Problems and Vulnerabilities Behind Hyperledger Enterprise Blockchains

Abstract

Hyperledger claims permissioned blockchains ensure immutability of data in a network. However, the decentralized nature of blockchains opens doors to many security issues not seen in a standard web application. Maintaining blockchain security comes at a compromise of speed and extreme complexity. Developers usually reduce security endorsements to improve performance. Since the blockchain was designed to run arbitrary code, a single compromised peer could provide unauthorized access. This research explores how standard web application testing tools can be used to attack permissioned blockchains. This project lays the groundwork for greater blockchain security in the future.