{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,9]],"date-time":"2026-05-09T21:34:58Z","timestamp":1778362498564,"version":"3.51.4"},"reference-count":60,"publisher":"Association for Computing Machinery (ACM)","issue":"3","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Distrib. Ledger Technol."],"published-print":{"date-parts":[[2026,9,30]]},"abstract":"<jats:p>The popularity of smartphones has led to the growth of mobile app markets, creating a need for enhanced transparency, global access, and secure downloading. This article introduces AGChain, a blockchain-based gateway that enables trustworthy app delegation within existing markets. AGChain ensures that markets can continue providing services while users benefit from permanent, distributed, and secure app delegation. During its development, we address two key challenges: significantly reducing smart contract gas costs and enabling fully distributed IPFS-based file storage. Additionally, we tackle three system issues related to security and sustainability. We have implemented a prototype of AGChain on Ethereum and Polygon blockchains, achieving effective security and decentralization with a minimal gas cost of around 0.0028 USD per app upload (no cost for app download). AGChain also exhibits reasonable performance with an average overhead of 12%.<\/jats:p>","DOI":"10.1145\/3709157","type":"journal-article","created":{"date-parts":[[2024,12,23]],"date-time":"2024-12-23T08:36:52Z","timestamp":1734943012000},"page":"1-22","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["AGChain: A Blockchain-based Gateway for Trustworthy App Delegation from Mobile App Markets"],"prefix":"10.1145","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6104-6729","authenticated-orcid":false,"given":"Mengjie","family":"Chen","sequence":"first","affiliation":[{"name":"Mask Network, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4792-4433","authenticated-orcid":false,"given":"Xiao","family":"Yi","sequence":"additional","affiliation":[{"name":"The Chinese University of Hong Kong, Hong Kong, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3752-0718","authenticated-orcid":false,"given":"Daoyuan","family":"Wu","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology, Hong Kong, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9404-5848","authenticated-orcid":false,"given":"Jianliang","family":"Xu","sequence":"additional","affiliation":[{"name":"Hong Kong Baptist University, Hong Kong, Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8256-6988","authenticated-orcid":false,"given":"Yingjiu","family":"Li","sequence":"additional","affiliation":[{"name":"University of Oregon, Eugene, Oregon, United States"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9412-9961","authenticated-orcid":false,"given":"Debin","family":"Gao","sequence":"additional","affiliation":[{"name":"Singapore Management University, Singapore, Singapore, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,5,6]]},"reference":[{"key":"e_1_3_2_2_2","unstructured":"2016. Logs - How does ethereum make use of bloom filters? Retrieved from https:\/\/ethereum.stackexchange.com\/questions\/3418\/how-does-ethereum-make-use-of-bloom-filters\/"},{"key":"e_1_3_2_3_2","unstructured":"2017. Change your app store country to download region-locked apps & games on your iPhone. Retrieved from https:\/\/tinyurl.com\/cehv4cxy"},{"key":"e_1_3_2_4_2","unstructured":"2018. Diving Into ethereum\u2019s world state. Retrieved from https:\/\/medium.com\/cybermiles\/diving-into-ethereums-world-state-c893102030ed"},{"key":"e_1_3_2_5_2","unstructured":"2018. Easily change your play store country to download region-locked apps & games. Retrieved from https:\/\/tinyurl.com\/wbbt96ea"},{"key":"e_1_3_2_6_2","unstructured":"2018. ETH bloom filters. Retrieved from https:\/\/medium.com\/@naterush1997\/eth-goes-bloom-filling-up-ethereums-bloom-filters-68d4ce237009"},{"key":"e_1_3_2_7_2","unstructured":"2018. Top 5 most dangerous public WIFI attacks. Retrieved from https:\/\/e-channelnews.com\/top-5-most-dangerous-public-wifi-attacks\/"},{"key":"e_1_3_2_8_2","unstructured":"2019. 