Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
AI agents are evolving from isolated task executors into networked autonomous entities that can communicate, delegate tasks, invoke tools, access external knowledge, and participate in cross-platform service and economic workflows. This evolution gives rise to open agent networks, where heterogeneous agents owned by different stakeholders interact without naturally shared infrastructures for identity, authorization, auditability, reputation, or settlement. This survey and tutorial article reviews the literature over the period 1980--2026 on the evolution from classical multi-agent systems to open agent networks, with a particular focus on LLM-based autonomous agents, agent interoperability protocols, Internet-of-Agents infrastructures, and blockchain-enabled trust mechanisms. We first review this evolution and show how the trust boundary expands from individual execution to cross-agent, cross-platform, and cross-organizational interaction. We then identify a network-level trust crisis that cannot be fully addressed by single-agent safety mechanisms or closed multi-agent coordination techniques, and develop a five-dimensional taxonomy covering entity and capability trust, authorization and delegation trust, information and provenance trust, coordination and group-robustness trust, and accountability and settlement trust. Based on this taxonomy, we examine how blockchain can provide shared identity, verifiable authorization, tamper-evident provenance, auditable collaboration, incentive alignment, and value settlement for trustworthy agent networks. We further synthesize the mapping between agent-network risks, trust requirements, and blockchain-enabled mechanisms, and clarify the role of blockchain as a shared trust layer rather than a replacement for agent security, semantic verification, privacy protection, or robust reasoning.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 86 of its 124 references that are in the map. First posted on arXiv 5 Aug 2026.
Builds on
86 of 124 references.
Closest ancestors · 34
Same direction, newest first
- 2026AgentReputation: A Decentralized Agentic AI Reputation Framework30 Apr
- 2026SoK: Security of Autonomous LLM Agents in Agentic Commerce15 Apr
- 2026Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP11 Feb
- 2026TessPay: Verify-then-Pay Infrastructure for Trusted Agentic Commerce30 Jan
- 2026Autonomous Agents on Blockchains: Standards, Execution Models, and Trust Boundaries8 Jan
- 2025A Blockchain-Monitored Agentic AI Architecture for Trusted Perception-Reasoning-Action Pipelines24 Dec
- 2025DAO-Agent: Zero Knowledge-Verified Incentives for Decentralized Multi-Agent Coordination24 Dec
- 2025Decentralized Multi-Agent System with Trust-Aware Communication2 Dec
- 2025Toward a Safe Internet of Agents29 Nov
- 2025Inter-Agent Trust Models: A Comparative Study of Brief, Claim, Proof, Stake, Reputation and Constraint in Agentic Web Protocol Design-A2A, AP2, ERC-8004, and Beyond5 Nov
- 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges27 Oct
- 2025MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents14 Oct
22 more
- 2025Towards Transparent and Incentive-Compatible Collaboration in Decentralized LLM Multi-Agent Systems: A Blockchain-Driven Approach20 Sep
- 2025BetaWeb: Towards a Blockchain-enabled Trustworthy Agentic Web19 Aug
- 2025BlockA2A: Towards Secure and Verifiable Agent-to-Agent Interoperability2 Aug
- 2025The Trust Fabric: Decentralized Interoperability and Economic Coordination for the Agentic Web10 Jul
- 2025A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents30 Jun
- 2025From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows29 Jun
- 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures24 Jun
- 2025Security of Internet of Agents: Attacks and Countermeasures12 May
- 2025A survey of agent interoperability protocols: Model Context Protocol (MCP), Agent Communication Protocol (ACP), Agent-to-Agent Protocol (A2A), and Agent Network Protocol (ANP)4 May
- 2025Prompt Injection Attack to Tool Selection in LLM Agents28 Apr
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspective4 Apr
- 2025textitAgents Under Siege: Breaking Pragmatic Multi-Agent LLM Systems with Optimized Prompt Attacks31 Mar
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasures12 Mar
- 2025Red-Teaming LLM Multi-Agent Systems via Communication Attacks20 Feb
- 2025G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems16 Feb
- 2024The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in LLM Agents21 Dec
- 2024Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents14 Nov
