Security Assessment of Smart Contract Integration and Wallet Interaction in Decentralized Applications: A Case Study of BlockScribe
Source abstract
Abstract
Smart contracts and cryptocurrency wallets are foundational components of decentralized applications (dApps) on blockchain platforms such as Ethereum. While these technologies enable secure, transparent, and automated transactions, their integration also introduces complex security challenges. This study presents a security-oriented analysis of smart contract and wallet integration, focusing on BlockScribe—a decentralized Ethereum-based application for digital record certification. We systematically identify and categorize security risks arising from the interaction between wallet interfaces and smart contract logic. In particular, we analyze how user authorization flows, transaction design, and contract modularity affect the security posture of the entire dApp. To support our findings, we conduct an empirical evaluation using static analysis tools and formal verification methods, examining both contract-level vulnerabilities and integration-level flaws. Our results highlight several overlooked attack surfaces in wallet–contract communication patterns, including reentrancy amplification, permission mismanagement, and transaction ordering issues. We further discuss implications for secure dApp development and propose mitigation strategies that improve the robustness of wallet–contract ecosystems. This case study contributes to a deeper understanding of integration-layer vulnerabilities in blockchain-based systems and offers practical guidance for developers and auditors aiming to strengthen smart contract security.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Blockchain Technology Applications and Security · FinTech, Crowdfunding, Digital Finance
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Science, Cracow University of Technology, Warszawska 24, 31-155 Cracow, Poland
Funding
Cracow University of Technology, Cracow, Poland
References (52)
Show source-provided references
1. Nakamoto, S. (2020, January 01). Bitcoin: A Peer-to-Peer Electronic Cash System. Bitcoin.org. Available online: https://bitcoin.org/bitcoin.pdf.
2. Antonopoulos, A.M., and Wood, G. (2018). Mastering Ethereum: Building Smart Contracts and DApps, O’Reilly Inc.
3. Blockchain-Enabled Smart Contracts: Architecture, Applications, and Future Trends10.1109/TSMC.2019.2895123 ↗
4. Suratkar, S., Shirole, M., and Bhirud, S. (2020, January 28–29). Cryptocurrency Wallet: A Review. Proceedings of the 2020 4th International Conference on Computer, Communication and Signal Processing (ICCCSP), Chennai, India.10.1109/ICCCSP49186.2020.9315193 ↗
5. MetaMask (2025, January 01). The Ultimate Crypto Wallet for DeFi, Web3 Apps, and NFTs. Available online: https://metamask.io.
6. Trust (2025, January 01). Best Crypto Wallet for Web3, NFTs and DeFi. Available online: https://trustwallet.com.
7. CoinWeb, and Oh, S. (2020, January 01). How Many Crypto Wallets Are There in 2025—Statistics & Data. Available online: https://coinweb.com/trends/how-many-crypto-wallets-are-there/.
8. CoinWeb, and Oh, S. (2019). Blockchain Networks—Security Aspects and Consensus Models. J. Telecommun. Inf. Technol., 76, 46–52.10.26636/jtit.2019.132019 ↗
9. Bashir, I. (2023). Mastering Blockchain. A Technical Reference Guide to the Inner Workings of Blockchain, from Cryptography to DeFi and NFTs, Packt Publishing. [4th ed.].
10. Blockchain Technology: Consensus Protocol Proof of Work and Proof of Stake
11. Thin, W.Y.M.M., Dong, N., Bai, G., and Dong, J.S. (2018, January 12–14). Formal Analysis of a Proof-of-Stake Blockchain. Proceedings of the 2018 23rd International Conference on Engineering of Complex Computer Systems (ICECCS), Melbourne, VIC, Australia.
12. Chapter Seven-Consensus mechanisms and information security technologies10.1016/bs.adcom.2019.05.001 ↗
13. Ethereum.org (2020, January 01). Ethereum Development Documentation. Available online: https://ethereum.org/en/developers/docs/.
14. Ethereum.org (2020, January 01). Ethereum Whitepaper. Available online: https://ethereum.org/en/whitepaper/.
15. The Solidity Authors (2025, January 01). Solidity 0.8.28. Available online: https://soliditylang.org/blog/2024/10/09/solidity-0.8.28-release-announcement/.
16. Vyper Team (2020, January 01). Vyper—Vyper Documentation. Available online: https://docs.vyperlang.org/en/stable/.
17. Ethereum Foundation (2020, January 01). Fe—A Next Generation, Statically Typed, Future-Proof Smart Contract Language for the Ethereum Virtual Machine. Available online: https://fe-lang.org.
18. Sen, S. (2020, January 01). What is an ABI?. Available online: https://www.quicknode.com/guides/ethereum-development/smart-contracts/what-is-an-abi.
19. Remix (2020, January 01). Welcome to Remix’s Documentation!—Remix-Ethereum IDE 1 Documentation. Available online: https://remix-ide.readthedocs.io/en/latest/.
20. Nomic Foundation (2020, January 01). Hardhat: Ethereum Development Environment. Available online: https://hardhat.org.
21. Web3: The Next Internet Revolution10.1109/JIOT.2024.3432116 ↗
22. Lantz, L., and Cawrey, D. (2020). Mastering Blockchain: Unlocking the Power of Cryptocurrencies, Smart Contracts, and Decentralized Applications, O’Reilly Media.