5 best VPNs to watch TVB from anywhere. Retrieved from https:\/\/www.comparitech.com\/blog\/vpn-privacy\/bvpn-tvb\/"},{"key":"e_1_3_2_9_2","unstructured":"2020. Filecoin network performance. Retrieved from https:\/\/docs.filecoin.io\/about-filecoin\/network-performance\/"},{"key":"e_1_3_2_10_2","unstructured":"2020. How to access Google play store in China. Retrieved from https:\/\/www.bestvpn.co\/how-to-unblock-websites\/access-google-play-store-china\/"},{"key":"e_1_3_2_11_2","unstructured":"2020. How to unblock hulu from anywhere. Retrieved from https:\/\/www.vpnmentor.com\/blog\/how-to-unblock-hulu-from-anywhere\/"},{"key":"e_1_3_2_12_2","unstructured":"2020. JS IPFS. Retrieved from https:\/\/js.ipfs.io\/"},{"key":"e_1_3_2_13_2","unstructured":"2020. web3.js for ethereum. Retrieved from https:\/\/web3js.readthedocs.io\/en\/v1.3.0\/"},{"key":"e_1_3_2_14_2","unstructured":"2020. web3.py for Python. Retrieved from https:\/\/web3py.readthedocs.io\/en\/stable\/"},{"key":"e_1_3_2_15_2","unstructured":"2021. Androguard. Retrieved from https:\/\/androguard.readthedocs.io\/"},{"key":"e_1_3_2_16_2","unstructured":"2021. Mitmproxy. Retrieved from https:\/\/mitmproxy.org\/"},{"key":"e_1_3_2_17_2","unstructured":"2021. Polygon: Ethereum\u2019s internet of blockchains. Retrieved from https:\/\/polygon.technology\/lightpaper-polygon.pdf"},{"key":"e_1_3_2_18_2","unstructured":"2021. The power of content-addressing. Retrieved from https:\/\/flyingzumwalt.gitbooks.io\/decentralized-web-primer\/content\/avenues-for-access\/lessons\/power-of-content-addressing.html"},{"key":"e_1_3_2_19_2","unstructured":"2021. VirusTotal. Retrieved from https:\/\/www.virustotal.com\/"},{"key":"e_1_3_2_20_2","unstructured":"2023. App backup - Easy and fast! Su. Retrieved from https:\/\/play.google.com\/store\/apps\/details?id=com.colure.app.ibu"},{"key":"e_1_3_2_21_2","unstructured":"2023. Apps backup and restore. Retrieved from https:\/\/play.google.com\/store\/apps\/details?id=com.touchfield.appbackuprestore"},{"key":"e_1_3_2_22_2","first-page":"1","volume-title":"Proceedings of the ACM ARES","author":"Aktypi Angeliki","year":"2022","unstructured":"Angeliki Aktypi, Dimitris Karnikis, Nikos Vasilakis, and Kasper Rasmussen. 2022. Themis: A secure decentralized framework for microservice interaction in serverless computing. In Proceedings of the ACM ARES, 1\u201311. DOI: https:\/\/doi.org\/10.1145\/3538969.3538983"},{"key":"e_1_3_2_23_2","doi-asserted-by":"crossref","unstructured":"Elvira Albert Jes\u00fas Correas Pablo Gordillo Guillermo Rom\u00e1n-D\u00edez and Albert Rubio. 2020. GASOL: Gas analysis and optimization for ethereum smart contracts. In Proceedings of the Springer TACAS 118\u2013125. DOI: https:\/\/doi.org\/10.1007\/978-3-030-45237-7_7","DOI":"10.1007\/978-3-030-45237-7_7"},{"key":"e_1_3_2_24_2","first-page":"181","volume-title":"Proceedings of the USENIX ATC","author":"Ali Muneeb","year":"2016","unstructured":"Muneeb Ali, Jude Nelson, Ryan Shea, and Michael J. Freedman. 2016. Blockstack: A global naming and storage system secured by blockchains. In Proceedings of the USENIX ATC, 181\u2013194."},{"key":"e_1_3_2_25_2","first-page":"1","volume-title":"Proceedings of the ACM MSR","author":"Allix Kevin","year":"2016","unstructured":"Kevin Allix, Tegawende F. Bissyande, Jacques Klein, and Yves Le Traon. 2016. AndroZoo: Collecting millions of Android apps for the research community. In Proceedings of the ACM MSR, 1\u20134."},{"key":"e_1_3_2_26_2","unstructured":"Juan Benet. 