cryptocurrency security teams

Abstract: Tracing money flows in cryptocurrency transaction networks is challenging because funds can move across accounts, transactions, and token layers. We propose a transaction-aware graph in which nodes represent account--asset states within transactions, while edges encode observed transfers, inferred asset transformations, and temporal inter-transaction sequences. Applied to Aave borrow--repay flows, we compare graph construction and edge-pruning strategies and extract shortest paths using a heuristic weighting. Our results reveal a trade-off between reachability and interpretability and uncover frequent token sequences underlying how borrowed assets are transformed before repayment. This work lays a foundation for general, interpretable multi-token flow tracing.

Abstract: Slashing is commonly argued to secure proof-of-stake blockchains by confiscating the stake of misbehaving validators. The usual justification is that, without slashing, validators can solicit an equivocation attack by signing conflicting blocks: if enough others join, the attack succeeds; otherwise, the attempt incurs no loss. Slashing is intended to make such attempts costly and thereby guarantee the security of applications whose economic value is comparable to the bonded stake. This rationale, however, rests on heuristic arguments rather than a formal game-theoretic guarantee. We challenge this rationale by constructing a risk-free coordination protocol for rational validators under algorithmic slashing. We show that the prescribed strategy profile, in which rational validators solicit other validators to equivocate, constitutes an ex post Nash equilibrium, even when validators do not know in advance how many others will participate. The equilibrium holds for any gain $ε>0$ from successful equivocation, however small relative to the bonded stake. Thus, slashing alone does not guarantee economic security proportional to the value of bonded stake. Our results expose a fundamental limitation of algorithmic slashing. Whereas conventional collateral arrangements in many real-world scenarios can rely on external enforcement, for example through courts, algorithmic slashing depends on the same consensus process that the attackers control. These findings call for a formal analysis of slashing's security, rather than overly simplistic arguments drawn from financial systems with independent enforcement.