Since roughly 2017, "blockchain" became the universal answer to any digital trust issue. Electronic voting was no exception: startups, consultancies, and public bodies adopted it as a selling point. In most cases, the promise does not withstand basic technical analysis.
The promise: immutability and decentralization
The standard argument for blockchain in e-voting rests on two pillars:
- Immutability: once recorded, no actor can alter a vote without the rest of the network detecting it.
- Decentralization: there is no central server vulnerable to attack or administrator tampering.
Both properties hold true in contexts suited for blockchain — financial transactions between untrusted parties, digital asset ledgers. The problem is that an organized vote exhibits fundamentally different characteristics.
The real problem of online voting — and where it lies
To understand why blockchain is not the right solution, we must pinpoint the exact problem. In an online vote with a verified electoral roll, the real risks are:
- Electoral roll fraud: ineligible individuals voting, or eligible individuals being excluded.
- Tally tampering: cast votes not being counted correctly.
- Breach of secrecy: uncovering how specific individuals voted.
- Illegal vote stuffing: adding votes that were never actually cast.
Note what does not appear on this list: "multiple untrusted actors requiring distributed consensus." That is the problem blockchain solves. But in a vote, the organizer is known, the electoral roll is managed by a recognized authority, and the results feed into a single tally. Blockchain's distributed mistrust model simply does not fit.
Why blockchain does not solve voting security risks
Let us analyze the real risks individually:
- Electoral roll fraud: blockchain has no bearing on who is included in the electoral roll. An authority must create and validate that list before voting opens. If that process is compromised, blockchain records fraudulent votes just as immutably as legitimate ones.
- Tally tampering: if votes are properly recorded on-chain, the tally is auditable. However, the exact same result is achieved using a relational database with audit logs and a hash chain — without the operational complexity of blockchain.
- Illegal vote stuffing: a public blockchain lacks access control. A permissioned private blockchain — the only feasible model in this context — relies on nodes controlled by the same operator. Immutability depends on who controls the majority of nodes. If all nodes belong to a single vendor, decentralization is illusory.
"A private blockchain with nodes controlled by a single operator is just a database with extra steps."
The structural problem: blockchain and ballot secrecy are incompatible
Here is the fundamental contradiction that blockchain voting vendors rarely mention: blockchain is transparent by design; secret balloting requires opacity by design.
A public blockchain records all transactions publicly for auditing. If votes are transactions, anyone can audit them — including who voted for what.
The common workaround is adding homomorphic encryption or zero-knowledge proofs (ZKP) on top of the blockchain. These are advanced, computationally intensive cryptographic techniques that are difficult for non-specialists to audit, adding another layer of "trust the algorithm" — precisely what users wanted to avoid.
The result is a system that is simultaneously more complex and less understandable to average voters seeking to verify their ballot was counted.
Operational complexity without tangible returns
Deploying a blockchain-based voting solution entails costs rarely disclosed during sales pitches:
- Node infrastructure costs (in-house or third-party) along with associated GDPR compliance challenges.
- Private key management: if a voter loses their key, can they revote? Who holds key custody?
- Gas fees on public blockchains (Ethereum and similar) rendering large-scale voting economically unfeasible.
- Latency: block confirmation delays spanning seconds or minutes, degrading user experience during high-concurrency voting events.
- Technical auditing: verifying blockchain integrity requires specialized tools and expertise beyond most organizations' capacity.
What actually works: auditable transparency without blockchain
The true challenges of electronic voting — tally integrity, tamper detection, individual verifiability — have proven solutions that do not require blockchain:
- Structural separation of voter and ballot: if the database contains no linkage between identity and vote choice, leaks are structurally impossible. Complex encryption is unnecessary.
- Hash chains: each vote embeds a hash of prior votes. Any alteration breaks the chain, making tampering detectable by anyone with raw data access.
- Independent redundancies: maintaining multiple copies of the vote ledger — including real-time feeds to independent election monitors — forces bad actors to compromise multiple disparate systems simultaneously.
- Individual verifiability: voters receive a unique receipt code to verify their unspooled vote appears intact in the published tally.
- Data transparency: the tally can be listed directly from the database, eliminating proprietary tools and opaque algorithms.
Relational hash chains: what you need from blockchain, without blockchain
The sole element of blockchain genuinely useful for voting is the concept of hash chaining: embedding cryptographic references to prior records into each entry so modifications are instantly detectable.
This can be implemented inside standard relational databases:
- Each vote record stores a SHA-256 hash computed over its content plus the hashes of the 5 preceding votes.
- At poll closing, the system verifies chain continuity from the initial vote to the final one.
- Any insertion, modification, or deletion ruptures the chain — detectable without specialized tooling.
This delivers the exact immutability guarantees of a private blockchain using standard infrastructure, minimal operational overhead, and straightforward technician auditing.
Conclusion
Blockchain technology excels at specific problems: coordinating untrusted parties without a central referee where complete transparency is desired. Organized voting possesses none of those traits.
When an e-voting platform promotes blockchain as a selling point without detailing the precise problem solved — or how voter secrecy is preserved — the proper response is to demand details. Usually, none exist.
Genuine online voting security stems from structural data separation, auditable transparency, and independent oversight. None of these require blockchain.