Since Bitcoin appeared in 2009, the digital currency has been hailed as an Internet marvel and decried as the preferred transaction vehicle for all manner of criminals. It has left nearly everyone without a computer science degree confused: Just how do you “mine” money from ones and zeros?\nThe answer lies in a technology called blockchain, which can be used for much more than Bitcoin. A general-purpose tool for creating secure, decentralized, peer-to-peer applications, blockchain technology has been compared to the Internet itself in both form and impact. Some have said this tool may change society as we know it. Blockchains are being used to create autonomous computer programs known as “smart contracts,” to expedite payments, to create financial instruments, to organize the exchange of data and information, and to facilitate interactions between humans and machines. The technology could affect governance itself, by supporting new organizational structures that promote more democratic and participatory decision making.\nPrimavera De Filippi and Aaron Wright acknowledge this potential and urge the law to catch up. That is because disintermediation—a blockchain’s greatest asset—subverts critical regulation. By cutting out middlemen, such as large online operators and multinational corporations, blockchains run the risk of undermining the capacity of governmental authorities to supervise activities in banking, commerce, law, and other vital areas. De Filippi and Wright welcome the new possibilities inherent in blockchains. But as Blockchain and the Law makes clear, the technology cannot be harnessed productively without new rules and new approaches to legal thinking.
Bitcoin cryptocurrency system enables users to transact securely and pseudo-anonymously by using an arbitrary number of aliases (Bitcoin addresses). Cybercriminals exploit these characteristics to commit immutable and presumably untraceable monetary fraud, especially via ransomware; a type of malware that encrypts files of the infected system and demands ransom for decryption. In this paper, we present our comprehensive study on all recent ransomware and report the economic impact of such ransomware from the Bitcoin payment perspective. We also present a lightweight framework to identify, collect, and analyze Bitcoin addresses managed by the same user or group of users (cybercriminals, in this case), which includes a novel approach for classifying a payment as ransom. To verify the correctness of our framework, we compared our findings on CryptoLocker ransomware with the results presented in the literature. Our results align with the results found in the previous works except for the final valuation in USD. The reason for this discrepancy is that we used the average Bitcoin price on the day of each ransom payment whereas the authors of the previous studies used the Bitcoin price on the day of their evaluation. Furthermore, for each investigated ransomware, we provide a holistic view of its genesis, development, the process of infection and execution, and characteristic of ransom demands. Finally, we also release our dataset that contains a detailed transaction history of all the Bitcoin addresses we identified for each ransomware.
Since the rise of the Islamic State of Iraq and Syria (ISIS, also known as Daesh and ISIL) in 2014, antiquities have been a widely publicized source of funding for what has become one of the most technologically savvy terrorist organizations of the modern era. The globalization of technology and rise of popularity in cryptocurrencies has changed the face of black-market trade and the actors that carry out these crimes. While art and antiquities have long served as a market with susceptibilities to laundering, the emergence of Dark Web markets, identification-masking software, and untraceable cryptocurrencies such as Bitcoin have opened new doors to potential vulnerabilities. The anonymity that is offered by these technologies acts as a roadblock for authorities, while attracting the likes of terrorists and transnational criminals. Investigative research using cyber security platforms to identify digital artifacts connected to potential traffickers provides the opportunity to unmask the seemingly untraceable actors behind these activities. The evidence of illicit antiquities trafficking on the Dark Web displayed in this article can generate a new discussion on how and where to study black-market antiquities to gain needed insight into combating the illicit trade online and the transnational criminal groups it may finance.
Rolf van Wegberg, J.J. Oerlemans, Oskar van Deventer
Purpose -This paper aims to shed light into money laundering using bitcoin. Digital payment methods are increasingly used by criminals to launder money obtained through cybercrime. As many forms of cybercrime are motivated by profit, a solid cash-out strategy is required to ensure that crime proceeds end up with the criminals themselves without an incriminating money trail. The authors examine how cybercrime proceeds can be laundered using services that are offered on the Dark Web.
O objetivo do artigo consiste em responder ao seguinte problema de pesquisa: a falta de regulamentação específica para as criptomoedas possui relação com a expansão das modalidades criminosas? Para responder ao referido problema, é necessário abordar o conceito de criptomoedas, sua expansão, o papel das instituições de controle e os limites jurídicos que reconhecem a existência dessa nova modalidade de tecnologia. Partimos do suposto de que o advento das criptomoedas em si não consiste em uma atividade criminosa pela ausência de regulamentação pelo Banco Central, mas sim, pode vir a se encaixar em tipos penais pelo mau uso dos softwares. A abordagem é qualitativa, com suporte em revisão de literatura e análise descritiva dos fenômenos pesquisados, além da consulta sobre a legislação sobre o tema. A contribuição é relevante pelo ineditismo e pela importância do tema no contexto financeiro e jurídico das transações realizadas em modalidade virtual. Conclui-se que não é possível associar diretamente o uso de bitcoins com a expansão das modalidades criminosas, entretanto, resta evidente que há relação subjacente entre a falta de regulamentação e a especialização de práticas criminosas que usam o ciberespaço como ambiente.
