Many blockchain networks aim to preserve the anonymity of validators in the peer-to-peer (P2P) network, ensuring that no adversary can link a validator's identifier to the IP address of a peer due to associated privacy and security concerns. This work demonstrates that the Ethereum P2P network does not offer this anonymity. We present a methodology that enables any node in the network to identify validators hosted on connected peers and empirically verify the feasibility of our proposed method. Using data collected from four nodes over three days, we locate more than 15% of Ethereum validators in the P2P network. The insights gained from our deanonymization technique provide valuable information on the distribution of validators across peers, their geographic locations, and hosting organizations. We further discuss the implications and risks associated with the lack of anonymity in the P2P network and propose methods to help validators protect their privacy. The Ethereum Foundation has awarded us a bug bounty, acknowledging the impact of our results.
Secret Leader Election in Ethereum PoS: An Empirical Security Analysis of Whisk and Homomorphic Sortition under DoS on the Leader and Censorship Attacks
本文构建统一对抗实验框架,实证比较 Whisk 与同态抽签两种 SSLE 机制在以太坊 PoS 中抵御 DoS 和审查攻击的效果与权衡。
Bribers, Bribers on The Chain, Is Resisting All in Vain? Trustless Consensus Manipulation Through Bribing Contracts
Eötvös Loránd University(厄特沃什·洛兰德大学);Aarhus University(奥胡斯大学);Budapest University of Technology and Economics(布达佩斯技术与经济大学);HUN-REN-BME Information Systems Research Group(匈牙利研究与教育网络-布达佩斯技术与经济大学信息系统研究组)
Wonderboom -- Efficient, and Censorship-Resilient Signature Aggregation for Million Scale Consensus
TU Wien(维也纳工业大学);Common Prefix;Institute of Science and Technology Austria(奥地利科学与技术研究院);Nanyang Technological University(南洋理工大学);Aarhus University(奥胡斯大学)
Quantifying Ethereum Energy Consumption via Network Mapping
FIZ Karlsruhe – Leibniz Institute for Information Infrastructure(FIZ卡尔斯鲁厄-莱布尼茨信息基础设施研究所);University of Göttingen(哥廷根大学);ProbeLab Analytics OÜ(ProbeLab分析有限公司)