Dusting Attacks - Reading Assignment

1, malicious activity where hackers and scammers try and break the privacy of Bitcoin and cryptocurrency users by sending tiny amounts of coins to their wallets.
2, The user identity can be revealed.
3, only if the dust is not used in further transactions
4, Added a ‘do not spend’ alert label.

1 Like
  1. What is the goal of a dusting attack?

Find out which Keys are connected to which wallets and persons.

  1. If a dusting attack is successful, how is the victim at risk?

Reveal financial transactions to third partys.

  1. Do dusting attacks work for type-1 HD wallets, type-2, or both?
    Depends on how the owner transfer amounts between the different addresses.

  2. What features did Samourai Wallet add to protect against dusting attacks?
    You can mark UTXO‘s with an „do not spend feature“.

1 Like
  1. What is the goal of a dusting attack?
    To de anonymise wallet addresses and allow the attackers to track your transactions and identity.

  2. If a dusting attack is successful, how is the victim at risk?
    A victim is at risk from phishing attacks and/or cyber extortion

  3. Do dusting attacks work for type-1 HD wallets, type-2, or both?
    Yes, if the user transacts the dust.

  4. What features did Samourai Wallet add to protect against dusting attacks?
    A do not spend feature labelling suspicious values of Bitcoin, BNB and other cryptos, so to prevent the transaction of said dust.

1 Like
  1. What is the goal of a dusting attack?
    Scammers send small funds to bitcoinaddresses in order to track the identity behind the bitcoinaddress.
  2. If a dusting attack is successful, how is the victim at risk?
    If successful, the attackers may use this knowledge against their targets, either through elaborated phishing attacks or cyber-extortion threats.
  3. Do dusting attacks work for type-1 HD wallets, type-2, or both?
    They work for both.
  4. What features did Samourai Wallet add to protect against dusting attacks?
    The Samourai Wallet team implemented a real-time alert for dust tracking as well as a “Do Not Spend” feature that lets users mark suspicious funds, so these are not included in future transactions.
1 Like
  1. What is the goal of a dusting attack?
    The goal is to identify the person or the company behind a specific wallet.

  2. If a dusting attack is successful, how is the victim at risk?
    Risk of elaborate phishing attacks or extortion and blackmail.

  3. Do deterministic wallets protect against dusting attacks?
    No, because when a user spends funds there is (usually) no way to prevent it from using those dust funds.

  4. What features did Samourai Wallet add to protect against dusting attacks?

Samourai Wallet includes the ability to detect and alert users to funds from potential dusting attacks. [
The Samourai wallet protects and secures their users wallet data with advanced AES-256 encryption so that the wallet is protected from malware and other server attacks.

1 Like
  1. Dusting attacks are a method to analyze Blockchain transactions and deanonimize users.
  2. The victim is at risk because they lose their privacy, because hackers have access to your information.
  3. A Deterministic wallet fights against dusting because your address changes and dusting requires combined addresses.
  4. The wallet can report suspicious activity and has an implemented “DO NOT SPEND” feature that lets users mark suspicious funds.
1 Like

Hi there!

  1. What is the goal of a dusting attack?
    1.1 The goal is to determine wallet accounts to user by sending small amounts of BTC to different addresses. When the small amounts of BTC “DUST” is moved in on TX then there is trace left behind and that can be linked to a wallet.

  2. If a dusting attack is successful, how is the victim at risk?
    2.1As long the victim is anonymous then the risk is low, but if the victim is known the you could attack him/her physically or virtually.

  3. Do dusting attacks work for type-1 HD wallets, type-2, or both?
    3.1 Yes, it works on both, don’t move the dust.

  4. What features did Samourai Wallet add to protect against dusting attacks?
    4.1 Samourai Wallet added feature to mark UNK DUST UTXO as “Do not spend” funds.
    Wait for 100 to 1000 years and then spend that “DUST” because it will be worth more than now :smile:

1 Like
  1. What is the goal of a dusting attack?
    a tiny fraction of a token like 1 satoshi sending this tiny amount to addresses to attempt to identify the owner of the address.

  2. If a dusting attack is successful, how is the victim at risk?
    They would gain information on the wallet in attempt of doxing the address.

  3. Do dusting attacks work for type-1 HD wallets, type-2, or both?
    Yes, its suggested not to move the fractional transactions sent.

  4. What features did Samurai Wallet add to protect against dusting attacks? They flag transactions for owners of the wallet to identify from attempted phishing.

