Deanonymizing Ethereum Validators: The P2P Network Has a Privacy Issue

Lioba Heimbach, Yann Vonlanthen, Juan Villacis, Lucianna Kiffer, Roger Wattenhofer

34th USENIX Security Symposium · Day 1

This research paper, presented at USENIX Security, unveils a critical privacy vulnerability within the **Ethereum peer-to-peer (P2P) network**. Authored by a team of researchers from ETH Zurich, University of Bern, and IMDEA Networks, the work demonstrates that the Ethereum P2P network, despite aims for anonymity, fails to adequately protect the identity of its validators. The core finding is a novel methodology that allows any node in the network to link a validator's unique identifier to the specific IP address of the machine hosting it.

AI review

Solid network-layer privacy research that actually matters. The ETH Zurich team found a real vulnerability in Ethereum's GossipSub attestation handling, deanonymized 15% of validators with four nodes over three days, and got a bug bounty for it. Not revolutionary, but methodologically sound and practically relevant.