Blockchain (BlCh)
The course covers blockchain foundations up to current platforms and applications, with weekly pre-recorded videos plus a news segment on recent developments. Content may vary from year to year. The practical part is the Challenge Task: students build a working decentralized app, which is required to pass this course. The practical work matters as much as understanding the theory.
Topics / Dates
The lectures will be pre-recorded and will up uploaded before the lecture on Friday at 18:55. The length of the videos will be ~60 minutes (2 x 30 min. lectures) divided into segments. The news segment (~10 min) will cover news around the topics blockchain and distributed systems and are not part of the exam. It should serve as on overview of current topics in this field.
| Nr | Date (Exercises) | Topics |
|---|
| 01 | 15.09.2026 | Admin (lecture and challenge task), Repetition / Introduction Blockchain |
| 02 | 22.09.2026 | Ethereum |
| 03 | 29.09.2026 | Solidity |
| 04 | 06.10.2026 | 1st hand-in, x402, UCP |
| 05 | 13.10.2026 | Fungible Tokens, Stablecoins, Non-Fungible Tokens |
| 06 | 20.10.2026 | Wallets and Seed Phrases |
| 07 | 27.10.2026 | 2nd hand-in, DeFi |
| 08 | 03.11.2026 | DEX |
| 09 | 10.11.2026 | DAOs |
| 10 | 17.11.2026 | 3rd hand-in, HTLCs, Cross-chain Atomic Swaps, Interview / Guest |
| 11 | 24.11.2026 | Scaling, Layer 2, Payment Channels |
| 12 | 01.12.2026 | Exam Preparation |
| 13 | 08.12.2026 | Final hand-in, Challenge Task Presentations |
| 14 | 15.12.2026 | Q&A and Challenge Task Award Winner Announcement |
(those are preliminary topics, may be subject to change)
Online Lectures & Offline Exercises
I will be present in the exercise room 1.201 from 17:00 - 18:35. During exercises, you can work on your blockchain project (challenge task). You do not need to be present in the exercises, but it is highly recommended to discuss your issues and problems with the challenge task with the lecturer. On request, you can also join the exercises remotely via MS Teams.
The online lectures and PDFs can be accessed from outside the OST network (also on YouTube), the exercise and admin material only with VPN.
Lecture 1
The admin part gives an overview on the lecture content and presents the challenge task for this course (Slides: HS26-BlCh-01-admin_v3.pdf). The second video (news) reports on distributed systems and blockchain news. The first article covers how a company building AI coding agents factored RSA-260, the largest RSA challenge number solved publicly so far, by taking the standard general number field sieve off CPUs and onto GPUs: about 10 times cheaper than the previous state of the art, roughly 13.5 GPU-years or some 400'000 US dollars, done in about three weeks, with most of the engineering done by agent sessions and the human setting goals and benchmarks. Cryptography ages. Then a phishing wave against Trezor and BitBox users, via a breached shared email provider, echoing a real Coldcard seed bug that drained 1'370 Bitcoin. Finally Tor's Android VPN Beta: one circuit per app, Rust-based, used most in censored countries. (Slides: HS26-BlCh-01-news.pdf). The third video is the repetition of Distributed Systems (DSy) (Slides: HS26-BlCh-01-rep.pdf). [88min]
Lecture 2
The admin part gives an overview on the lecture content and presents the challenge task for this course (Slides: HS26-BlCh-02-admin.pdf). The second video (news) reports on distributed systems and blockchain news. The first article is about AWS losing customer data in the Persian Gulf after its facilities in Bahrain and the UAE were hit by Iranian drones, illustrating how distributing a system across availability zones does not make it safe if all the zones sit in one region, and why the 3-2-1 backup rule still matters. The next article shifts to the Ethereum Foundation's priorities for the Hegotá upgrade, with two 'must ship' proposals on censorship resistance and Frame Transactions, bringing account abstraction to Ethereum and turning accounts into something programmable. The next topic is about Shopify moving its mobile apps from React Native back to native code, emphasizing how good-enough AI coding tools make a shared cross-platform codebase less necessary. The final article serves as a reminder on the vulnerability of smart contract modules, highlighting how an MEV bot front-ran an attacker trying to steal about 7.7 million dollars from an Ethereum wallet by copying the attack and paying a block builder to be placed first (Slides: HS26-BlCh-02-news.pdf). The third video is the introduction of Ethereum (Slides: HS26-BlCh-02-ethereum.pdf). [80min]
