Chapter 3 — Web3, blockchain and cryptoasset security: specialist evidence
Lesson map
Lesson 03 published. Map, example, EX011.
flowchart TD
N0["Learning outcomes"]
N1["3.1 Appraising research"]
N2["3.2 Relevance to permissioned settlement"]
N3["3.3 Synthesis for practitioners"]
N4["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4
N4 --> EX["Worked example"]
EX --> Q["Exercise EX011"]
Logical drawing
flowchart LR
N0["Learning outcomes"]
N1["3.1 Appraising research"]
N2["3.2 Relevance to permissioned settlement"]
N3["3.3 Synthesis for practitioners"]
N4["Synthesis"]
N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX011"]
[Learning outcomes]
|
v
[3.1 Appraising research]
|
v
[3.2 Relevance to permissioned settlement]
|
v
[3.3 Synthesis for practitioners]
|
v
[Synthesis]
|
v
[Worked example] --> [Exercise EX011]
Learning outcomes
You will (1) appraise specialist research; (2) judge relevance to permissioned settlement; (3) synthesise evidence for practitioners.
3.1 Appraising research
Nadia appraises specialist studies. Atzei and colleagues' 2017 survey classifies contract weaknesses, Luu and colleagues' 2016 paper examines how contracts can depend on conditions outside the developer's control, and Daian and colleagues' 2020 work studies transaction-ordering effects on public chains. For each she notes the question, method, data and limitations. She asks whether findings were measured on public chains with open participation, which differ from the pilot's permissioned setting. Appraisal is about understanding what a study can and cannot support, not about accepting or rejecting it wholesale.
3.2 Relevance to permissioned settlement
Some findings transfer directly: weaknesses in contract logic exist whatever the ledger type, so Atzei's classes and the SWC registry remain relevant. Others transfer partly: ordering effects described by Daian depend on open mempools and anonymous block producers, which the pilot lacks, but a dishonest validator operator could still reorder transactions within its turn. Nadia rates each finding as directly, partly or weakly relevant, with a reason. This structured judgement prevents both overreaction to public-chain risks and complacency about risks that still apply among known parties.
3.3 Synthesis for practitioners
Nadia writes a two-page synthesis for the risk committee. It explains three evidence-based points: contract logic needs independent review whatever the ledger; ordering risk is reduced but not removed among known validators; and key control remains a central risk. Each point cites its sources and states its confidence. She avoids technical detail that committee members cannot evaluate and avoids any description of how weaknesses could be used. Professor Tanaka notes that good synthesis translates evidence into decisions without distorting it, which is a core skill for senior practitioners.
Worked example
Nadia rates research relevance to the permissioned pilot and synthesises three points: independent logic review, reduced ordering risk and central key risk.
Synthetic case. The appraisal is synthetic; Atzei et al. (2017), Luu et al. (2016), Daian et al. (2020) and the SWC registry are real sources.
Errors and limits
Transferring public-chain findings unchanged to permissioned ledgers can overstate or understate risk.
Exercises
- EX011 — Appraisal question. What does Nadia ask about each study's setting? Rubric: 3 = whether findings came from public open chains;; 2 = setting;; 1 = author fame;; 0 = none.
- EX012 — Direct transfer. Which findings transfer directly? Rubric: 3 = contract logic weaknesses;; 2 = logic flaws;; 1 = ordering effects;; 0 = none.
- EX013 — Partial transfer. Why does ordering risk only partly transfer? Rubric: 3 = pilot lacks open mempools, but a validator could still reorder;; 2 = known validators;; 1 = fully transfers;; 0 = none.
- EX014 — Synthesis length. How long is the synthesis for the committee? Rubric: 3 = two pages;; 2 = 2 pages;; 1 = fifty pages;; 0 = none.
- EX015 — Synthesis exclusion. What does the synthesis deliberately avoid? Rubric: 3 = any description of how weaknesses could be used;; 2 = misuse detail;; 1 = citations;; 0 = none.
Synthesis
Careful appraisal and relevance rating turn specialist research into practical guidance.
Continue studying — chapter 03 of 12
← Chapter 02 (draft) · Course chapter index · Chapter 04 (draft) →