- 2024Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents3 Oct
- 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases17 Jul
- 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents5 Mar
- 2024Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents17 Feb
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep
Other references · 52
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
- 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,211
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,947
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,808
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
38 more
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,745
- 2023HuggingGPT: Solving AI Tasks with ChatGPT and its Friends in Hugging Facecited by 1,190
- 2023ChatDev: Communicative Agents for Software Developmentcited by 919
- 2024Large Language Model based Multi-Agents: A Survey of Progress and Challengescited by 769
- 2024A Survey on the Memory Mechanism of Large Language Model based Agentscited by 634
- 2023AgentVerse: Facilitating Multi-Agent Collaboration and Exploring Emergent Behaviorscited by 598
- 2024StruQ: Defending Against Prompt Injection with Structured Queriescited by 375
- 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 267
- 2024Scaling Large Language Model-based Multi-Agent Collaborationcited by 241
- 2025MultiAgentBench: Evaluating the Collaboration and Competition of LLM agentscited by 178
- 2024Certifiably Robust RAG against Retrieval Corruptioncited by 151
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 127
- 2024Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documentscited by 102
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 71
- 2024LLMmap: Fingerprinting For Large Language Modelscited by 58
- 2024A Survey on LLM-based Multi-Agent System: Recent Advances and New Frontiers in Applicationcited by 55
- 2025ACE: A Security Architecture for LLM-Integrated App Systemscited by 55
- 2024AgentOps: Enabling Observability of LLM Agentscited by 46
- 2024ShortcutsBench: A Large-Scale Real-world Benchmark for API-based Agentscited by 36
- 2025Internet of Agents: Fundamentals, Applications, and Challengescited by 31
- 2025Traceback of Poisoning Attacks to Retrieval-Augmented Generationcited by 28
- 2025Agent Network Protocol Technical White Papercited by 25
- 2025Agent Name Service (ANS): A Universal Directory for Secure AI Agent Discovery and Interoperabilitycited by 23
- 2024ConfusedPilot: Confused Deputy Risks in RAG-based LLMscited by 22
- 2025Leveraging Large Language Models for Effective and Explainable Multi-Agent Credit Assignmentcited by 18
- 2026Benchmarking LLM Tool-Use in the Wildcited by 17
- 2026Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systemscited by 16
- 2025Agent Exchange: Shaping the Future of AI Agent Economicscited by 15
- 2025Byzantine-Robust Decentralized Coordination of LLM Agentscited by 14
- 2024A Survey on Decentralized Identifiers and Verifiable Credentialscited by 11
- 2025A Weighted Byzantine Fault Tolerance Consensus Driven Trusted Multiple Large Language Models Networkcited by 9
- 2026The Agent Economy: A Blockchain-Based Foundation for Autonomous AI Agentscited by 7
- 2025Binding Agent ID: Unleashing the Power of AI Agents with accountability and credibilitycited by 6
- 2025Bottom-Up Reputation Promotes Cooperation with Multi-Agent Reinforcement Learningcited by 5
- 2025SoK: Security and Privacy of AI Agents for Blockchaincited by 4
- 2025Insured Agents: A Decentralized Trust Insurance Mechanism for Agentic Economycited by 4
- 2024SoK: Trusting Self-Sovereign Identitycited by 2
- 2025Agent TCP/IP: An Agent-to-Agent Transaction Systemcited by 1
50 most cited of 52 All 52 (JSON)
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026SoK: Decentralized Agent Economic Infrastructurecited by 0
- 2026SoK: Decentralized Agent Economic Infrastructure1 Oct 2026
Similar, not cited
Close in wording, no citation either way
- 2025Enabling Regulatory Multi-Agent Collaboration: Architecture, Challenges, and Solutions
- 2026Skillsets on the Chain: A Blockchain-based Zero-Trust Framework for Agentic AI Networking
- 2026Blockchain-Enabled Artificial Intelligence and AI Agents for Secure Data Sharing and Cybersecurity Applications
- 2026DART: A DAG-Based Reputation and Incentive Framework via Blockchain-Enabled Governance for Trustworthy LLM Multi-Agent Collaboration
- 2025Fetch.ai: An Architecture for Modern Multi-Agent Systems
- 2026Blockchain and AI: Securing Intelligent Networks for the Future
- 2025From Cloud-Native to Trust-Native: A Protocol for Verifiable Multi-Agent Systems
- 2026Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted On