Skip to main content

Software DevelopmentProfessionalAQS-BCD

IICTI Certified Blockchain Developer

Professional certification covering 11 modules, from consensus protocols, finality and blockchain security models to blockchain regulation, compliance and operational risk.

Exam
1 h 30 min
Questions
120
Pass mark
70%
Valid for
3 years

About this certification

Holders demonstrate that they can apply and evaluate consensus protocols, finality and blockchain security models, eVM internals and gas-optimised smart contract engineering, smart contract security, vulnerability classes and audit practice and formal verification, fuzzing and invariant testing, plus 7 further areas, in realistic professional scenarios, as defined in the AQSCERT scheme for Blockchain Developer.

Who it is for: Professionals working, or preparing to work, in software development roles.

Syllabus

What you'll be assessed on — 11 modules. The percentage is each module's share of the exam.
  1. 01Consensus protocols, finality and blockchain security models9% of the exam
    • Evaluate consensus and finality guarantees and their implications for application and protocol design.
    • Scope: PoW, PoS (Gasper, Tendermint/CometBFT, HotStuff), BFT assumptions, finality and reorg risk, MEV and proposer-builder separation, validator economics, liveness vs safety trade-offs.
  2. 02EVM internals and gas-optimised smart contract engineering10% of the exam
    • Design smart contracts that are correct, gas-efficient and resilient to EVM edge cases.
    • Scope: EVM execution model, storage layout and slots, calldata vs memory, transient storage (EIP-1153), Solidity and Yul optimisation, Vyper, compiler behaviour and gas profiling (Foundry, Hardhat).
  3. 03Smart contract security, vulnerability classes and audit practice11% of the exam
    • Evaluate smart contract designs for vulnerability classes and lead secure review and remediation.
    • Scope: Reentrancy, access control, oracle manipulation, flash-loan economic attacks, signature replay, front-running, SWC/OWASP Smart Contract Top 10, audit methodology, static analysis (Slither, Aderyn) and audit reporting.
  4. 04Formal verification, fuzzing and invariant testing9% of the exam
    • Design verification strategies that prove or stress critical invariants of on-chain systems.
    • Scope: Property-based and invariant fuzzing (Foundry, Echidna, Medusa), symbolic execution (Halmos, Manticore), formal verification (Certora, SMTChecker, K framework), specification writing and coverage.
  5. 05Upgradeability, contract architecture and on-chain governance9% of the exam
    • Architect upgradeable contract systems with safe governance and controlled change management.
    • Scope: Proxy patterns (Transparent, UUPS, Beacon, Diamond/EIP-2535), storage collision, initialisation risks, timelocks and multisig (Safe), DAO governance attacks, immutability vs upgradeability trade-offs.
  6. 06DeFi protocol design and mechanism economics9% of the exam
    • Evaluate DeFi mechanisms for economic soundness and design protocols resistant to manipulation.
    • Scope: AMMs and concentrated liquidity, lending and liquidation mechanics, stablecoin designs, oracle design (Chainlink, TWAP), tokenomics, incentive compatibility and economic attack modelling.
  7. 07Layer 2 scaling, rollups and cross-chain interoperability9% of the exam
    • Evaluate scaling and interoperability architectures and select designs based on their trust and security assumptions.
    • Scope: Optimistic and ZK rollups, data availability (EIP-4844 blobs, DA layers), sequencer centralisation, fraud and validity proofs, bridges and messaging (IBC, CCIP), bridge security failures and trust assumptions.
  8. 08Applied cryptography and zero-knowledge proof systems9% of the exam
    • Design applications that correctly apply cryptographic primitives and zero-knowledge proofs.
    • Scope: ECDSA/EdDSA and BLS signatures, Merkle and Verkle trees, commitment schemes, zk-SNARKs and zk-STARKs, circuit development (Circom, Noir, Halo2), MPC and threshold signatures.
  9. 09Account abstraction, wallets and key management9% of the exam
    • Architect wallet and key management solutions that balance usability, security and custody requirements.
    • Scope: ERC-4337 and EIP-7702, smart accounts, paymasters and bundlers, passkey signers, MPC and HSM custody, social recovery, transaction simulation and signing UX security.
  10. 10Enterprise and permissioned blockchain architecture8% of the exam
    • Evaluate when distributed ledgers fit enterprise problems and design permissioned architectures that integrate with existing systems.
    • Scope: Hyperledger Fabric, Besu and Corda, private data and confidentiality, identity and PKI integration, tokenisation of real-world assets (ERC-3643), off-chain integration, indexing (The Graph) and oracles for enterprise data.
  11. 11Blockchain regulation, compliance and operational risk8% of the exam
    • Evaluate regulatory and operational risk of blockchain solutions and design compliant, monitored deployments.
    • Scope: EU MiCA, DORA, FATF travel rule and AML/CFT, sanctions screening, GDPR and immutability, smart contract legal enforceability, incident response for on-chain exploits and monitoring (Forta, OpenZeppelin Defender).