Lecture 3
The admin part gives an overview on the lecture content and presents the challenge task for this course (Slides: HS26-BlCh-03-admin.pdf). The second video (news) covers distributed systems and blockchain. Block (formerly Square) joins the x402 Foundation and adds Bitcoin Lightning payments to x402, the open standard named after HTTP 402 "Payment Required" that lets AI agents pay for APIs and digital services. Prediction market Trueo, a small player with about $796,000 in total value locked, plans to move from Coinbase's layer 2 Base to Ethereum for broader integrations. An optimization challenge cut the cost of a quantum-safe Bitcoin transaction by about 79%, from roughly $320 to under $67, though its designers call it a last resort and StarkWare still prefers a soft fork. Finally, a former senior GitHub engineer argues in "Plan mode is dead" that plan documents no longer pay off, since models can explore codebases and decide on their own in a loop of understand, act, inspect, clarify, adjust, and act again (Slides: HS26-BlCh-03-news.pdf). The third video is the introduction into Solidity (Slides: HS26-BlCh-03-solidity.pdf, Examples: HS26-BlCh-03-solidity.zip). [76min]
Lecture 4
The admin part gives an overview on the lecture content and presents the challenge task for this course (Slides: HS26-BlCh-04-admin.pdf). The second video (news) covers distributed systems and blockchain. The essay "The Post-AGI Era" argues AGI is already here, depending on how it's defined. "10 tells of a slop UI" lists signs of generic AI-made interfaces, shown on the lecturer's tailon-ng site. A well-known JavaScript and TypeScript author's book income fell to zero by 2026 as AI crawlers replaced human readers. Ethereum's Glamsterdam upgrade hits Sepolia on 6 October with in-protocol proposer-builder separation, block-level access lists and new gas pricing, so contracts relying on fixed gas, like Solidity's transfer and send, need re-testing. Vitalik Buterin's "The cryptographic world computer" predicts that by 2030 Ethereum will rely on cryptographic proofs, fast finality and distributed block building. Finally, Porsche is shutting down its Web3 project after its 911 NFTs drew only about 38'000 dollars in trading last year (Slides: HS26-BlCh-04-news.pdf). The third video is the introduction of x402 (Slides: HS26-BlCh-04-x402, Examples: HS26-BlCh-04-x402.zip). [63min]
Lecture 5
The admin part gives an overview on the lecture content and presents the challenge task for this course (Slides: HS26-BlCh-05-admin.pdf. The second video (news) reports on distributed systems and blockchain news. The first article, “Software Engineering is Dead. Long Live Product Engineering.”, argues that cheap AI-generated code shifts value to understanding the problem, and warns that juniors are losing the chance to learn through senior-reviewed code. The next article is a serverless horror story: a self-rescheduling Cloudflare Durable Object alarm ran for 23 days without a spending cap and produced a bill of over $10'000. The next topic covers Yandex losing three of its five data centres to drone attacks, which shows that even distributed systems have limits. The next article reports that Ledger customers in Southeast Asia lost an estimated $86 million after buying devices from an official reseller. The final article covers Ethereum’s Glamsterdam upgrade, now live on the Sepolia testnet used in the lecture’s challenge task, so gas costs may differ from older guides (Slides: HS26-BlCh-05-news.pdf). The third video is the introduction of Fungible Tokens, Stablecoins, Non-Fungible Tokens (Slides: HS26-BlCh-05-tokens, Examples: HS26-BlCh-05-tokens.zip). [73min]
Lecture 6
The admin part gives an overview on the lecture content and presents the challenge task for this course ... The second video (news) reports on distributed systems and blockchain news... The third video is the introduction of Wallets and Seed Phrases (Slides: HS26-BlCh-06-wallets). [XYmin]
Challenge Task HS 2026
This semester's challenge task (CT) is the design and implementation of a system using x402 with stablecoins.
