The top 8 problems with blockchain (2024)

• Blockchain is still relatively young, and software flaws remain
• Few business leaders fully understand blockchain and related technologies
• Blockchain is not always suitable for storing data
• Scaling remains an issue (but less so than it once was)
• Blockchain requires governance
• By default, blockchains share information you might not want shared
• Blockchains are only as secure as the weakest link
• Smart contracts are neither smart nor contracts

Show More

While blockchain holds tremendous potential for creating new financial, supply chain and digital identity systems, it's often erroneously seen as a panacea for business problems.

The myriad of pilots and proofs of concept by large corporations and government agencies are showing real promise, but those projects don't always lead to obvious business cases that justify doing something differently. Sometimes a tried and true technology like a relational database can perform the task much more efficiently than a distributed ledger based on peer-to-peer technology that will require complex governance and rules.

For example, a blockchain that offers full visibility across an entire value chain may make a ton of sense, but when you weigh the costs for setting up that ecosystem and building out that blockchain, it may not make fiscal sense.

"Who is going to pay for it, and how will the benefits that make so much intuitive sense accrue to the participants? If the costs are shared, are they shared by outcomes? By return on investment? These are knotty issues that often get bigger as pilots move to production," said James Wester, research director for IDC Worldwide Blockchain Strategies. "In other words, the pilot proved the concept works, but at scale, the costs and considerations become much bigger."

Part of problem has to do with the way blockchain projects have been funded. Pilots and PoCs tend to come from innovation or R&D budgets, but once they go to production, the costs have to hit a business unit or company. And when blockchains involve partner companies working together on an open ledger, the partners must agree on complex rules and how the project is funded.

"Without a compelling business case, those costs may be less attractive. And given the distributed nature of blockchain, if one party decides not to participate, the whole thing can fall apart," Wester said.

Here are the top problems companies are likely to encounter with blockchain:

Blockchain is still relatively young, and software flaws remain

While the first distributed blockchain was conceptualized in 2008 by "Satoshi Nakamoto" (a pseudonym), real-world applications for the technology are only a few years old.

The two most prevalent blockchain platforms, Hyperledger and Ethereum, lack maturity, which could present unforeseen problems in deployment. CIOs and their teams should consider the potential discovery of serious bugs in the software, said Martha Bennett, a principal analyst at Forrester Research. They might even need to scrap a blockchain project and begin again after running into software glitches.

For example, Ethereum's script for executing smart contracts — Solidity — doesn't currently support the use of decimal points, which would require developers to create a workaround or start over.

"I have seen that happen on a number of occasions," Bennett said. "When I talked to people working on projects — and they are working on big, serious projects — they will also say the longer they work with the technology, the more they realize just how immature it is."

What has changed is that startups and leading enterprise technology vendors, such as IBM and Oracle, have been working steadily to provide tools that abstract away from the underlying complexity of specific programming environments, along with "smart contract scripting languages that provide appropriate guardrails," Bennett said.

"Overall, it's worth pointing out that not only tooling is improving, but there are now also quite a few services that make it easier for companies to get blockchain networks up and running," Bennett noted.

Few business leaders fully understand blockchain and related technologies

Blockchain is often used as shorthand for a host of accompanying technologies, architectures, use cases and even philosophies.

At its most basic, it's a peer-to-peer-based distributed ledger or database organized by a set of protocols combined with a blockchain, meaning a series of encrypted sets of data that record immutable changes over time. While that may be relatively straightforward, depending on how the technology is being implemented, the definition can become convoluted.

Wester is often tasked with defining blockchain along with a "basket of technologies" that fall under the general heading of "blockchain," including tokenized assets, cryptocurrencies, crypto wallets, distributed ledgers, smart contracts, and self-sovereign identity; all of the latter group are applications or architectures that can run on top of a blockchain network, but are not a native part of the technology.

"We are still in the stages of explaining how the technology works," Wester said. "Additionally, it's possible to have relatively smart discussions about the technology without actually knowing some of those differences, so many semi-informed people don't even bother to learn the terms and technology."

Blockchain is not always suitable for storing data

One of blockchain's greatest assets is its write-once, append-many distributed nature; it can be easily deployed across disparate nodes on the web, and yet each record contains its own hash, making it immutable.

A distributed ledger via a blockchain-based network can provide a richer, more comprehensive transaction history than the selective view users may get if they've only got internal systems and maybe some blacklists to review.

However, that doesn't mean data related to transactions must be part of that chain.

For example, if blockchain users include images as part of their transactions, the data volume would quickly grow — as would network overhead, given that an append-only data store gets bigger and bigger over time. Because of blockchain's distributed nature, all data must be replicated to all nodes in the chain, Bennett explained.

It's better to use a relational database with separate networked storage for some transactional tasks than to grow a blockchain out of control. "Rule of thumb: don't ever, ever go for a blockchain-based architecture when a relational database will do the job," Bennett said.

While not all blockchain frameworks require full replication of data across nodes, all systems need to be very carefully architected to take into consideration regulatory requirements, the need for confidentiality, and the potential latency issues, according to Bennett. "That determines what goes on chain and what doesn't," she said.

