Web3 has a metadata problem, and it’s not going away  

16 March 2025

Cointelegraph by Casey Ford

  ​

Web3 has a metadata problem, and it’s not going away

Opinion by: Casey Ford, PhD, researcher at Nym Technologies

Web3 rolled in on the wave of decentralization. Decentralized applications (DApps) grew by 74% in 2024 and individual wallets by 485%, with total value locked (TVL) in decentralized finance (DeFi) closing at a near-record high of $214 billion. The industry is also, however, heading straight for a state of capture if it does not wake up. 

As Elon Musk has teased of placing the US Treasury on blockchain, however poorly thought out, the tides are turning as crypto is deregulated. But when they do, is Web3 ready to “protect [user] data,” as Musk surrogates pledge? If not, we’re all on the brink of a global data security crisis.

The crisis boils down to a vulnerability at the heart of the digital world: the metadata surveillance of all existing networks, even the decentralized ones of Web3. AI technologies are now at the foundation of surveillance systems and serve as accelerants. Anonymity networks offer a way out of this state of capture. But this must begin with metadata protections across the board.

Metadata is the new frontier of surveillance

Metadata is the overlooked raw material of AI surveillance. Compared to payload data, metadata is lightweight and thus easy to process en masse. Here, AI systems excel best. Aggregated metadata can reveal much more than encrypted contents: patterns of behaviors, networks of contacts, personal desires and, ultimately, predictability. And legally, it is unprotected in the way end-to-end (E2E) encrypted communications are now in some regions. 

While metadata is a part of all digital assets, the metadata that leaks from E2E encrypted traffic exposes us and what we do: IPs, timing signatures, packet sizes, encryption formats and even wallet specifications. All of this is fully legible to adversaries surveilling a network. Blockchain transactions are no exception.

From piles of digital junk can emerge a goldmine of detailed records of everything we do. Metadata is our digital unconscious, and it is up for grabs for whatever machines can harvest it for profit.

The limits of blockchain

Protecting the metadata of transactions was an afterthought of blockchain technology. Crypto does not offer anonymity despite the reactionary association of the industry with illicit trade. It offers pseudonymity, the ability to hold tokens in a wallet with a chosen name. 

Recent: How to tokenize real-world assets on Bitcoin

Harry Halpin and Ania Piotrowska have diagnosed the situation:

“[T]he public nature of Bitcoin’s ledger of transactions […] means anyone can observe the flow of coins. [P]seudonymous addresses do not provide any meaningful level of anonymity, since anyone can harvest the counterparty addresses of any given transaction and reconstruct the chain of transactions.”

As all chain transactions are public, anyone running a full node can have a panoptic view of chain activity. Further, metadata like IP addresses attached to pseudonymous wallets can be used to identify people’s locations and identities if tracking technologies are sophisticated enough. 

This is the core problem of metadata surveillance in blockchain economics: Surveillance systems can effectively de-anonymize our financial traffic by any capable party.

Knowledge is also an insecurity

Knowledge is not just power, as the adage goes. It’s also the basis on which we are exploited and disempowered. There are at least three general metadata risks across Web3.

  • Fraud: Financial insecurity and surveillance are intrinsically linked. The most serious hacks, thefts or scams depend on accumulated knowledge about a target: their assets, transaction histories and who they are. DappRadar estimates a $1.3-billion loss due to “hacks and exploits” like phishing attacks in 2024 alone. 

  • Leaks: The wallets that permit access to decentralized tokenomics rely on leaky centralized infrastructures. Studies of DApps and wallets have shown the prevalence of IP leaks: “The existing wallet infrastructure is not in favor of users’ privacy. Websites abuse wallets to fingerprint users online, and DApps and wallets leak the user’s wallet address to third parties.” Pseudonymity is pointless if people’s identities and patterns of transactions can be easily revealed through metadata.

  • Chain consensus: Chain consensus is a potential point of attack. One example is a recent initiative by Celestia to add an anonymity layer to obscure the metadata of validators against particular attacks seeking to disrupt chain consensus in Celestia’s Data Availability Sampling (DAS) process.

Securing Web3 through anonymity

As Web3 continues to grow, so does the amount of metadata about people’s activities being offered up to newly empowered surveillance systems. 

Beyond VPNs

Virtual private network (VPN) technology is decades old at this point. The lack of advancement is shocking, with most VPNs remaining in the same centralized and proprietary infrastructures. Networks like Tor and Dandelion stepped in as decentralized solutions. Yet they are still vulnerable to surveillance by global adversaries capable of “timing analysis” via the control of entry and exit nodes. Even more advanced tools are needed.

