平衡DeFi中的隐私与合规：一种基于零知识证明的可审计跨链框架
Balancing Privacy and Compliance in DeFi: A Zero-Knowledge-Based Auditable Cross-Chain Framework
- University of Warwick（华威大学）
- Guangdong University of Finance and Economics（广东财经大学）
- University College London（伦敦大学学院）
机构由 AI 辅助整理，请以论文原文为准。
AI总结：
该研究针对DeFi跨链交易的隐私与合规冲突，提出整合零知识证明、轻客户端与阈值视图密钥机制的可审计跨链框架，助力合规互操作的DeFi发展。
AI中文摘要：
随着去中心化金融（DeFi）的兴起，跨链交易（即不同区块链网络间的资产转移）面临用户隐私与监管合规之间的根本冲突。与单链系统不同，跨链环境必须在异构架构间平衡隐私与可审计性。现有解决方案，从透明账本到匿名加密货币，均无法协调这两项要求，阻碍了监管层面的采纳。本研究提出一种可审计的跨链框架，整合了三个核心模块：第一，零知识证明（ZKPs）可在不泄露交易细节的情况下验证交易合规性（如金额非负性、签名有效性）；第二，轻客户端机制实现了最小信任的跨链验证，无需依赖第三方中继器；第三，基于分布式密钥生成（DKG）的阈值视图密钥机制，确保仅在FATF旅行规则、MiCA法规等法律触发条件下，授权实体才能获得审计权限。对于跨境调查，该框架符合国家法律及欧盟《司法协助指令》。本研究将ZKPs、阈值密码学与轻客户端验证系统整合为一种可审计、隐私保护的跨链协议，为监管科技（RegTech）做出贡献，为合规、互操作的去中心化金融提供可行路径。
英文摘要：
The rapid emergence of decentralized finance (DeFi) has introduced complex challenges for cross-chain transactions, which involve transferring assets across disparate blockchain networks. A fundamental dilemma arises between user privacy and ensuring regulatory compliance. Unlike single-chain systems, cross-chain environments must address privacy and auditability across heterogeneous architectures. Existing approaches,ranging from transparent ledgers to anonymous cryptocurrencies, fail to reconcile these two requirements, hindering regulatory adoption. This research presents an auditable cross-chain framework that integrates three core components. First, zero-knowledge proofs (ZKPs) enable compliance verification (e.g., amount non-negativity, signature validity) without revealing transaction details. Second, a light-client mechanism enables trust-minimized cross-chain verification without dependence on third-party relayers. Third, a threshold view-key mechanism based on distributed key generation (DKG) restricts that audit access to authorized entities under legal triggers such as the FATF Travel Rule and MiCA Regulation. For cross-border investigations, the framework adheres to national laws and the EU Directive on Mutual Legal Assistance. This work systematically integrates ZKPs, threshold cryptography, and light-client verification into an auditable, privacy-preserving cross-chain protocol, and evaluates a prototype on the Ethereum Sepolia testnet. The results demonstrate the practical feasibility of privacy-preserving compliance verification for cross-chain DeFi. At the same time, broader interoperability and Regulatory Technology (RegTech) impact require further validation on additional chains and with real regulatory workflows.