You will demonstrate how an API can serve autonomous agents or scrapers without accounts, API keys or subscriptions. Requests to a service of your choosing are free up to a rate limit. Once the limit is exceeded, the server responds with 402 Payment Required instead of refusing service. The agent reads the payment requirements from the response, signs a stablecoin payment, and retries the request. It either pays for each request individually, or pays once for a block of requests.
The concepts and technologies around x402 are covered in this lecture series.
Requirements
All requirements below must be met in order to pass this lecture.
- Find a suitable use-case for your system
- Frontend: a simple frontend (HTML, Vue, React, Svelte, …) for each of the three components: agent client/scraper, facilitator, and resource server.
- Public blockchain: the app runs on a public chain (Ethereum or Ethereum-based like Base, Solana, …). A public testnet is fine.
- 402 payments: your system must demonstrate the full x402 flow end to end.
- Resource server: serves real data or compute. Enforces a free-tier rate limit. Once the limit is exceeded, it returns a 402 challenge containing price, network, asset and recipient, then verifies and settles the payment before serving the resource.
- Agent client/scraper: supports 402, checks price and network against its own budget policy before signing, pays and retries.
- Settlement: stablecoin (e.g. USDC) on a public testnet, via EIP-3009 transferWithAuthorization or the equivalent on the chosen chain.
- You can use an existing facilitator if you work alone (e.g., ax402, Cloudflare, …). Groups must implement their own facilitator (/verify and /settle).
- The solution may use existing libraries and code, but those must open software software.
Deliverables
- 06.10.2026, first hand-in of your initial plan and project idea. Invitation to github/gitlab repository.
- 27.10.2026, second hand-in of your initial version of your challenge task and current progress (initial state, does not need to run).
- 17.11.2026, third hand-in of your current progress (what works, what is still open).
- Final hand-in: 08.12.2026, 17:00 (CET) - infrastructure documentation (Readme.md or can be slides) and the source code (github/gitlab or similar) via invite or email to thomas.bocek-at-ost.ch. The code and configuration should be easy to read and/or well documented. For the presentation, you should show the architecture, components, and design decisions in 10-15 min, a demo in 5-10 min, and the Q&A will be 5-10 min. After your presentation, you need to hand in your PDF presentation.
You are allowed to use any language, framework, and platforms. However, the supervisors are familiar with those: Golang, Java, JavaScript/TypeScript, Ethereum, Sui, Bitcoin, Linux.
Groups
There will be groups of at most 2 students for the challenge task. During the challenge task, the group shall meet every week during exercise hours to work on the task and discuss the next steps. The groups shall utilize their homework times to work on the challenge task, besides the exercise time slots. The groups shall determine and set-up an internal project plan and shall distribute the workload so that each group member gets a fair load of work. Group results will be only accessible via VPN.
| Nr | Name | Topics | Hand-in 1 |
|---|
| 01 | Michael S. | Studenportal payment | ✓ |
| 02 | Andrin K. | Code-Review-API | ✓ |
| 03 | Lukas B. | x402 Compute | ✓ |
| 04 | David B. | godocs402 | ✓ |
| 05 | Mawule A. | AgentLottery | ✓ |
| 06 | Michael A. | Smart Travel | ✓ |
| 07 | Joys G. | MarketPulse402 | ✓ |
| 08 | Martin A. | Hiking Advisor | ✓ |
| 09 | Zhili Z. | SwissTransit402 | ✓ |