{"id":"https://openalex.org/W7167916159","doi":"https://doi.org/10.56553/popets-2026-0106","title":"Pseudonymity at Risk: Linkage Attacks on Blockchain Users with Off-Chain Cues","display_name":"Pseudonymity at Risk: Linkage Attacks on Blockchain Users with Off-Chain Cues","publication_year":2026,"publication_date":"2026-07-01","ids":{"openalex":"https://openalex.org/W7167916159","doi":"https://doi.org/10.56553/popets-2026-0106"},"language":null,"primary_location":{"id":"doi:10.56553/popets-2026-0106","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0106","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0106.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2026/popets-2026-0106.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5140410681","display_name":"Alexander Smirnov","orcid":null},"institutions":[{"id":"https://openalex.org/I4577782","display_name":"Technische Universit\u00e4t Berlin","ror":"https://ror.org/03v4gjf40","country_code":"DE","type":"education","lineage":["https://openalex.org/I4577782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Alexander Smirnov","raw_affiliation_strings":["TU Berlin"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU Berlin","institution_ids":["https://openalex.org/I4577782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140384586","display_name":"Stefan Schmid","orcid":null},"institutions":[{"id":"https://openalex.org/I4210117750","display_name":"Weizenbaum Institute","ror":"https://ror.org/023kksk09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I176453806","https://openalex.org/I2800804238","https://openalex.org/I2801702882","https://openalex.org/I315704651","https://openalex.org/I4210117750","https://openalex.org/I4577782","https://openalex.org/I46043019","https://openalex.org/I4923324","https://openalex.org/I75951250"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Stefan Schmid","raw_affiliation_strings":["TU Berlin and Weizenbaum Institute"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU Berlin and Weizenbaum Institute","institution_ids":["https://openalex.org/I4210117750"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041092993","display_name":"Friedhelm Victor","orcid":"https://orcid.org/0000-0001-8329-3133"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Friedhelm Victor","raw_affiliation_strings":["TRM Labs"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TRM Labs","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.79140486,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2026","issue":"3","first_page":"787","last_page":"800"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.7757999897003174,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.7757999897003174,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.054999999701976776,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11704","display_name":"Mobile Crowdsensing and Crowdsourcing","score":0.03519999980926514,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anonymity","display_name":"Anonymity","score":0.7993999719619751},{"id":"https://openalex.org/keywords/blockchain","display_name":"Blockchain","score":0.720300018787384},{"id":"https://openalex.org/keywords/database-transaction","display_name":"Database transaction","score":0.6561999917030334},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.47609999775886536},{"id":"https://openalex.org/keywords/linkage","display_name":"Linkage (software)","score":0.46299999952316284},{"id":"https://openalex.org/keywords/crowdsourcing","display_name":"Crowdsourcing","score":0.4237000048160553},{"id":"https://openalex.org/keywords/privacy-protection","display_name":"Privacy protection","score":0.3546999990940094},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.33340001106262207}],"concepts":[{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.7993999719619751},{"id":"https://openalex.org/C2779687700","wikidata":"https://www.wikidata.org/wiki/Q20514253","display_name":"Blockchain","level":2,"score":0.720300018787384},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7161999940872192},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.6561999917030334},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47920000553131104},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.47609999775886536},{"id":"https://openalex.org/C31266012","wikidata":"https://www.wikidata.org/wiki/Q6554340","display_name":"Linkage (software)","level":3,"score":0.46299999952316284},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4442000091075897},{"id":"https://openalex.org/C62230096","wikidata":"https://www.wikidata.org/wiki/Q275969","display_name":"Crowdsourcing","level":2,"score":0.4237000048160553},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.3546999990940094},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.33340001106262207},{"id":"https://openalex.org/C127722929","wikidata":"https://www.wikidata.org/wiki/Q7833714","display_name":"Transaction data","level":3,"score":0.3314000070095062},{"id":"https://openalex.org/C2777021972","wikidata":"https://www.wikidata.org/wiki/Q22976830","display_name":"Uniqueness","level":2,"score":0.3262999951839447},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.3158000111579895},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.3012000024318695},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.29089999198913574},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2854999899864197},{"id":"https://openalex.org/C136979486","wikidata":"https://www.wikidata.org/wiki/Q773483","display_name":"Existential quantification","level":2,"score":0.2849999964237213},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.2838999927043915},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.28349998593330383},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2768999934196472},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.258899986743927}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.56553/popets-2026-0106","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0106","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0106.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.56553/popets-2026-0106","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0106","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0106.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.5547662973403931}],"awards":[{"id":"https://openalex.org/G233911280","display_name":"ReNO: Resiliente Integration von maschinellem Lernen f\u00fcr den verbesserten Netzbetrieb","funder_award_id":"511099228","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G5930974260","display_name":null,"funder_award_id":"SPP 2378","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7167916159.pdf","grobid_xml":"https://content.openalex.org/works/W7167916159.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Public":[0],"blockchain":[1,56,64,177],"pseudonymity":[2],"is":[3,94],"vulnerable":[4],"to":[5,23,51,55,134,158,180],"off-chain":[6,46,174],"cues:":[7],"external":[8],"information":[9],"from":[10],"sources":[11],"such":[12,53,82,129],"as":[13,76,78,83],"social":[14],"media":[15],"or":[16],"data":[17,86],"leaks":[18],"that":[19,91,110],"can":[20,120,132],"be":[21],"linked":[22],"on-chain":[24,140],"activity,":[25],"enabling":[26],"user":[27,191],"de-anonymization.":[28],"This":[29],"paper":[30],"provides":[31],"the":[32,62,66,84,135,149,168,187,194],"first":[33],"comprehensive":[34],"framework":[35],"for":[36,189],"systematically":[37],"investigating":[38],"this":[39,131],"threat.":[40],"We":[41],"introduce":[42],"a":[43,113,138],"taxonomy":[44],"of":[45,69,116,137,147,163,196],"cues":[47,54,72,119,175],"and":[48,73,99,109,153,193],"propose":[49],"methodologies":[50],"match":[52],"data.":[57],"Our":[58,165,184],"empirical":[59],"evaluation":[60],"on":[61],"Ethereum":[63],"quantifies":[65],"de-anonymization":[67],"potential":[68],"both":[70],"individual":[71],"their":[74],"combinations,":[75],"well":[77],"real-world":[79],"case":[80],"studies":[81],"Celsius":[85,144],"leak.":[87],"The":[88],"results":[89],"show":[90],"cue":[92],"effectiveness":[93],"largely":[95],"determined":[96],"by":[97,173],"uniqueness":[98],"exactness":[100],"(e.g.,":[101],"specific":[102,118],"transaction":[103,150],"quantities,":[104],"interactions":[105],"with":[106],"rare":[107],"tokens),":[108],"combining":[111],"even":[112],"small":[114],"number":[115],"moderately":[117],"significantly":[121],"reduce":[122],"anonymity":[123],"sets.":[124],"For":[125],"users":[126,181],"revealing":[127],"multiple":[128],"cues,":[130],"lead":[133],"identification":[136],"single":[139],"address.":[141],"In":[142],"our":[143],"simulation,":[145],"knowledge":[146],"only":[148],"day,":[151],"asset,":[152],"exact":[154],"quantity":[155],"was":[156],"sufficient":[157],"potentially":[159],"identify":[160],"over":[161],"85%":[162],"depositors.":[164],"findings":[166],"demonstrate":[167],"significant":[169],"privacy":[170],"risks":[171],"posed":[172],"in":[176],"linkage":[178],"attacks":[179],"disclosing":[182],"them.":[183],"work":[185],"underscores":[186],"need":[188],"heightened":[190],"awareness":[192],"development":[195],"effective":[197],"countermeasures.":[198]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-07-11T00:00:00"}