Bitcoin Forensic Research

A List of Bitcoin Blockchain Forensic White Papers and Other Significant Reference Materials:

Bitcoin Users Deanonimization Methods
(2018) Sergey Avdoshin & Alex Lazarenko

Bitcoin is the most popular cryptocurrency on the planet. It relies on strong cryptography and peer-to-peer network. Bitcoin is gaining more and more popularity in criminal society. That is why Bitcoin is often used as money laundering tool or payment method for illegal products and services. In this paper we explore various methods for Bitcoin users deanonimization, which is an important task in anti-money laundering process and cybercrime investigation.

When A Small Leak Sinks A Great Ship: Deanonymizing Tor Hidden Service Users Through Bitcoin Transactions Analysis
(2018) Husam Al Jawaheri, Mashael Al Sabah, Yazan Boshmaf, Aiman Erbad

With the rapid increase of threats on the Internet, people are continuously seeking privacy and anonymity. Services such as Bitcoin and Tor were introduced to provide anonymity for online transactions and Web browsing. Due to its pseudonymity model, Bitcoin lacks retroactive operational security, which means historical pieces of information could be used to identify a certain user. We investigate the feasibility of deanonymizing users of Tor hidden services who rely on Bitcoin as a payment method by exploiting public information leaked from online social networks, the Blockchain, and onion websites. This, for example, allows an adversary to link a user with @alice Twitter address to a Tor hidden service with private.onion address by finding at least one past transaction in the Blockchain that involves their publicly declared Bitcoin addresses. To demonstrate the feasibility of this deanonymization attack, we carried out a real-world experiment simulating a passive, limited adversary. We crawled 1.5K hidden services and collected 88 unique Bitcoin addresses. We then crawled 5B tweets and 1M BitcoinTalk forum pages and collected 4.2K and 41K unique Bitcoin addresses, respectively. Each user address was associated with an online identity along with its public profile information. By analyzing the transactions in the Blockchain, we were able to link 125 unique users to 20 Tor hidden services, including sensitive ones, such as The Pirate Bay and Silk Road. We also analyzed two case studies in detail to demonstrate the implications of the resulting information leakage on user anonymity. In particular, we confirm that Bitcoin addresses should always be considered exploitable, as they can be used to deanonymize users retroactively. This is especially important for Tor hidden service users who actively seek and expect privacy and anonymity.

Automatic Bitcoin Address Clustering (2018)
Dmitry Ermilov, Maxim Panov†,Yury Yanovich

Bitcoin is digital assets infrastructure powering the
first worldwide decentralized cryptocurrency of the same name.
All history of Bitcoins owning and transferring (addresses and
transactions) is available as a public ledger called blockchain.
But real-world owners of addresses are not known in general.
That’s why Bitcoin is called pseudo-anonymous. However, some
addresses can be grouped by their ownership using behavior patterns and publicly available information from off-chain sources.
Blockchain-based common behavior pattern analysis (common
spending and one-time change heuristics) is widely used for
Bitcoin clustering as votes for addresses association, while offchain information (tags) is mostly used to verify results. In this
paper, we propose to use off-chain information as votes for
address separation and to consider it together with blockchain
information during the clustering model construction step. Both
blockchain and off-chain information are not reliable, and our
approach aims to filter out errors in input data.
The results of the study show the feasibility of a proposed
approached for Bitcoin address clustering. It can be useful
for the users to avoid insecure Bitcoin usage patterns and for
the investigators to conduct a more advanced de-anonymizing

Bitcoin Forensics: A Tutorial (2017)
David Neilson, Sukhvinder Hara and Ian Mitchell

Over the past eighteen months, the digital cryptocurrency Bitcoin has experienced significant growth in terms of usage and adoption. It has also been predicted that if this growth continues then it will become an increasingly useful tool for various illegal activities. Against this background, it seems safe to assume that students and professionals of digital forensics will require an understanding of the subject. New technologies are often a major challenge to the field of digital forensics due to the technical and legal challenges they introduce. This paper provides a set of tutorials for Bitcoin that allows for leaners from both backgrounds to be taught how it operates, and how it may impact on their working practice. Earlier this year they were delivered to a cohort of third year undergraduates. To the author’s knowledge, this represents the first integration of the topic into a digital forensics programme by a higher education provider.

Bitcoin Analytics (2016)
Volodymyr Solskyy, Taras Hnot, and Tetiana Gladkikh

When Bitcoin first appeared, it revolutionized the field of digital currencies. In our work we make an attempt to look at network state years after it was launched. We begin with presenting digital money history and core ideas that later become building blocks of Bitcoin protocol, then we use graph analysis framework to look for most influential nodes, interesting patterns and network development over time and statistical analysis to investigate user behavior.

The Challenge of Bitcoin Pseudo-Anonymity to Computer Forensics (2015)
Edward J. Imwinkelried, Jason Luu

This article evaluates two techniques that have been proposed for this purpose [to penetrate bitcoin pseudo-anonymity]. The first is traffic analysis. This technique relies on the entry nodes that users employ to access the Internet. The second is transaction graph analysis. This technique clusters transactions to identify natural chokepoints in the Bitcoin economy, that is, service islands where, for example, the user might convert Bitcoins to fiat currency. The chokepoints becomes a target for a law enforcement subpoena to learn the user’s IP address.

A Forensic Look at Bitcoin Cryptocurrency (2015)
Michael Doran

The increased use of cryptocurrencies such as Bitcoin among private users and some businesses has opened a new avenue of research in the field of digital forensics involving cryptocurrencies. Since the creation of Bitcoin in 2008, cryptocurrencies have begun to make a presence in the world of ecommerce. Cryptography serves as the underlying foundation for Bitcoin, which gives it the benefits of confidentiality, integrity, nonrepudiation and authentication. Having been designed and built upon the foundation of these four objectives makes Bitcoin an attractive alternative to mainstream currency and provides users with the benefits of payment freedom, security, very low fees, and fewer risks for merchants. Tools such as Internet Evidence Finder have the capability to recover some Bitcoin artifacts. However, because the cryptocurrency technology is relatively new, very little research has been dedicated to what other forensic artifacts are left on a user’s system as a result of Bitcoin, what those artifacts mean and how to recover them in order to build a successful case involving Bitcoin. This research seeks to ascertain what forensic artifacts are recoverable from a user’s system with Bitcoin wallet applications installed and actively used. Furthermore, this research seeks to recover any evidence of Bitcoin mining that would be present on a user’s system due to the use of such software or applications.

Deanonymisation of Clients in Bitcoin P2P Network (2014)

Alex Biryukov, Dmitry Khovratovich, Ivan Pustogarov

Bitcoin is a digital currency which relies on a distributed set of miners to mint coins and on a peer-to-peer network to broadcast transactions. The identities of Bitcoin users are hidden behind pseudonyms (public keys) which are recommended to be changed frequently in order to increase transaction unlinkability.
We present an efficient method to deanonymize Bitcoin users, which allows to link user pseudonyms to the IP addresses where the transactions are generated. Our techniques work for the most common and the most challenging scenario when users are behind NATs or firewalls of their ISPs. They allow to link transactions of a user behind a NAT and to distinguish connections and transactions of different users behind the same NAT. We also show that a natural countermeasure of using Tor or other anonymity services can be cut-off by abusing anti-DoS countermeasures of the Bitcoin network. Our attacks require only a few machines and have been experimentally verified. The estimated success rate is between 11% and 60% depending on how stealthy an attacker wants to be. We propose several countermeasures to mitigate these new attacks.

BitIodine: Extracting Intelligence from the Bitcoin Network Michele Spagnuolo, Federico Maggi, and Stefano Zanero

Bitcoin, the famous peer-to-peer, decentralized electronic
currency system, allows users to benefit from pseudonymity, by generating an arbitrary number of aliases (or addresses) to move funds. However, the complete history of all transactions ever performed, called “blockchain”, is public and replicated on each node. The data it contains is difficult to analyze manually, but can yield a high number of relevant information. In this paper we present a modular framework, BitIodine, which parses the blockchain, clusters addresses that are likely to belong to a same user or group of users, classifies such users and labels them, and finally visualizes complex information extracted from the Bitcoin network. BitIodine labels users (semi-)automatically with information on their identity and actions which is automatically scraped from openly available information sources. BitIodine also supports manual investigation by finding paths and reverse paths between addresses or users.
We tested BitIodine on several real-world use cases, identified an address likely to belong to the encrypted Silk Road cold wallet, or investigated the CryptoLocker ransomware and accurately quantified the number of ransoms paid, as well as information about the victims.
We release an early prototype of BitIodine as a library for building more complex Bitcoin forensic analysis tools.

An Inquiry into Money Laundering Tools in the Bitcoin Ecosystem (2013)

Malte Möser, Rainer Böhme, Dominic Breuker

We provide a first systematic account of opportunities and limitations of anti-money laundering (AML) in Bitcoin, a decentralized cryptographic currency proliferating on the Internet. Our starting point is the observation that Bitcoin attracts criminal activity as many say it is an anonymous transaction system. While this claim does not stand up to scrutiny, several services offering increased transaction anonymization have emerged in the Bitcoin ecosystem – such as Bitcoin Fog, BitLaundry, and the Send Shared functionality of Some of these services routinely handle the equivalent of 6-digit dollar amounts. In a series of experiments, we use reverse-engineering methods to understand the mode of operation and try to trace anonymized transactions back to our probe accounts. While Bitcoin Fog and successfully anonymize our test transactions, we can link the input and output transactions of BitLaundry. Against the backdrop of these findings, it appears unlikely that a Know-Your-Customer principle can be enforced in the Bitcoin system. Hence, we sketch alternative AML strategies accounting for imperfect knowledge of true identities but exploiting public information in the transaction graph, and discuss the implications for Bitcoin as a decentralized currency.

A Fistful of Bitcoins Characterizing Payments Among Men with No Names (2013)

Bitcoin is a decentralized virtual currency whose usage has skyrocketed since its introduction in January 2009. Like cash, the ownership of bitcoins is anonymous, as participants transact bitcoins using pseudonyms rather than persistent real-world identities. In this article, we examine the limitations of Bitcoin anonymity and discover that the ability to cluster pseudonyms according to heuristics about shared ownership allows us to identify (i.e., associate with a real-world entity or user) a significant and active slice of the Bitcoin economy. Along the way, we explain a lot about how Bitcoin works.

Structure and Anonymity of the Bitcoin Transaction Graph (2013)

Micha Ober, Stefan Katzenbeisser, and Kay Hamacher

The Bitcoin network of decentralized payment transactions has attracted a lot of attention from both Internet users and researchers in recent years. Bitcoin utilizes a peer-to-peer network to issue anonymous payment transactions between different users. In the currently used Bitcoin clients, the full transaction history is available at each node of the network to prevent double spending without the need for a central authority, forming a valuable source for empirical research on network structure, network dynamics, and the implied anonymity challenges, as well as guidance on the future evolution of complex payment systems. We found dynamical effects of which some increase anonymity while others decrease it. Most importantly, several parameters of the Bitcoin transaction graph seem to have become stationary over the last 12–18 months. We discuss the implications.

Evaluating User Privacy in Bitcoin (2012)
Elli Androulaki, Ghassan O. Karame, Marc Roeschlin, Tobias Scherer and Srdjan Capkun

Bitcoin is quickly emerging as a popular digital payment system. However, in spite of its reliance on pseudonyms, Bitcoin raises a number of privacy concerns due to the fact that all of the transactions that take place are publicly announced in the system. In this paper, we investigate the privacy provisions in Bitcoin when it is used as a primary currency to support the daily transactions of individuals in a university setting. More specifically, we evaluate the privacy that is provided by Bitcoin (i) by analyzing the genuine Bitcoin system and (ii) through a simulator that faithfully mimics the use of Bitcoin within a university. In this setting, our results show that the profiles of almost 40% of the users can be, to a large extent, recovered even when users adopt privacy measures recommended by Bitcoin. To the best of our knowledge, this is the first work that comprehensively analyzes, and evaluates the privacy implications of Bitcoin.

Quantitative Analysis of the Full Bitcoin Transaction Graph (2012)

Dorit Ron and Adi Shamir

The Bitcoin scheme is a rare example of a large scale global payment system in which all the transactions are publicly accessible (but in an anonymous way). We downloaded the full history of this scheme, and analyzed many statistical properties of its associated transaction graph. In this paper we answer for the first time a variety of interesting questions about the typical behavior of users, how they acquire and how they spend their bitcoins, the balance of bitcoins they keep in their accounts, and how they move bitcoins between their various accounts in order to better protect their privacy. In addition, we isolated all the large transactions in the system, and discovered that almost all of them are closely related to a single large transaction that took place in November 2010, even though the associated users apparently tried to hide this fact with many strange looking long chains and fork-merge structures in the transaction graph.

Bitcoin: Tempering the Digital Ring of Gyges or Implausible Pecuniary Privacy (2011)
Matthew Elias

The architecture of the internet leads individuals to perceive themselves as having a greater degree anonymity when online. Bitcoin’s architecture is analogous in that it utilizes peer-to-peer networking and cryptography, resulting in a similar perception of anonymity. But, anonymity on the internet is a function of one’s technical knowledge and ability, and of the amount of resources one is able to dedicate towards that end. States, international bodies, and institutional actors constantly struggle with crafting their laws to mollify this equilibrium.

Anonymity in electronic money was severely diminished after E-Gold. But, money needs to be understood as the basis for price-indexes through which individuals disseminate information to one another. To divorce the concept of the money and the concept of internet would be a wholly incoherent course of action at this point. For these reasons, attempts on the part of international actors and states at regulating Bitcoin will not result in a reduction in its anonymity to a quantum less than that of the internet.

Bitcoin: A Peer-to-Peer Electronic Cash System (2009)
Satoshi Nakamoto

A purely peer-to-peer version of electronic cash would allow online payments to be sent directly from one party to another without going through a financial institution. Digital signatures provide part of the solution, but the main benefits are lost if a trusted third party is still required to prevent double-spending. We propose a solution to the double-spending problem using a peer-to-peer network. The network timestamps transactions by hashing them into an ongoing chain of hash-based proof-of-work, forming a record that cannot be changed without redoing the proof-of-work. The longest chain not only serves as proof of the sequence of events witnessed, but proof that it came from the largest pool of CPU power. As long as a majority of CPU power is controlled by nodes that are not cooperating to attack the network, they’ll generate the longest chain and outpace attackers. The network itself requires minimal structure. Messages are broadcast on a best effort basis, and nodes can leave and rejoin the network at will, accepting the longest proof-of-work chain as proof of what happened while they were gone.