# BlockFLA: Accountable Federated Learning via Hybrid Blockchain Architecture

arXiv: https://arxiv.org/abs/2010.07427 · HTML: https://mlsanity.com/paper/2010.07427/

## Key facts

- Cited by 20 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 14 Oct 2020.

## Built on by (most cited first, 20 of 20)

- [Federated Learning: Opportunities and Challenges](https://mlsanity.com/paper/2101.05428/) (2021)
- [Federated Learning for Medical Applications: A Taxonomy, Current Trends, Challenges, and Future Research Directions](https://mlsanity.com/paper/2208.03392/) (2022)
- [Decentralized Federated Learning: A Survey on Security and Privacy](https://mlsanity.com/paper/2401.17319/) (2024)
- [A Systematic Survey of Blockchained Federated Learning](https://mlsanity.com/paper/2110.02182/) (2021)
- [Decentral and Incentivized Federated Learning Frameworks: A Systematic Literature Review](https://mlsanity.com/paper/2205.07855/) (2022)
- [Incentive Mechanism Design for Joint Resource Allocation in Blockchain-based Federated Learning](https://mlsanity.com/paper/2202.10938/) (2022)
- [Blockchain and Federated Edge Learning for Privacy-Preserving Mobile Crowdsensing](https://mlsanity.com/paper/2110.08671/) (2021)
- [FederatedTrust: A Solution for Trustworthy Federated Learning](https://mlsanity.com/paper/2302.09844/) (2023)
- [Blockchained Federated Learning for Internet of Things: A Comprehensive Survey](https://mlsanity.com/paper/2305.04513/) (2023)
- [A review of Federated Learning in Intrusion Detection Systems for IoT](https://mlsanity.com/paper/2204.12443/) (2022)
- [FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attacks](https://mlsanity.com/paper/2310.02113/) (2023)
- [SCEI: A Smart-Contract Driven Edge Intelligence Framework for IoT Systems](https://mlsanity.com/paper/2103.07050/) (2021)
- [The Impact of Data Distribution on Fairness and Robustness in Federated Learning](https://mlsanity.com/paper/2112.01274/) (2021)
- [TraceFL: Interpretability-Driven Debugging in Federated Learning via Neuron Provenance](https://mlsanity.com/paper/2312.13632/) (2023)
- [TrustChain: A Blockchain Framework for Auditing and Verifying Aggregators in Decentralized Federated Learning](https://mlsanity.com/paper/2502.16406/) (2025)
- [On-chain Validation of Tracking Data Messages (TDM) Using Distributed Deep Learning on a Proof of Stake (PoS) Blockchain](https://mlsanity.com/paper/2409.01614/) (2024)
- [FLStore: Efficient Federated Learning Storage for non-training workloads](https://mlsanity.com/paper/2503.00323/) (2025)
- [Decentralized Weather Forecasting via Distributed Machine Learning and Blockchain-Based Model Validation](https://mlsanity.com/paper/2508.09299/) (2025)
- [FIDELIS: Blockchain-Enabled Protection Against Poisoning Attacks in Federated Learning](https://mlsanity.com/paper/2508.10042/) (2025)
- [zkFL-Health: Blockchain-Enabled Zero-Knowledge Federated Learning for Medical AI Privacy](https://mlsanity.com/paper/2512.21048/) (2025)

## Abstract (arXiv)

Federated Learning (FL) is a distributed, and decentralized machine learning protocol. By executing FL, a set of agents can jointly train a model without sharing their datasets with each other, or a third-party. This makes FL particularly suitable for settings where data privacy is desired. At the same time, concealing training data gives attackers an opportunity to inject backdoors into the trained model. It has been shown that an attacker can inject backdoors to the trained model during FL, and then can leverage the backdoor to make the model misclassify later. Several works tried to alleviate this threat by designing robust aggregation functions. However, given more sophisticated attacks are developed over time, which by-pass the existing defenses, we approach this problem from a complementary angle in this work. Particularly, we aim to discourage backdoor attacks by detecting, and punishing the attackers, possibly after the end of training phase. To this end, we develop a hybrid blockchain-based FL framework that uses smart contracts to automatically detect, and punish the attackers via monetary penalties. Our framework is general in the sense that, any aggregation function, and any attacker detection algorithm can be plugged into it. We conduct experiments to demonstrate that our framework preserves the communication-efficient nature of FL, and provide empirical results to illustrate that it can successfully penalize attackers by leveraging our novel attacker detection algorithm.