Cryptocurrencies are a type of digital currencies that are relying on cryptographic proofs for confirmation of transactions. Cryptocurrencies usually achieve a unique combination of three features: ensuring limited anonymity, independence from central authority and double spending attack protection. No other group of currencies, including fiat currencies, has this combination of features. We will define cryptocurrency ownership and account anonymity. We will define cryptocurrency ownership and account anonymity. We will introduce a classification of the types of approaches to regulation of cryptocurrencies by various individual countries. We will present the risks that the use of cryptocurrencies involves and the possibilities of prevention of those risks. We will present the possible use of cryptocurrencies for the benefit of the state. The conclusion addresses the implications of adoption of a cryptocurrency as a national currency.
The emergence of a cryptocurrencies in the economic circulation is a challenge for legal systems. The response of a legal system depends on social, political and international determinants. The first attempts to understand cryptocurrencies usually concerns tax law, which, however, are related to the civilian understanding of the phenomenon. In the Polish legal system, we had a lack of regulation directly related to cryptocurrencies, which caused them to be strictly qualified as an instrument whose exchange for money was not exempt from VAT as Bitcoin was not classified as money. This situation has changed as a result of the case law of the Court of Justice of the European Union, which has recognized Bitcoin as an alternative means of payment. Recently, new statutory regulations have been introduced in non-European legal systems, i.e. in Japan and Arizona, which regulate cryptocurrencies in a wider way. This allows us to propose classification of legal systems based on the relationship they have towards cryptocurrencies.
We examine blockchain technologies, especially smart contracts, as a platform for decentralized applications. By providing a basis for consensus, blockchain promises to upend business models that presuppose a central authority. However, blockchain suffers from major shortcomings arising from an over-regimented way of organizing computation that limits its prospects. We propose a sociotechnical, yet computational, perspective that avoids those shortcomings. A centerpiece of our vision is the notion of a declarative, violable contract in contradistinction to smart contracts. This new way of thinking enables flexible governance, by formalizing organizational structures; verification of correctness without obstructing autonomy; and a meaningful basis for trust.
Traditional database with no prior security measures is becoming challenging in the era of data technology. Database storage on a central location with single point of failure and vulnerable to cyber attacks is getting exposed to big risk of being hacked with the evolution of powerful machines and modern hacking techniques. Since its commencement, the BlockChain technology has shown a promising performance for application buildup in diversed fields of life from cryptocurrency to smart contracts and decentralized applications. Although multiple studies on privacy, data confidentiality and security issues of BlockChain are performed but a systematic examination is still needs attention. In this thesis work we conduct a systematic study about the vulnerabilities of BlockChain system and review the security enhancement solutions that may point to a good future direction for further research into the area of BlockChain technology and its applications. Smart contracts are self-executable objects hosted on the 2nd generation blockchain like Ethereum, carry billions of SEK worth of cryptocoins and cannot be updated once deployed. Smart contracts are generally considered secure objects but the systematic analysis of technology and source code exposes a new class of vulnerabilities which are more likely an ethical aspect of programming than the software coding errors. Besides the literature review we empower our results with a static code analysis especially with the perspective of cyber forensics.
Cryptocurrency is a relatively new form of investment. Its concept was first introduced in 2009, and has grown ever since. To this day, there are thousands of cryptocurrencies. Just as other currencies, cryptocurrency can be related to a crime. Ever since its introduction nearly a decade ago, there have been crimes where cryptocurrency are related. According to ACIC’s crime types, cryptocurrency are related to two crime categories: cybercrime, and illicit drugs. There are also other cases where the type of crimes is not listed as a part of ACIC’s. In response to the crimes that have occurred throughout the years, several governments have moved to establish laws regarding cryptocurrency. Some governments chose to ban cryptocurrency completely, whereas others opted for regulation.
Cecilia Anthony Das, Krishna Prasad, Shibley Sadique
This paper seeks to review the current regulatory regime governing cryptocurrencies, namely Bitcoin, in United States, United Kingdom, Canada and Singapore, and traces the regulatory trend in those identified countries. These developments are compared to the Australian context. From the comparative analysis conducted be-tween regimes available in other jurisdictions and those in Australia, the authors conclude that the Australian regulatory regime in relation to cryptocurrency, in particular Bitcoin, are comparable in some respects and in others are much progressive. This is specifically in light of the 2017 amendments relating to anti-money laundering legislation which places Australia as a strong forerunner to legislate on Bitcoin and anti-money laundering legislation. However, to successfully achieve this, Australia must address its lag in relation to the classification of Bitcoin and cryptocurrency respectively. As such, it is concluded that the regulatory regime of cryptocurrency both internationally and at the Australian level is far from satisfactory.
