Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions

arXiv:2608.04626 · cs.CR · Submitted 2026-08-05 · Read on arXiv

Liehuang Zhu, Yuhang Li, Tianxing Wang, Zhihao Chen, Ke Li, Hongyi Liu, Yajie Wang, Lei Xu, Peng Jiang, Zijian Zhang

cs.CR

Submitted: 2026-08-05

Code: https://github.com/a2aproject/A2A

Project page: https://w3c-ccg.github.io/did-method-web

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Accountability — 41× in this paper · explained in 2 episodes
• Provenance — 34× in this paper · explained in 5 episodes
• Verification — 24× in this paper · explained in 2 episodes
• Multi-Agent System — 23× in this paper · explained in 7 episodes
• Robustness — 19× in this paper · explained in 6 episodes
• Multi-agent Collaboration — 14× in this paper · explained in 2 episodes
• Papers — 14× in this paper · explained in 3 episodes
• AI Agents — 12× in this paper · explained in 2 episodes
• RAG — 11× in this paper · explained in 3 episodes
• Benchmark — 8× in this paper · explained in 2 episodes
• Multi-agent Coordination — 8× in this paper · explained in 2 episodes
• Hallucination — 7× in this paper · explained in 4 episodes
• Verifiability — 7× in this paper · explained in 3 episodes
• Agentic AI — 6× in this paper · explained in 2 episodes
• Consistency — 6× in this paper · explained in 3 episodes
• Core — 6× in this paper · explained in 2 episodes
• Benchmarking — 5× in this paper · explained in 4 episodes
• Cooperation — 5× in this paper · explained in 2 episodes
• Accuracy — 4× in this paper · explained in 1 episode
• Model Context Protocol — 4× in this paper
• Reinforcement Learning — 4× in this paper · explained in 4 episodes
• Task Decomposition — 4× in this paper · explained in 2 episodes
• Actor — 3× in this paper · explained in 3 episodes
• Agent Network Protocol — 3× in this paper
• Indirect Prompt Injection — 3× in this paper · explained in 2 episodes
• Trace — 3× in this paper · explained in 2 episodes
• Agent Communication Protocol — 2× in this paper
• Agentic System — 2× in this paper · explained in 2 episodes
• Augmentation — 2× in this paper · explained in 2 episodes
• Credit assignment — 2× in this paper · explained in 3 episodes
• Fingerprinting — 2× in this paper · explained in 2 episodes
• Inflation — 2× in this paper · explained in 2 episodes
• Model Context Protocol (MCP) — 2× in this paper · explained in 8 episodes
• Redundancy — 2× in this paper · explained in 2 episodes
• Self-Sovereign Identity — 2× in this paper
• Task Alignment — 2× in this paper · explained in 2 episodes
• Unified Framework — 2× in this paper · explained in 6 episodes
• Verifier — 2× in this paper · explained in 2 episodes
• Abstraction — 1× in this paper · explained in 1 episode
• Agent Name Service — 1× in this paper
• Calibration — 1× in this paper · explained in 9 episodes
• Chain-of-Thought Prompting — 1× in this paper · explained in 2 episodes
• Composition — 1× in this paper · explained in 2 episodes
• Deep Reinforcement Learning — 1× in this paper · explained in 3 episodes
• Division of Labor — 1× in this paper · explained in 2 episodes
• Editor — 1× in this paper · explained in 2 episodes
• Embeddings — 1× in this paper · explained in 2 episodes
• Evaluation Framework — 1× in this paper · explained in 3 episodes
• Feedback Loop — 1× in this paper · explained in 2 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Foundation Models — 1× in this paper · explained in 8 episodes
• Generalization — 1× in this paper · explained in 14 episodes
• Hybrid Architecture — 1× in this paper · explained in 2 episodes
• Hybrid Architectures — 1× in this paper · explained in 3 episodes
• Localization — 1× in this paper · explained in 2 episodes
• Multi-agent Collaborative Framework — 1× in this paper · explained in 2 episodes
• Planner — 1× in this paper · explained in 3 episodes
• Reasoning Traces — 1× in this paper · explained in 4 episodes
• Semantic Correctness — 1× in this paper · explained in 2 episodes
• Sensor Fusion — 1× in this paper · explained in 2 episodes
• Temporal Consistency — 1× in this paper · explained in 3 episodes
• World Model — 1× in this paper · explained in 8 episodes

Sources

• WebGPT: Browser-assisted question-answering with human feedback
• A survey of agent interoperability protocols: Model Context Protocol (MCP), Agent Communication Protocol (ACP), Agent-to-Agent Protocol (A2A), and Agent Network Protocol (ANP)
• Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents
• A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents
• A Survey on LLM-based Multi-Agent System: Recent Advances and New Frontiers in Application
• A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures
• Toward a Safe Internet of Agents
• Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents
• Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP
• Autonomous Agents on Blockchains: Standards, Execution Models, and Trust Boundaries
• Proximal Policy Optimization Algorithms
• CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Society
• MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents
• Towards Transparent and Incentive-Compatible Collaboration in Decentralized LLM Multi-Agent Systems: A Blockchain-Driven Approach
• Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective
• Benchmarking LLM Tool-Use in the Wild
• Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems
• The Agent Economy: A Blockchain-Based Foundation for Autonomous AI Agents
• A Blockchain-Monitored Agentic AI Architecture for Trusted Perception-Reasoning-Action Pipelines
• BlockA2A: Towards Secure and Verifiable Agent-to-Agent Interoperability

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Estimating the Social Cost of Corporate Data Breaches
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills