How to find criminals in a Privacy-Based World?
ETH Tbilisi 03 · December 2025 · 7:45
On-chain investigator eyeonchains debates how scammers and criminals can still be traced when they use zero-knowledge and other privacy tools. The clip covers investigation techniques, anti-money-laundering practice and the tension with privacy. Recorded at ETH Tbilisi 03.
Speakers
Topics
From ETH Tbilisi 03, hosted by ETHTbilisi.
Transcript
That became a problem when uh we talk about like uh big wallet leagues like uh benance/3 commas uh who um actually track this money after that leak and uh also find the person who would do this uh and uh that uh zero knowledge systems actually uh take away that opportunity from us as a users uh not only for us uh for the government and uh FBI I don't know uh nobody can track it nobody can uh find the person
who did it uh what do you think about that uh in terms of like uh zero knowledge systems >> uh what I'm thinking about it's uh It's to act um to to so to introduce so many compliance structure to prevent any type of um bad intention from the users. Um so is to using some limits like uh um like let's take an example. So if they they introduce so many uh layer on inside to tornado people
cannot uh moving funds very easily inside into and um so deposit infinite money. So there are very important to to introduce limits about the the size the sizing of the amount we think and uh a compliance like um the po introduced by privacy pools. So uh you can um you can prove the money um inside your wallets they are not uh uh they are not coming from u exploits or criminal activities
um and the bad things I think um it's a bit hard to try to to to introduce more of these things I mentioned. So the I I don't remember the other things you you asked me. Sorry if you can repeat. >> There was there was a big uh leak from three/b Binance uh for big leak for wallets. Uh many people lose money and u at some point uh uh the companies uh not actually the
companies but uh someone uh find that uh person who stole this money actually uh that group of person by the way I don't know uh actually uh what uh how it finished but is uh it was like uh pointed to uh some group of people uh who are responsible for this. Uh when we got um uh zero zero knowledge system without uh tracking uh anything like uh who is the uh transaction uh from where it uh the transaction was.
Uh it's kind of became impossible to like find people who stole u users money from their wallets. >> Um In this in this type of case depends about the digital footprints they leave. So if there is someone already got who did the exploits who stole the money. So is also criminal. Let's say these meetings then um it's not uh impossible to to find them because um if the money they are actually inside in
a wallet these phones they they will need to move. Um let's let's take an example. I can share this info is a clue actually. Um I don't know if you following up the money case one exploit happens like two months ago is the same is the same things. So people knowing who did it and um the money they are still holding in the wallet but you need to know this um these phones they will need to to go out one day and uh what you can do it's it's wait this moment and then uh then try to
to track it >> but as I understand uh when you uh when you try to take money out. There is still no uh if you for example like want to do it from the uh zero knowledge system to uh for example u uh your own personal wallet. Uh you should prove uh should you prove uh the that um where that money from?
>> Sorry, sorry, sorry. I will I will intervene into into the question because I'm one of the biggest user of tornado before it was like so basically when you when you use tornado okay you uh you get like um a note okay that only you know and with this note you can uh withdraw the money with another wallet and so the connection between your initial wallet and the other wallet is uh is anonymous in theory. Okay. So um what he's he's saying is that from uh even if uh like uh someone steal like for example from uh this this protocol okay and they send
maybe like uh x amount of transaction to tornado uh you can still uh in some way like coming back even if you don't have like 100% secure because uh uh you can see for example that the the wallet who stole money is send like 0.5 E on tornado and another transaction is send like for example one E. Okay. And if you know pretty much like what is going on with uh other tornado uh like uh money that are coming in and out, you can basically not having like 100% secure but you can say in a percentage of possibility that probably this money came out to this wallet and so and basic
on on the future transaction you can say ah probably this no because it's from this person this no because it's another person. So you you can still like uh going back actually like full anonymity is still like not not not that thing like on this case like you still have the the the the human layer like after >> okay then what same things I say before you can use timing analysis and the sites amount then you can track it