1 Like
  1. What is the goal of a dusting attack? Purpose of “un-masking” or de-anonymizing the addresses
  2. If a dusting attack is successful, how is the victim at risk? The victim may be a target for phishing attacks or even extortion practices.
  3. Do dusting attacks work for type-1 HD wallets, type-2, or both? deterministic wallet can protect from dusting attack changing the receiving address after every transaction.
  4. What features did Samourai Wallet add to protect against dusting attacks? Samourai Wallet sends an alert to their users on suspicious or dust transactions, they also implemented a “do not spend” feature to allow users to mark those suspicious funds and prevent them from using them.
1 Like
  1. What is the goal of a dusting attack?
    To identify the owner of a group of addresses and eventually steal his funds.
  2. If a dusting attack is successful, how is the victim at risk?
    The owner of the addresses may be a phishing target.
  3. Do dusting attacks work for type-1 HD wallets, type-2, or both?
    Both.
  4. What features did Samourai Wallet add to protect against dusting attacks?
    A detector of suspicious transactions and the option to tag them as “Do not spend” so that the identification process of the attack can not be performed.
1 Like

1.- Trying to break a user’s privacy by sending a small amount of BTC to their personal wallets.

2.- Their transactional history is at risk.

3.- A deterministic wallet can prevent this by changing its address after evey transaction, they affect both.

4.- A way to detect suspicious activity.

1 Like
  1. To identify the wallet owner
  2. targeted phishing and/or extortion
  3. both
  4. “Do not spend” to prevent identification
1 Like
  1. What is the goal of a dusting attack?
    The goal of a dusting attack is to reveal private information such as link wallets to owners and monitor financial activity.
  2. If a dusting attack is successful, how is the victim at risk?
    Their privacy is at risk. They might reveal their identity and be subject to personalized attacks such as phishing.
  3. Do dusting attacks work for type1 HD wallets, type-2, or both.
    Dusting attacks are effective against both types of HD wallets. However, HD wallets provide some protection because the attacker has to recognize that two addresses belong to the same user.
  4. What features did Samourai Wallet add to protect against dusting attacks?
    They added automated detection of potential attacks and allowed users to put “do not spend” labels on suspicious funds.
1 Like
  1. to determinte wallet identity by tracking utxo
  2. exploit via phishing
  3. Type 1 only
  4. do not spend feature
1 Like

Both are, because one can link the addresses once the funds are spent. :slight_smile:

  1. What is the goal of a dusting attack?
    To link multiple public addresses to a single user

  2. If a dusting attack is successful, how is the victim at risk?
    Deanonymizes transactions/wallet/user

  3. Do dusting attacks work for type-1 HD wallets, type-2, or both?
    Both

  4. What features did Samourai Wallet add to protect against dusting attacks?
    Real time alerts when a “dust” transaction is performed
    A “Don Not Spend” tag to mark dust transaction and possibility to not include in future transactions

1 Like
  1. The goal of a dusting attack is to eventually link the dusted addresses and wallets to their respective companies or individuals; i.e. de-anonymize the person or company behind each wallet.
  2. The victim is at risk in two principal ways after a successful dusting attack. Firstly via phishing attacks, and secondly via cyber-extortion threats.
  3. Dusting attacks only work for both type-1 and type-2 wallets if a brand new Bitcoin address is not created for every new receiving transaction or payment request.
  4. Samourai Wallet added two new features to protect against dusting attacks. One by implementing a real-time alert for dust tracking, and two by incorporating a “Do Not Spend” feature that lets users mark suspicious funds, so these are not included in future transactions.
1 Like
  1. To deanonymize blockchain users.
  2. Their personal information would be discovered, and their transactions/wallet would be linked to their real identity. They would be deanonymized.
  3. HD wallets can protect from dusting attacks because the public key is changed after every transaction.
  4. Samourai Wallet’s implementation is marking any very tiny UTXO’s that come through. These UTXO’s are isolated and never used for future transactions.
1 Like

Dusting attacks’ goal is to deanonymize users. By sending small amounts of various wallets, attackers could break the privacy of users.

If successful, the users would be identified and attackers could blackmail users.

It works on all wallets.

Dusting alert and Do Not Spend features were added to Samurai Wallets to prevent Dusting.

1 Like

To identity and analyze blockchain TXs and de-anonymize user.

As soon as dust TXs that are sent to users start moving, the users ID can be de-anonymized to attackers.

Dusting attacks work on all wallet types. just make sure not to move those funds. some wallets like Samourai Wallet allow those unknown dust-amounts to be frozen. Again: Do not reuse wallet addresses.

It can freeze unknown inbound dusts from being transacted later.

1 Like