Hello, won't you tell me your name?: Investigating Anonymity Abuse in IPFS

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Karapapas, Christos, Pittaras, Iakovos, Polyzos, George C., Patsakis, Constantinos
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866916780369248256
author Karapapas, Christos
Pittaras, Iakovos
Polyzos, George C.
Patsakis, Constantinos
author_facet Karapapas, Christos
Pittaras, Iakovos
Polyzos, George C.
Patsakis, Constantinos
contents The InterPlanetary File System~(IPFS) offers a decentralized approach to file storage and sharing, promising resilience and efficiency while also realizing the Web3 paradigm. Simultaneously, the offered anonymity raises significant questions about potential misuse. In this study, we explore methods that malicious actors can exploit IPFS to upload and disseminate harmful content while remaining anonymous. We evaluate the role of pinning services and public gateways, identifying their capabilities and limitations in maintaining content availability. Using scripts, we systematically test the behavior of these services by uploading malicious files. Our analysis reveals that pinning services and public gateways lack mechanisms to assess or restrict the propagation of malicious content.
format Preprint
id arxiv_https___arxiv_org_abs_2506_04307
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Hello, won't you tell me your name?: Investigating Anonymity Abuse in IPFS
Karapapas, Christos
Pittaras, Iakovos
Polyzos, George C.
Patsakis, Constantinos
Cryptography and Security
The InterPlanetary File System~(IPFS) offers a decentralized approach to file storage and sharing, promising resilience and efficiency while also realizing the Web3 paradigm. Simultaneously, the offered anonymity raises significant questions about potential misuse. In this study, we explore methods that malicious actors can exploit IPFS to upload and disseminate harmful content while remaining anonymous. We evaluate the role of pinning services and public gateways, identifying their capabilities and limitations in maintaining content availability. Using scripts, we systematically test the behavior of these services by uploading malicious files. Our analysis reveals that pinning services and public gateways lack mechanisms to assess or restrict the propagation of malicious content.
title Hello, won't you tell me your name?: Investigating Anonymity Abuse in IPFS
topic Cryptography and Security
url https://arxiv.org/abs/2506.04307