This thesis will examine the ways in which various cryptocurrencies have impacted certain traditional crimes. While crime is always evolving with technology, cryptocurrencies are a game changer in that they provide anonymous and decentralized payment systems which, while they can be tracked in a reactive sense via the blockchain, are seen by criminals as having better uses for them than traditional fiat currencies, such as the ability to send money relatively fast to another party without going through an intermediary, or the ability to obscure the origin of the money for money laundering purposes. Every week there are new cryptocurrencies flooding the market, and it doesn’t look like it will abate any time soon. Blockchain technology, the underlying technology behind all cryptocurrencies, has uses that far surpass just the currency aspect. Criminals also see the potential that sending money anonymously, without a middleman beholden to regulations and tracking those transactions has. Any new technology while being revolutionary, will always trickle down to seedier elements of society who will always find a use for it. This paper will look at how cryptocurrencies have impacted drug trafficking, money laundering, and ransomware. I will also explore a new kind of crime called cryptojacking that has become possible because of cryptocurrency mining. Law enforcement may be playing a reactive and not a proactive role in the age of cryptocurrencies, but this paper will provide information that can be useful for law enforcement and applicable to their investigations.
Cryptocurrencies are private, decentralized currencies that operate via the Internet and have attracted criminals because of the convenience and virtual anonymity they offer. While there are many descriptive accounts of cryptocurrencies and their use both in legal and illegal operations, to date there is no empirical research to understand the use of cryptocurrencies in transnational crime operations, specifically why transnational criminals may find them attractive to either conduct business or to launder their illicit proceeds. Using the environmental criminological framework, this study analyzed 100 cases of cryptocurrency use in transnational crime activities identified through various secondary sources, including online newspaper articles and publicly available court case information. Essentially this study used both quantitative and qualitative analysis to examine the ways in which cryptocurrencies facilitate transnational crimes. The findings indicate that criminals have been using cryptocurrencies to conceal the enormous amounts of money they are receiving for their crimes, specifically money laundering, drug trafficking (illicit drug sales), and terrorism financing. It was found that offenders can conduct business, launder money, and make a profit by using cryptocurrencies to facilitate their crimes, creating for crime opportunities permitted by cryptocurrencies. These opportunities include the ease of floating from one crime to another and using cryptocurrencies to cover offenders’ tracks, where cryptocurrencies can transact, launder, and conceal all in one. It was found that offenders gravitate towards using bitcoin to facilitate their operations, most likely due to its popularity and reliability. When looking at the crime of money laundering and illicit drug sales specifically, it was found that offenders can generate higher operation amounts, spanning into billions of dollars, all while evading detection. With the assumption that transnational criminals are rational beings, money laundering using cryptocurrencies has enormous benefits with these high operation amounts. This coupled with the low chances of being caught by law enforcement, makes money laundering a feasible crime where the benefits far outweigh the risks. This exploratory research is innovative and imperative to expanding academic knowledge on the evolution of crime with the use of cryptocurrencies and assisting in reducing the opportunities cryptocurrencies allow in transnational crime operations.
Bitcoin is a decentralized, pseudonymous, virtual currency which has been linked to many nefarious activities, such as money laundering, ransomware demands, and the purchase of contraband goods and services. Although it has many redeeming features such as low transaction costs, no charge-backs, and service to the world’s 2.5 billion unbanked, the public has become aware of Bitcoin through spectacular news stories of corruption and criminal activities. Techniques to investigate Bitcoin and to identify its users are therefore required to enforce laws and protect the public. This paper discusses what Bitcoin is and how it works, and explores various investigative methodologies to perform Bitcoin network analysis, transactional analysis, and wallet analysis. Finally, this paper discusses emerging issues and suggests areas for improvement with the goal of gaining general acceptance of investigative techniques for admissibility as scientific evidence in courtroom testimony.
The scandal around Facebook and Cambridge Analytica in 2017 showed drastically that new concepts to share andstore information need to be developed in order to minimize the huge potential for abuse resulting from centralized information stored at trusted third parties. This thesis analysed to what degree current document exchange systems (e.g. Dropbox) comply with the information security services confidentiality, integrity, privacy, anonymity, authenticity of authors, non-repudiation, and accountability; with the result that all analysed systems lack support for privacy and anonymity. Mainly due to their centralized design, missing (meta)data encryption, and regulations of jurisdictions in which they operate. Based on that analysis a decentralized concept for document sharing in a peer-to-peer fashion utilising client-side encryption, the separation of data and metadata, metadata masking through Tor hidden services, and distributed ledger technology for directory service provision, was developed. The concept was proven through prototype implementation of a document exchange software called docShare and its information security services were compared with former analysed exchange technologies. The analysis showed that docShare has a better information security service provision but is still leaking identity information in form of IPad dresses when interacting with the distributed ledger Ethereum. Mainly because Ethereum doesn’t support traffic anonymization through Tor.
Bitcoin is the most popular cryptocurrency on the planet. It relies on strong cryptography and peer-to-peer network. Bitcoin is gaining more and more popularity in criminal society. That is why Bitcoin is often used as money laundering tool or payment method for illegal products and services. In this paper we explore various methods for Bitcoin users deanonimization, which is an important task in anti-money laundering process and cybercrime investigation.