A forgery attack on the Block.co blockchain-based digital credential certification system

• URL: http://arxiv.org/abs/2606.31462v1
• Date: Tue, 30 Jun 2026 10:42:26 GMT
• Title: A forgery attack on the Block.co blockchain-based digital credential certification system
• Abstract summary: We show that Block.co has a vulnerability that allows the production of forged certificates that are recognized as valid by the system.<n>Our attack is likely to be extendable to other systems adopting the same approach.
• Score: 5.329759624351636
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Certification of digital documents, such as academic credentials, seems a particularly suitable application for the use of blockchain and distributed ledger technologies. Indeed, these technologies enable decentralized certification systems that rely on the immutability and persistence of their distributed ledgers. However, in the absence of a central trusted authority, it is not easy to guarantee the authenticity of the connection between the real identity of an academic institution and the digital identity of the certificate issuer. In this paper, we demonstrate that one of such systems, known as Block.co, has a vulnerability that allows the production of forged certificates that are recognized as valid by the system. Since this is an inherent limitation of the approach used for blockchain-based certification, our attack is likely to be extendable to other systems adopting the same approach.

Related papers

• Identity-Bound Academic Credentials on Blockchain: On-Chain Issuer Accreditation with ERC-3643 and OnchainID [39.146761527401424]
  We present the design of a registry for identity-bound academic credentials that composes OnchainID self-sovereign identities.<n>Each certificate is represented as a signed, updatable claim bound to a student's identity and verifiable by any third party without a wallet.<n>We make explicit the tension between a transferable-security-token-standard and non-transferable credentials, clarifying which of its guarantees carry over.
  arXiv  Detail & Related papers  (2026-07-17T17:18:34Z)
• Binding Agent ID: Unleashing the Power of AI Agents with accountability and credibility [46.323590135279126]
  BAID (Binding Agent ID) is a comprehensive identity infrastructure establishing verifiable user-code binding.<n>We implement and evaluate a complete prototype system, demonstrating the practical feasibility of blockchain-based identity management and zkVM-based authentication protocol.
  arXiv  Detail & Related papers  (2025-12-19T13:01:54Z)
• Trusted Compute Units: A Framework for Chained Verifiable Computations [41.94295877935867]
  This paper introduces the Trusted Compute Unit (TCU), a unifying framework that enables composable and interoperable computations across heterogeneous technologies.<n>By enabling secure off-chain interactions without incurring on-chain confirmation delays or gas fees, TCUs significantly improve system performance and scalability.
  arXiv  Detail & Related papers  (2025-04-22T09:01:55Z)
• Quantum digital signature based on single-qubit without a trusted third-party [45.41082277680607]
  We propose a novel quantum digital signature protocol without a trusted third-party.<n>We prove that the protocol has information-theoretical unforgeability.
  arXiv  Detail & Related papers  (2024-10-17T09:49:29Z)
• Towards Credential-based Device Registration in DApps for DePINs with ZKPs [46.08150780379237]
  We propose a credential-based device registration (CDR) mechanism that verifies device credentials on the blockchain. We present a general system model, and technically evaluate CDR using zkSNARKs with Groth16 and Marlin.
  arXiv  Detail & Related papers  (2024-06-27T09:50:10Z)
• A Novel Endorsement Protocol to Secure BFT-Based Consensus in Permissionless Blockchain [1.3723120574076126]
  BFT-based consensus mechanisms are widely adopted in the permissioned blockchain to meet the high scalability requirements of the network. Sybil attacks are one of the most potential threats when applying BFT-based consensus mechanisms in permissionless blockchain. This paper presents a novel endorsement-based bootstrapping protocol with a signature algorithm that offers a streamlined, scalable identity endorsement and verification process.
  arXiv  Detail & Related papers  (2024-05-04T03:00:33Z)
• Enhancing Trust and Privacy in Distributed Networks: A Comprehensive Survey on Blockchain-based Federated Learning [51.13534069758711]
  Decentralized approaches like blockchain offer a compelling solution by implementing a consensus mechanism among multiple entities. Federated Learning (FL) enables participants to collaboratively train models while safeguarding data privacy. This paper investigates the synergy between blockchain's security features and FL's privacy-preserving model training capabilities.
  arXiv  Detail & Related papers  (2024-03-28T07:08:26Z)
• On Cryptographic Mechanisms for the Selective Disclosure of Verifiable Credentials [39.4080639822574]
  Verifiable credentials are a digital analogue of physical credentials. They can be presented to verifiers to reveal attributes or even predicates about the attributes included in the credential. One way to preserve privacy during presentation consists in selectively disclosing the attributes in a credential.
  arXiv  Detail & Related papers  (2024-01-16T08:22:28Z)
• Student Certificate Sharing System Using Blockchain and NFTs [0.0]
  We propose a certificate sharing system based on blockchain that gives students authority and control over their academic certificates. Students may access the data created by each individual institute in a single platform, filter the view of the relevant courses according to their requirements, and mint their certificate metadata as NFTs.
  arXiv  Detail & Related papers  (2023-10-30T21:45:12Z)
• Incorporating Zero-Knowledge Succinct Non-interactive Argument of Knowledge for Blockchain-based Identity Management with off-chain computations [0.8621608193534839]
  A novel blockchain-based fingerprint authentication system is proposed that integrates zk-SNARKs. The proposed method has the potential to provide a secure and efficient solution for blockchain-based identity management.
  arXiv  Detail & Related papers  (2023-10-30T11:24:05Z)
• DocCert: Nostrification, Document Verification and Authenticity Blockchain Solution [0.08192907805418582]
  Many institutions and organizations require nostrification and verification of qualification as a prerequisite for hiring. In this digital era where most applications happen online, and document copies are uploaded, the traditional signature and seal methods are obsolete. We propose a blockchain based nostrification system, where awarding institutions generate a digital certificate, store in a public but permissioned blockchain, where students and other stakeholders may verify.
  arXiv  Detail & Related papers  (2023-10-13T14:23:58Z)
• Blockchain-Enabled Federated Learning: A Reference Architecture Design, Implementation, and Verification [3.1457219084519004]
  This paper presents a novel reference architecture for blockchain-enabled federated learning (BCFL) We define smart contract functions, stakeholders and their roles, and the use of interplanetary file system (IPFS) as key components of BCFL.
  arXiv  Detail & Related papers  (2023-06-19T10:40:30Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.