2014. IPFS - Content addressed versioned P2P File system. arXiv:1407.3561. Retrieved from https:\/\/doi.org\/10.48550\/arXiv.1407.3561"},{"key":"e_1_3_2_27_2","unstructured":"Vitalik Buterin. 2014. A next-generation smart contract and decentralized application platform. White Paper 1\u201336."},{"key":"e_1_3_2_28_2","doi-asserted-by":"crossref","unstructured":"Fran Casino Eugenia Politou Eethimios Alepis and Constantinos Patsakis. 2020. Immutability and decentralized storage: An analysis of emerging threats. IEEE Access 8 (2020) 4737\u20134744.","DOI":"10.1109\/ACCESS.2019.2962017"},{"key":"e_1_3_2_29_2","volume-title":"Proceedings of the IEEE SANER","author":"Chen Ting","year":"2017","unstructured":"Ting Chen, Xiaoqi Li, Xiapu Luo, and Xiaosong Zhang. 2017. Under-optimized smart contracts devour your money. In Proceedings of the IEEE SANER."},{"key":"e_1_3_2_30_2","unstructured":"Brian Curran. 2024. What is IPFS? Interplanetary file system: Complete beginner\u2019s guide. Retrieved from https:\/\/blockonomi.com\/interplanetary-file-system\/"},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1145\/3276486"},{"key":"e_1_3_2_32_2","doi-asserted-by":"crossref","unstructured":"Songlin He Eric Ficke Mir Mehedi Ahsan Pritom Huashan Chen Qiang Tang Qian Chen Marcus Pendleton Laurent Njilla and Shouhuai Xu. 2022. Blockchain-based automated and robust cyber security management. Journal of Parallel and Distributed Computing 163 (2022) 62\u201382.","DOI":"10.1016\/j.jpdc.2022.01.002"},{"key":"e_1_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36516-4_23"},{"key":"e_1_3_2_34_2","doi-asserted-by":"publisher","unstructured":"Paulo Valente Klaine Hao Xu Lei Zhang Muhammad Imran and Ziming Zhu. 2023. A privacy-preserving blockchain platform for a data marketplace. Distributed Ledger Technologies: Research and Practice 2 1 (2023) 1\u201316. DOI: 10.1145\/3573894","DOI":"10.1145\/3573894"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","unstructured":"Li Li Tegawende F. Bissyande and Jacques Klein. 2021. Rebooting research on detecting repackaged android apps: Literature review and benchmark. IEEE Transactions on Software Engineering 47 4 (2021) 676\u2013693. DOI: 10.1109\/TSE.2019.2901679","DOI":"10.1109\/TSE.2019.2901679"},{"key":"e_1_3_2_36_2","unstructured":"James Lloyd. 2020. What is next for Asia in FinTech adoption. Retrieved from https:\/\/www.ey.com\/en_gl\/banking-capital-markets\/what-is-next-for-asia-in-fintech-adoption"},{"key":"e_1_3_2_37_2","doi-asserted-by":"publisher","unstructured":"Haoyu Ma Shijia Li Debin Gao Daoyuan Wu Qiaowen Jia and Chunfu Jia. 2022. Active warden attack: On the (in)effectiveness of android app repackage-proofing. IEEE Transactions on Dependable and Secure Computing 19 5 (2022) 3508\u20133520. DOI: 10.1109\/TDSC.2021.3100877","DOI":"10.1109\/TDSC.2021.3100877"},{"key":"e_1_3_2_38_2","unstructured":"Jude Nelson Muneeb Ali Ryan Shea and Michael J. Freedman. 2016. Extending existing blockchains with virtualchain. In DCCL Workshop."},{"key":"e_1_3_2_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/RIVF48685.2020.9140747"},{"key":"e_1_3_2_40_2","volume-title":"Proceedings of the USENIX Security Symposium","author":"Rodler Michael","year":"2021","unstructured":"Michael Rodler, Wenting Li, Ghassan O. Karame, and Lucas Davi. 2021. EVMPatch: Timely and automated patching of ethereum smart contracts. In Proceedings of the USENIX Security Symposium."},{"key":"e_1_3_2_41_2","doi-asserted-by":"publisher","unstructured":"Mehdi Salehi Jeremy Clark and Mohammad Mannan. 