Need to identify test scenarios for API Security testing for quantum based chat application which uses blockchain technology [on hold]

I need to identify API Security test scenarios for a quantum based chat app which uses blockchain technology. How do I go about it? Thanks in advance.

Also wondering how feasible will it be to use SOAP UI (Ready API version) that offers more features than the free version for Security testing