Scaling remains an issue (but less so than it once was)

One of the major issues facing blockchain involves scalability, or its ability to grow without consuming increasingly vast amounts of CPU capacity and to complete transactions in near real time, such as clearing payments via credit cards. Visa says its network — VisaNet — handles up to 65,000 transactions per second.

Due to its chain nature, each new record inserted into a blockchain has to be serialized, which means that the rate of updates is slower than with traditional databases, which can update data in parallel.

Network World

While blockchain consortiums and startups alike are piloting blockchains that can handle ten thousand transactions per second or even greater capacity than VisaNet's network, most are still hampered by scaling issues. Popular blockchain protocols such as bitcoin support just three to five transactions per second, while Ethereum can support about 20 per second.

The degree to which scaling remains an issue differs between frameworks and governance models. For example, the Ethereum Foundation is working on using a proof of stake consensus model as well as techniques such as sharding to increase its protocol's performance.

"How you architect the network also matters — latency can be more of a challenge than compute power," Bennett said. "For example, I've seen very impressive test results, but they're meaningless if they're achieved by renting a huge AWS cluster for your test."

Avivah Litan, a Gartner vice president of research, said scalability is more of a governance issue today than a technical one.

"With permissioned blockchain, the whole concept of [a zero trust model] falls apart," Litan said. "You have a limited number of witnesses operating the nodes and the consensus [process], so you really need to trust those parties, and you need legal frameworks for if they do anything wrong. To me that's not really scalable."

In the context of blockchain, the oft-used metric "transactions per second" is also relatively meaningless, Bennett argued. "Firstly, how do you define 'transaction'? And secondly, just processing lots of transactions is beside the point if you can't finalize them," Bennett said.

Blockchain requires governance

Blockchain does not inherently eliminate central authorities; it substitutes one type of authority or trust model for another, according to a recent report by the Federal Reserve Bank of Minneapolis.

"Instead of placing trust in a central authority such as a broker or a central bank to facilitate an exchange, participants must trust in the blockchain system design and technology, and the network rules," the report stated. "It does not eliminate the need for some form of governance authority to establish, implement, and enforce the rules and to respond to unexpected system challenges and exceptions. While members of such a governance body may be distributed or decentralized, a point of governance is still needed to address operational issues."

Dispute resolution, or how to come to an agreement when something goes wrong, also remains a key governance issue, Bennett said.

For example, blockchain participants need to agree on how they'll abide by the way a smart contract operates, and what happens in the case of a disputed contract.

"If something happens that you forgot to code into it, there needs to be an off-chain way of coding it in, or a 'kill switch' if it starts acting in a way that was not intended," Bennett said.

By default, blockchains share information you might not want shared

Public blockchains — the most prevalent form — are open and transparent, meaning anyone on the chain can see every transaction. That's the case with bitcoin.

Public blockchains also have the nascent ability to be the more tamper-proof because they can grow to thousands (hypothetically, even millions) of nodes, like an enormous distributed computer. The more nodes, the more difficult it is for a bad actor to take control of a majority of the compute power and either prevent new transactions from gaining confirmation or create and confirm their own entries; being able to do that would enable nefarious behavior, such as double spending bitcoin or other cryptocurrencies.

When you're working in a commercial environment, on the other hand, complete transparency isn't typically a good thing. For example, if blockchain technology is being used as part of a stock trading platform as a mechanism for instant settlement, each participant in the chain can see what every other user is doing; that would allow one user to trade against another in real time.

In another example, if a manufacturer is using blockchain as an open ledger for its suppliers, it would allow one contractor to see all other subcontractors in the chain.

"I might not want my customer to see who all my subcontractors are, even though you may want a particular transaction flow on the chain," Bennett said. "So, you immediately get into how to decide how... you keep transaction data confidential."

There are methods for creating exclusivity on blockchains so that only some users can see confidential or sensitive data. For example, Hyperledger, an open-source blockchain project under the Linux Foundation, uses "channels" or sub-chains to ensure that only some authorized users can see sensitive information.

Blockchains are only as secure as the weakest link

As mentioned above, there are two general types of blockchain, public and private. Public blockchains allow anyone to join; bitcoin is a good example of a public blockchain where anyone who wants to purchase the cryptocurrency can join in the chain. It's open and transparent, meaning everyone in the chain can see all the transactions. If one or even many participants attempt to game the system, they will be overwhelmed by the majority of users who have to validate new transactions.

"The bottom line is you don't have to trust your peers in a large public blockchain network. That's the Byzantine General's problem that's solved by public blockchain," Litan said.

Conversely, private or permissioned blockchains are centrally administered and require permission to join; they are suited for use within a single organization or among partner organizations. Only authorized users can join.

Both public and private blockchains are natively secure because they're immutable (i.e., each record or block is unchangeable and tied to all others), and to add new blocks requires a consensus among users; how large that consensus must be is dependent on the blockchain in use. For some, it's 50%; for others, it's more. The immutability and consensus requirement of blockchains make them natively more secure than most other networking technologies, but depending on the architecture and who's running the nodes and where, blockchains are vulnerable to attack, as has been seen time and time again.

Related:

• Emerging Technology
• Security
• Financial Services Industry
• Blockchain

Page 1 of 2

It’s time to break the ChatGPT habit