2022. Not so immutable: Upgradeability of smart contracts on ethereum. arXiv:2206.00716. Retrieved from 10.48550\/arXiv.2206.00716","DOI":"10.48550\/arXiv.2206.00716"},{"key":"e_1_3_2_42_2","doi-asserted-by":"publisher","unstructured":"Jo\u00e3o Santos Nuno Santos and David Dias. 2019. DClaims: A censorship resistant web annotations system using IPFS and ethereum. arXiv:1912.03388. Retrieved from 10.48550\/arXiv.1912.03388","DOI":"10.48550\/arXiv.1912.03388"},{"key":"e_1_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1145\/3140649.3140656"},{"key":"e_1_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.324378"},{"key":"e_1_3_2_45_2","doi-asserted-by":"publisher","unstructured":"Sarah Underwood. 2016. Blockchain beyond bitco. Communications of the ACM 59 11 (2016) 15\u201317. DOI: 10.1145\/2994581","DOI":"10.1145\/2994581"},{"key":"e_1_3_2_46_2","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278558"},{"key":"e_1_3_2_47_2","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354241"},{"key":"e_1_3_2_48_2","doi-asserted-by":"publisher","DOI":"10.1109\/ISNCC49221.2020.9297213"},{"key":"e_1_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468568"},{"key":"e_1_3_2_50_2","doi-asserted-by":"publisher","unstructured":"Franklin Wei Stephen Tate Mahalingam Ramkumar and Somya Mohanty. 2022. A scalable trustworthy infrastructure for collaborative container repositories. Distributed Ledger Technologies: Research and Practice 1 1 (2022) 1\u201329. DOI: 10.1145\/3554760","DOI":"10.1145\/3554760"},{"key":"e_1_3_2_51_2","unstructured":"Gavin Wood. 2014. Ethereum: A secure decentralised generalised transaction Ledger. Ethereum Project Yellow Paper 1\u201332."},{"key":"e_1_3_2_52_2","doi-asserted-by":"publisher","unstructured":"Daoyuan Wu Debin Gao and David Lo. 2021. Scalable online vetting of Android apps for measuring declared SDK versions and their consistency with API calls. Empirical Software Engineering 26 1 (2021) 1\u201332. DOI: 10.48550\/arXiv.1912.12982","DOI":"10.48550\/arXiv.1912.12982"},{"key":"e_1_3_2_53_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24294"},{"key":"e_1_3_2_54_2","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417243"},{"key":"e_1_3_2_55_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-59013-0_30"},{"key":"e_1_3_2_56_2","volume-title":"Proceedings of the ISOC NDSS","author":"Yi Xiao","year":"2023","unstructured":"Xiao Yi, Yuzhou Fang, Daoyuan Wu, and Lingxiao Jiang. 2023. BlockScope: Detecting and investigating propagated vulnerabilities in forked blockchain projects. In Proceedings of the ISOC NDSS."},{"key":"e_1_3_2_57_2","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549105"},{"key":"e_1_3_2_58_2","doi-asserted-by":"publisher","unstructured":"Haoqian Zhang Yancheng Zhao Abhishek Paryani and Ke Yi. 2020. Infnote: A decentralized information sharing platform based on blockchain. arXiv:2002.04533. Retrieved from 10.48550\/arXiv.2002.04533","DOI":"10.48550\/arXiv.2002.04533"},{"key":"e_1_3_2_59_2","doi-asserted-by":"publisher","DOI":"10.1109\/SANER48275.2020.9054825"},{"key":"e_1_3_2_60_2","doi-asserted-by":"publisher","DOI":"10.1145\/2133601.213364"},{"key":"e_1_3_2_61_2","doi-asserted-by":"publisher","DOI":"10.1145\/3592624"}],"container-title":["Distributed Ledger Technologies: Research and Practice"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3709157","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T14:29:53Z","timestamp":1778077793000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3709157"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,6]]},"references-count":60,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2026,9,30]]}},"alternative-id":["10.1145\/3709157"],"URL":"https:\/\/doi.org\/10.1145\/3709157","relation":{},"ISSN":["2769-6480","2769-6480"],"issn-type":[{"value":"2769-6480","type":"print"},{"value":"2769-6480","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5,6]]},"assertion":[{"value":"2023-12-31","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-12-01","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-05-06","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}