The Dark Endgame of CL, EL & Application Layers Without IP-level Privacy
summary
Claim: lack of IP‑level privacy lets infrastructure operators link ENS pages, IPFS DHT queries, Graph requests and RPC calls to real accounts and actions, enabling deanonymization and front‑running. Demonstrated by a modified Lighthouse node that collects attestations and links validator keys to IPs, identifying an entire validator team in days, and by IPFS/Graph harvesting of Uniswap.ipfs usage. Built mitigations include a Hopper mixnet and RPC middleware for RPC‑over‑mixnet; data‑harvesting already looks like a billion‑dollar game.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:04Trust assumptions in decentralized infrastructure
- 3:10Full-stack privacy is broken
- 6:17Yolo decentralization risks
- 8:24Uniswap privacy vulnerabilities
- 11:50Exploiting privacy gaps in the wild
- 13:39Privacy is inevitable for Web3 safety
- 14:42Solutions and call to action
related talks
08mPrivacy and Security
27mMetadata-private data transfer
27mBuilding blocks for Network Privacy
34mState of Lightning Privacy
46mPanel: DNS Privacy Vs.
05h 42mbitcoin++ privacy edition | Riga, Latvia | Day 1
10mAre Users Able to Take Control of Their Data?
17mLIVE w/ Josh S (Airfoil Capital) & Lee Clagett (The Monero Project) at MoneroKon 2019! EPI #71