Iqbal, M.; Fan, Y.; Ahmad, N. and Altaf, M. (2026) DEMATEL–ML–ISM decision framework for prioritizing smart contract security risks in blockchain-enabled construction projects. Journal of Construction Engineering and Management, 152(8): 04026108, ISSN 0733-9364
Abstract
Blockchain (BC) and smart contracts (SCs) offer strong potential to enhance transparency, coordination, and trust in construction projects, a sector critical to global economic growth yet slow in adopting digital technologies. However, adoption remains limited due to persistent security vulnerabilities (SVs), including coding flaws, governance weaknesses, and cyberattacks, which undermine reliability. Existing studies often rely on traditional decision-making approaches, which overlook the complex interrelationships among these vulnerabilities. This study aims to systematically identify, classify, and prioritize SC vulnerabilities in BC-enabled construction projects using an integrated decision framework. A four-stage methodology was employed: (1) expert consultation and literature review identified 18 SVs; (2) decision-making trial and evaluation laboratory (DEMATEL) established cause-and-effect relationships; (3) machine learning (ML) validated the results with 88.9% accuracy; and (4) interpretive structural modeling (ISM) and cross-impact matrix multiplication applied to classification (MICMAC) analysis prioritized vulnerabilities and revealed their hierarchical structure. The results show that code bugs and flaws (SV1), governance vulnerabilities (SV17), race conditions (SV18), and Sybil attacks (SV7) are the most critical SVs, with sensitivity analysis confirming robustness. The proposed framework advances theory by integrating DEMATEL, ML, and ISM–MICMAC and offers practical strategies to strengthen SC security, foster trust in BC-based systems, and accelerate digital transformation in the construction industry.
| Item Type: | Article |
|---|---|
| Uncontrolled Keywords: | blockchain; construction industry; decision-making trial and evaluation laboratory (DEMATEL)-machine learning- interpretive structural modeling and cross-impact matrix multiplication applied to classification; security vulnerabilities; sensitivity analysis; smart contracts |
| Index terms: | decision-making, digital technology, accuracy, methodology, laboratory, vulnerability, economic growth, transformation, sensitivity analysis, literature review, machine learning, transparency, strategy, construction project, governance, construction industry, interpretive structural modelling, coordination, smart contract, blockchain, prioritizing, decision framework |
| Subjects: | industry analysis, production management, computing systems, environmental hazards, artificial intelligence, management, digital technology, research management, decision analysis, research methods, data analysis and analytics, economic development, business, professional development |
| Topics: | Sustainability, Digital Applications, Information Management, Risk Management, Governance, Research Practice, Project Management, Organizational Design, Business Strategy |
| Descriptive scope: | 4 PCTA |
N.B. Descriptive scope is a count of how many of the five facets of empirical research are indicated by the words used in title, abstract and keywords. It is not intended as a judgement on the research; merely a count of the kind of word we would expect to indicate Phenomenon, Concepts, Theoretical framing, Empirical techniques, Analytical techniques. If all five are present, then a code of “5 PCTEA” will indicate this. If you feel the coding for this record is questionable, we welcome discussion around the terms we matched or the way we categorized them. The facet you would expect may not be coded, or a facet may be coded inappropriately. This can also bear on a larger question, of which facets should be treated as defining in construction management research. Please get in touch, and we will look at it. More details here