Noise networks

All surveillance looks for patterns in a network full of noise. By further obscuring patterns of communication and de-linking metadata like IPs from metadata generated by traffic, the possible attack vectors can be significantly reduced, and metadata patterns can be scrambled into nonsense.

Anonymizing networks have emerged to anonymize sensitive traffic like communications or crypto transactions via noise: cover traffic, timing obfuscations and data mixing. In the same spirit, other VPNs like Mullvad have introduced programs like DAITA (Defense Against AI-guided Traffic Analysis), which seeks to add “distortion” to its VPN network. 

Scrambling the codes

Whether it’s defending people against the assassinations in tomorrow’s drone wars or securing their onchain transactions, new anonymity networks are needed to scramble the codes of what makes all of us targetable: the metadata our online lives leave in their wake.

The state of capture is already here. Machine learning is feeding off our data. Instead of leaving people’s data there unprotected, Web3 and anonymity systems can make sure that what ends up in the teeth of AI is effectively garbage.

Opinion by: Casey Ford, PhD, researcher at Nym Technologies.

This article is for general information purposes and is not intended to be and should not be taken as legal or investment advice. The views, thoughts, and opinions expressed here are the author’s alone and do not necessarily reflect or represent the views and opinions of Cointelegraph.

 

You might also like

UK gov't proposes crypto rules in response to scams  
UK gov't proposes crypto rules in response to scams  

The United Kingdom’s Treasury and Chancellor of the Exchequer, Rachel Reeves, have proposed new crypto rules aimed at “support[ing] innovation while cracking down on fraudsters.”In an April 29 notice, the UK government announced draft rules for cryptocurrencies, including Bitcoin (BTC) and Ether (ETH), that would bring “crypto exchanges, dealers and agents” in line with regulations, as many residents were “exposed to risky firms and scams.” It cited discussions with US government officials, including a proposed US-UK cross-border sandbox from the Securities and Exchange Commission’s Hester Peirce.“Today’s announcement sends a clear signal: Britain is open for business — but closed to fraud, abuse, and instability,” said the notice. “The government will bring forward final cryptoasset legislation at the earliest opportunity, following engagement on the draft provisions with industry.”This is a developing story, and further information will be added as it becomes available.

$649B stablecoin transfers linked to illicit activity in 2024: Report  
$649B stablecoin transfers linked to illicit activity in 2024: Report  

Cryptocurrency compliance firm Bitrace found that $649 billion worth of stablecoins flowed through addresses classified as high-risk in 2024, according to an April 29 report.Bitrace defines high-risk blockchain addresses as those used by illegal entities to receive, transfer or store stablecoins.Crypto compliance firms typically score crypto wallet addresses based on their likelihood of involvement in illicit activities. The higher the risk, the higher the likelihood of foul play, and the less likely compliant crypto businesses are to accept the assets.Per the report, the amount accounted for roughly 5.14% of all stablecoin transaction volume in 2024. This is down 0.8% from 5.94% the previous year, but significantly higher than the 2.8% reported in 2022 and 1.63% in 2021.Proportion of high-risk stablecoin transactions. Source: BitraceRelated: Americans lost $9.3B to crypto fraud in 2024 — FBITron USDT tops high-risk transactionsTron-based USDt (USDT) dominates high-risk stablecoin transactions, with Bitrace data indicating that well over 70% of the volume moved on the network. The remaining high-risk stablecoin transactions are mostly Ethereum-based USDt and a small amount of USDC (USDC).A likely explanation for the prevalence of USDT is likely due to its larger market capitalization and adoption compared with other stablecoins. At the time of writing, CoinMarketCap shows that USDt has a market cap of over $148 billion, while USDC stands at over $62 billion.Tron’s prevalence is not as easy to explain. Ethereum remains the more popular choice for most stablecoin users, with DefiLlama showing nearly $124.3 billion worth of stablecoins circulating on the network. Tron ranks second, with about $71 billion — almost 43% less than Ethereum.When comparing USDT balances alone, Tron holds slightly more than Ethereum: 47.4% of USDT supply, versus Ethereum’s 45.44%.High-risk inflows by stablecoin type. Source: BitrueRelated: Tether stablecoin issuer and Tron launch financial crime unitCrypto gambling continues its riseBitrace also reported that in 2024, online gambling platforms processed $217.8 billion worth of stablecoins — a 17.5% increase over the previous year.Once again, USDT also dominated this type of activity. Still, USDC’s market share is rapidly rising, clocking in at 13.36% in 2024.Stablecoin inflows to gambling platforms. Source: BitrueThe data follows recent reports that crypto casinos generated more than $81 billion in revenue in 2024, even as regulators in key jurisdictions continued to block access to the platforms, according to a new report.Magazine: Ridiculous ‘Chinese Mint’ crypto scam, Japan dives into stablecoins: Asia Express

