Search papers, labs, and topics across Lattice.
This paper analyzes the privacy implications of shielded UTXO-based protocols in decentralized finance (DeFi) by developing a layered system model and an analysis pipeline that assesses the Anonymity Set Size through historical transaction data. By evaluating the on-chain histories of multiple deployments, the authors demonstrate that the mean Anonymity Set Size can be significantly reduced by 40.1%-59.0% compared to temporal baselines, revealing critical insights into the dynamics of anonymity loss. The findings highlight the importance of public token constraints as a key factor in preserving privacy, while also providing a framework for understanding user behavior and informing future protocol design.
Anonymity in shielded UTXO protocols can drop by over 40% due to historical transaction patterns, reshaping our understanding of privacy in DeFi.
Shielded UTXO-based protocols are becoming a core form of privacy infrastructure for DeFi. Unlike mixers that organize privacy mainly around deposits and withdrawals, these protocols allow assets, once inside the shielded pool, to continue moving and being re-spent within the hidden state, and to become public only when users withdraw or interact with public DeFi protocols. Their anonymity is therefore no longer a flat pool-size problem, but a provenance problem that propagates across the note/UTXO, proof, and transaction layers. Yet, a unified analysis framework for this setting is still missing. We propose a layered system model and an analysis pipeline that uses prior history as the temporal baseline, applies cumulative pruning and cross-proof propagation to each proof's Commitment Set, and recursively traces the survivors through historical hidden-state transitions to derive the final transaction-level Anonymity Set Size. We evaluate our methodology on the complete on-chain histories of all four Railgun production deployments and five independent Hinkal pools across six EVM chains, analyzing 186,356 unshielding spend transactions. Using only public protocol traces and constraints, our non-heuristic analysis yields mean Anonymity Set Size reductions of 40.1%-59.0% relative to each deployment's temporal baseline; 3,679 transactions retain at most 10 addresses, including 1,228 singletons. Public token constraints are the strongest and most stable source of pruning in both protocols, while the effects of tree number, proof roots, and value constraints vary with protocol design and historical state. Together with representative cases, these results reveal interpretable anonymity-loss patterns and implications for user behavior and future protocol design.
