Tornado Cash中存取款活动的聚类分析：跨链研究
Clustering Deposit and Withdrawal Activity in Tornado Cash: A Cross-Chain Analysis
AI总结：
本文首次对以太坊、BNB智能链和Polygon上的Tornado Cash活动进行跨链实证研究，提出地址复用、交易关联和新颖FIFO时间匹配三种聚类启发式方法，成功关联大量存款与取款，破解收款人匿名性，揭示链无关的用户行为导致密码学匿名保证失效的问题。
摘要：
Tornado Cash是一种去中心化混币器，采用密码技术切断存款人与取款人之间的链上轨迹。然而，在实际应用中，其匿名性可能因用户行为和操作特性而受损。我们首次对以太坊、BNB智能链和Polygon上的Tornado Cash活动进行跨链实证研究，提出三种聚类启发式方法：（i）地址复用，（ii）交易关联，（iii）一种新颖的先进先出（FIFO）时间匹配规则。这些方法共同将存款与取款重新关联，使大量收款人匿名性被破解。分析显示，通过地址复用和交易关联启发式，5.1 - 12.6%的取款可追溯至原始存款；加入FIFO时间匹配启发式后，关联率进一步提升15 - 22个百分点。统计测试证实这些FIFO匹配极不可能是偶然发生的。以太坊、BNB智能链和Polygon上的可比信息泄露表明，这是链无关的用户不当行为，而非链特定的协议缺陷。这些结果揭示了密码学保证在日常使用中会迅速失效，强调了规范用户行为和隐私感知协议设计的必要性。总体而言，我们的启发式方法将超过23亿美元的Tornado Cash取款与可识别存款关联，暴露了实际匿名性中的重大漏洞。
英文摘要：
Tornado Cash is a decentralised mixer that uses cryptographic techniques to sever the on-chain trail between depositors and withdrawers. In practice, however, its anonymity can be undermined by user behaviour and operational quirks. We conduct the first cross-chain empirical study of Tornado Cash activity on Ethereum, BNB Smart Chain, and Polygon, introducing three clustering heuristics-(i) address-reuse, (ii) transactional-linkage, and (iii) a novel first-in-first-out (FIFO) temporal-matching rule. Together, these heuristics reconnect deposits to withdrawals and deanonymise a substantial share of recipients. Our analysis shows that 5.1 - 12.6% of withdrawals can already be traced to their originating deposits through address reuse and transactional linkage heuristics. Adding our novel First-In-First-Out (FIFO) temporal-matching heuristic lifts the linkage rate by a further 15 - 22 percentage points. Statistical tests confirm that these FIFO matches are highly unlikely to occur by chance. Comparable leakage across Ethereum, BNB Smart Chain, and Polygon indicates chain-agnostic user misbehaviour, rather than chain-specific protocol flaws. These results expose how quickly cryptographic guarantees can unravel in everyday use, underscoring the need for both disciplined user behaviour and privacy-aware protocol design. In total, our heuristics link over $2.3 billion in Tornado Cash withdrawals to identifiable deposits, exposing significant cracks in practical anonymity.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