CBDCs ‘costly fiat copy’, not fintech success so far: Ex-Binance exec  
CBDCs ‘costly fiat copy’, not fintech success so far: Ex-Binance exec  

The United States’ rejection of a central bank digital currency has not halted the progress of CBDCs globally, but their success has been questionable so far, according to a former Binance executive.Global CBDC projects have not failed, but they have also not become what they were anticipated to be, according to Olga Goncharova, CEO at the consulting firm Rizz Go and former director of government relations in the Commonwealth of Independent States at Binance.“CBDCs were conceived as a technological breakthrough, but so far they look like expensive imitations of existing traditional fiat currencies that citizens and businesses already use through online banking and payment apps,” Goncharova told Cointelegraph at the Blockchain Forum in Moscow.Olga Goncharova during a panel on Web3 geopolitics at the Blockchain Forum 2025 on April 23. Source: Blockchain ForumThough some of the CBDC-like creatives date back to the 1990s, modern initiatives are yet to offer users a real added value compared to traditional payment channels, she said.CBDC leaders like China struggle with adoption“Today it is clear that the expectations around CBDCs were overestimated,” Goncharova claimed, adding that none of the jurisdictions worldwide have succeeded in the mass adoption of retail CBDCs.“Even in China, where the digital yuan project has been moving longer and more actively than others, its share in the payment system remains minimal,” she added, referring to multiple online reports suggesting that China’s CBDC has been struggling amid slow adoption.Source: Mercator Institute for China StudiesWith China’s CBDC early-stage research starting in 2014, China’s digital yuan is known as one of the biggest CBDC projects worldwide, offering an electronic version of the Chinese yuan intended for online and offline transactions.Related: China selling seized crypto to top up coffers as economy slows: ReportThe Chinese government has been actively promoting the use of the digital yuan. Still, some reports declared China’s digital project a failure in late 2024, referring to the downfall of Yao Qian, the first director of CBDC development at China’s central bank. Late last year, he was reportedly expelled from public office by the government.EU pushes a digital euro for autonomyEvery country has its reasons to pursue a CBDC, Goncharova continued, noting that the European Union has been pushing its digital euro project to protect its financial autonomy.“In the EU, the digital euro is perceived more as an instrument of strategic autonomy than as a response to market demand,” she stated, adding that its goal is to reduce reliance on payment giants like Visa and Mastercard.Source: ReutersHowever, the efforts to create a pan-European payment system have faced serious challenges, such as market share concerns by banks as well as adoption difficulties.“The European Central Bank has not yet decided whether the digital euro will operate on the blockchain, as it does not see convincing cases for programmability and points to technological risks,” Goncharova said.Russia delays a digital rubleRussia has emerged as one of the most active jurisdictions in the global CBDC race, but it’s yet to roll out its digital currency as well, which has been on multiple trials since early 2022.After seeing many launch delays, a digital ruble could be postponed further as Bank of Russia Governor Elvira Nabiullina in February announced that the mass adoption of a digital ruble would occur later than planned.A panel at the Blockchain Forum 2025 in Moscow. Source: Blockchain ForumAt the same time, Finance Minister Anton Siluanov has recently claimed that the digital ruble is scheduled to be rolled out for commercial banks in the second half of 2025.Related: Russian ruble stablecoin: Exec lists 7 ‘Tether replica’ features“In Russia, there is no urgent need to reduce dependence on foreign payment systems as in the EU,” Goncharova told Cointelegraph, adding:“The digital ruble is rather perceived as a tool for increasing the efficiency of internal settlements. The project is still at the testing stage. Its further development will depend on how clearly the tasks are formulated and whether there is practical sense for users and the economy.”While Russia has been delaying its digital ruble, some officials have recently called on the government to create ruble-pegged stablecoins, echoing the US’s stablecoin push.While several ruble stablecoins have already been introduced, it remains to be seen whether the initiatives can compete with giants like Tether’s USDt (USDT).Magazine: Ethereum is destroying the competition in the $16.1T TradFi tokenization race

Open chat
1
BlockFo Chat
Hello 👋, How can we help you?
📱 When you've pressed the BlockFo button, we automatically transfer to WhatsApp 🔝🔐
🖥️ Or, if you use a PC or Mac, then we'll open a new window to load your desktop app.