emergence of the Bitcoin Lightning Network. Sci. Rep., 10.10.1038/s41598-020-61137-5 ↗
95. Gangwal, A., Gangavalli, H.R., and Thirupathi, A. (2022). A survey of layer-two blockchain protocols. arXiv.10.1016/j.jnca.2022.103539 ↗
96. Blockchain state channels: A state of the art10.1109/ACCESS.2021.3131419 ↗
97. Khan, D., Jung, L.T., and Hashmani, M.A. (2021). Systematic literature review of challenges in blockchain scalability. Appl. Sci., 11.10.3390/app11209372 ↗
98. Blockchain technology for healthcare: Facilitating the transition to patient-driven interoperability10.1016/j.csbj.2018.06.003 ↗
99. Tahir, N.U.A., Rashid, U., Hadi, H.J., Ahmad, N., Cao, Y., Alshara, M.A., and Javed, Y. (2024). Blockchain-based healthcare records management framework: Enhancing security, privacy, and interoperability. Technologies, 12.10.3390/technologies12090168 ↗
100. A blockchain-based secure storage and access control scheme for supply chain finance10.1007/s11227-022-04655-5 ↗