23. Ledger (2020, January 01). Hardware Wallet & Crypto Wallet—Security for Crypto. Available online: https://www.ledger.com.
24. Bitcoin & Crypto Security (2020, January 01). Trezor Hardware Wallet (Official). Available online: https://trezor.io.
25. AlphaWallet (2020, January 01). Open Source Ethereum Wallet | Best Web3 Wallet. Available online: https://alphawallet.com.
26. Electrum (2020, January 01). Electrum Bitcoin Wallet. Available online: https://electrum.org.
27. Atomic Wallet (2020, January 01). Atomic: Best Crypto Wallet. Available online: https://atomicwallet.io.
28. Lee, W.-M. (2023). Beginning Ethereum Smart Contracts Programming: With Examples in Python, Solidity, and JavaScript, Apress.10.1007/978-1-4842-9271-6 ↗
29. Infura (2020, January 01). Web3 Development Platform | IPFS API & Gateway | Blockchain Node Service. Available online: https://www.infura.io.
30. Morley, M. (2020, January 01). JSON-RPC. Available online: https://www.jsonrpc.org.
31. Argent (2020, January 01). Coinbase Wallet—Your Key to the World of Crypto. Available online: https://www.coinbase.com/wallet.
32. Argent (2020, January 01). Argent—The Best Starknet Wallet for DeFi and NFTs. Available online: https://www.argent.xyz.
33. Understanding Cyber Threats: Common Vulnerabilities and How to Mitigate Them
34. Mcnally, C. (2020, January 01). CipherTrace Warns of Surge in Funds Lost to MetaMask Phishers. Available online: https://cointelegraph.com/news/ciphertrace-warns-of-surge-in-funds-lost-to-metamask-phishers.
35. Palladino, S. (2020, January 01). The Parity Wallet Hack Explained. Available online: https://blog.openzeppelin.com/on-the-parity-wallet-multisig-hack-405a8c12e8f7.
36. (2020, January 01). Orion. Available online: https://orion.xyz.
37. Shashank, K. (2020, January 01). Orion Protocol Hack Analysis—Missing Reentrancy Protection. SolidityScan. Available online: https://blog.solidityscan.com/orion-protocol-hack-analysis-missing-reentrancy-protection-f9af6995acb3.
38. Luu, L., Chu, D., Olickel, H., Saxena, P., and Hobor, A. (2016, January 24–28). Making Smart Contracts Smarter. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS ’16), Vienna, Austria.10.1145/2976749.2978309 ↗
39. Tikhomirov, S., Voskresenskaya, E., Ivanitskiy, I., Takhaviev, R., Marchenko, E., and Alexandrov, Y. (2018, January 27). SmartCheck: Static analysis of ethereum smart contracts. Proceedings of the 1st International Workshop on Emerging Trends in Software Engineering for Blockchain (WETSEB ’18), Gothenburg, Sweden.10.1145/3194113.3194115 ↗
40. Tsankov, P., Dan, A., Drachsler-Cohen, D., Gervais, A., Bünzli, F., and Vechev, M. (2018, January 15–19). Securify: Practical Security Analysis of Smart Contracts. Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (CCS ’18), Toronto, ON, Canada.10.1145/3243734.3243780 ↗
41. Torres, C., Steichen, M., and State, R. (2019, January 14–16). The Art of The Scam: Demystifying Honeypots in Ethereum Smart Contracts. Proceedings of the 28th USENIX Security Symposium (USENIX Security 19), Santa Clara, CA, USA. Available online: https://www.usenix.org/conference/usenixsecurity19/presentation/ferreira.
42. Meta Platforms Inc. (2025, January 01). React. Available online: https://react.dev.
43. Sepolia Resources (2020, January 01). Sepolia Resources–Information hub for the Sepolia Testnet. SolidityScan, Available online: https://sepolia.dev.
44. Etherscan (2020, January 01). TESTNET Sepolia (ETH) Blockchain Explorer. Available online: https://sepolia.etherscan.io.
45. Material for MkDocs (2020, January 01). Smart Contract Weakness Classification. Available online: https://swcregistry.io.
46. Trail of Bits (2020, January 01). Slither, the Smart Contract Static Analyzer. Available online: https://github.com/crytic/slither.
47. MythX (2020, January 01). Mythril. Available online: https://github.com/Consensys/mythril.
48. Ethereum Enterprise Alliance (2024, January 01). EEA EthTrust Security Levels Specification, Version 2.0. Available online: https://entethalliance.org/specs/ethtrust-sl/.
49. CertiK Skynet (2020, January 01). Web3 Security, Due Diligence and Insights. Available online: https://skynet.certik.com/.
50. Chaliasos, S., Reif, I., Torralba-Agell, A., Ernstberger, J., Kattis, A., and Livshits, B. (2024, January 23–25). Analyzing and Benchmarking ZK-Rollups. Proceedings of the 6th Conference on Advances in Financial Technologies, Vienna, Austria. Available online: https://eprint.iacr.org/2024/889.pdf.
51. Rabby Wallet (2020, January 01). Your Go-to Wallet for Ethereum and EVM. Available online: https://rabby.io.
52. OKX (2020, January 01). Buy Bitcoin & Crypto|Crypto Exchange, App & Wallet. Available online: https://www.okx.com.