I've been surprised by the number of blockchain articles in Communications of the ACM and the more practical publication ACM Queue. I expect blockchain is a flash-in-the-pan topic that will get a lot of papers for a few years working on increasingly esoteric details, and then everyone will forget all about it in 5 years.

Being involved in audit/security for quite a while, I do appreciate the benefits of blockchain. Would I tell a large corporation to drop their DBs and switch to BC? Not this decade. As Jimmy Wales wrote "It works well.", and if it ain't broken, don't fix it.

I can imagine a general ledger audit to be 'bullet proof'. Of course there are other issues in a DB's user access management. But we can achieve the same results right here, right now, without having to invest $m to change our software/infrastructure/SIEM, etc. in order to achieve in 5 years, what we are already doing now.

Change will come (as always), but in the right time. Where "right" in this case is benefit largely outweigh costs (build/maintain/support/train/etc.)

What kind of usecase do you imagine for blockchain in audit/security, given that sensitive information can't be put on a public blockchain and the security provided by proof-of-work consensus doesn't work in a smaller private blockchain?