Abstract: Traditional vulnerability management systems often face issues such as fragmented management frameworks, risks of data tampering, difficulties in tracing repair responsibilities, and insufficient incentives for participants, leading to inefficiency and hard-to-supervise of vulnerability remediation processes. To address these challenges, this study proposes a vulnerability management system for power enterprises based on the decentralized architecture, immutability, and full-chain traceability of block chain technology. The system integrates smart contracts, token-driven incentive mechanisms, responsibility assignment mechanisms, and distributed storage technology via the InterPlanetary File System (IPFS). Through systematic analysis and demonstration of multiple functional modules, including vulnerability data notarization, remediation progress tracking, responsibility tracing, and reward-punishment incentives, the proposed system can ensure high efficiency and closed-loop management of vulnerability management in power enterprises within a block chain environment, providing a novel solution for strengthening vulnerability management in the power sector.

Key words: vulnerability management, block chain, incentive mechanisms, closed-loop governance