Exam blueprint

Multiple-choice examination (120 questions, 4 options, single correct answer) built from professional scenarios.
Questions per module120 questions · 1 h 30 min · pass 70%
  • Consensus protocols, finality and blockchain security models11
  • EVM internals and gas-optimised smart contract engineering12
  • Smart contract security, vulnerability classes and audit practice13
  • Formal verification, fuzzing and invariant testing11
  • Upgradeability, contract architecture and on-chain governance11
  • DeFi protocol design and mechanism economics11
  • Layer 2 scaling, rollups and cross-chain interoperability11
  • Applied cryptography and zero-knowledge proof systems11
  • Account abstraction, wallets and key management11
  • Enterprise and permissioned blockchain architecture9
  • Blockchain regulation, compliance and operational risk9
Question types
Single choice 100%
Delivery
Online (remote proctored), Test centre, On-site (corporate)
Retakes
Up to three attempts within any 12-month period. A 14-day waiting period applies after a first unsuccessful attempt and 30 days after a second. Each retake requires a new booking and fee. Retakes draw a different randomised form from the question bank.

Provisional cut score — psychometric validation is required before live delivery. Blueprint v1.0.

Your path to certification

  1. 1

    Register

    Create a free account and start the programme.

  2. 2

    Practice

    Online practice test (coming soon).

  3. 3

    Training

    Optional

    Online course or classroom — or skip it.

  4. 4

    Certification

    Independent exam and certification decision.

Training is optional and does not by itself confer certification. Find a training partner

Eligibility & prerequisites

Required

  • Valid government-issued photo identification
  • Agreement to abide by the AQSCERT Code of Professional Conduct

Recommended

  • No formal prerequisites; relevant professional experience is strongly recommended

More information

Certification process
  1. 1. Application — Create an account and apply for this certification.
  2. 2. Eligibility review — AQSCERT checks the formal eligibility requirements.
  3. 3. Assessment — Sit the 1 h 30 min examination online or at a test centre.
  4. 4. Independent decision — A decision maker not involved in your training or assessment reviews all evidence.
  5. 5. Issuance — A digitally signed certificate with QR verification, valid for 3 years.
  6. 6. Recertification — Before expiry, evidence 60 hours of CPD or re-sit the examination.
  7. Certificates may be suspended, withdrawn or revoked in line with the Certification Scheme. Status is always shown on the public verification page.
Scheme & accreditation
Certification scheme
Software Development Certification Scheme
Scheme code
AQS-SCH-IT-02
Scheme version
v1.0 (effective 1 Jan 2026)

Accreditation: AQSCERT is accredited by DA, an IAF MLA signatory, to ISO/IEC 17024. Our programmes are developed by leading experts from industry.

Ready to start AQS-BCD?

Practise online, add optional training, then sit the independent exam.

  • Professional

    AQS-ST

    IICTI Certified Software Tester

    Professional certification covering 11 modules, from risk-based test strategy and quality engineering governance to leading test practices, process improvement and audits.

    Exam duration
    1 h 30 min
    Questions
    120 questions

    Exam fee from

    €100

  • Professional

    AQS-SDN

    IICTI Certified .NET Software Developer

    Professional certification covering 11 modules, from cLR internals, GC tuning and allocation-free C# to leading .NET modernisation and engineering governance.

    Exam duration
    1 h 30 min
    Questions
    120 questions

    Exam fee from

    €90

  • Professional

    AQS-DE

    IICTI Certified DevOps Engineer

    Professional certification covering 11 modules, from software supply chain security and SLSA build provenance to delivery performance analytics and cloud FinOps governance.

    Exam duration
    1 h 30 min
    Questions
    120 questions

    Exam fee from

    €120

  • Professional

    AQS-SA14

    IICTI Certified Software Architect

    Professional certification covering 11 modules, from quality-attribute-driven architecture and ATAM trade-off analysis to architecture decision governance and documentation.

    Exam duration
    1 h 30 min
    Questions
    120 questions

    Exam fee from

    €100