The Future of Crime in the Blockchain Economy

It all started with an online marketplace to buy drugs. Well, it had started a couple of years before that, but the darknet outfit known as Silk Road was the first time most people heard about bitcoin and cryptocurrency. After doing more than a billion dollars’ worth of trades in a little more than two years, Silk Road was shut down in 2013 following an FBI investigation. Despite this shady origin story, the technology behind the drug bazaar’s currency — blockchain — is now being touted as the most disruptive technology since the internet.

Blockchain is a way of digitally recording transactions in a universally shared and unchangeable ledger. And, like the internet, it is becoming a major part of the world’s digital infrastructure, from finance to health to public services, without shedding tagalong crime. If anything, “we’re just seeing the tip of the iceberg when it comes to crime,” says Jackson Palmer, a San Francisco–based project manager who shot to prominence in the crypto world as the creator of dogecoin, a cryptocurrency that now has a nine-figure market cap. “Dark-market usage represents quite a small percentage” of cryptocurrency exchanges, now that speculative trading and crowdfunding-style initial coin offerings (ICOs) for startups have taken off, says Palmer, but in crimes like money laundering, phishing and good old-fashioned hacking, the fun might only just be starting.

explainer

 

At the heart of blockchain — and the cryptocurrencies built atop it — is an unchangeable chronological list of all transactions in the system. And so, in theory, law enforcement has more to go on when investigating money laundering or the purchase of illicit goods with cryptocurrencies than with, say, cash. “Criminals don’t need to use cryptocurrencies because they have cash and … the banking system,” says Alan Cohn, counsel to the Blockchain Alliance, a public-private forum of blockchain businesses and law enforcement. The criminals behind Silk Road were eventually brought down by tracking payments on the public Bitcoin blockchain ledger — the analysis even rumbled two undercover federal agents who had gone rogue. So while “it’s certainly possible to launder money using cryptocurrency,” says Cohn, the handlers of cryptocurrencies face the same regulatory requirements as a traditional money services business. 

In all, roughly 10 percent of money invested in Ethereum-based ICOs so far in 2017 has ended up in the hands of criminals.

Special software is required to sift through information on public blockchain ledgers and interpret which transactions appear suspicious, and that’s getting more difficult as “the bad guys are moving into the more and more anonymous [currencies],” says Camilla Frost, a product manager at Chainalysis, which provided such software for the Silk Road investigation. A recent report from Europol, the EU’s policing agency, stated that “cryptocurrencies such as Monero, Ethereum and Zcash are … gaining popularity within the digital underground.” Offering advanced privacy features, both Monero and Zcash hide the sender, receiver and value of all transactions, making it nearly impossible to track within the system. (The team behind Zcash insists that just because there is increased privacy doesn’t mean there’s any evidence of criminal usage; indeed, the Europol report acknowledges that “Zcash has yet to feature in any reported law enforcement investigations.”)

Despite the additional privacy available, “the trigger is once [criminals] try to cash out” into usable dollars or euros, says Frost — transactions which, in regulated exchanges, are traceable. Unregulated exchanges, though, are a different matter: In July, the Department of Justice indicted a man for laundering more than $4 billion in criminal cash via his black-market cryptoexchange, BTC-e, which did not comply with U.S. regulations.

Russian Alexander Vinnik (center) headed BTC-e, an exchange he operated for the bitcoin cryptocurrency. He was indicted by a U.S. court in July on 21 charges ranging from identity theft and facilitating drug trafficking to money laundering.

Source Nicolas Economou/Getty

As for criminal activity on or against the networks themselves, “phishing is a major trend,” says Frost, whose Chainalysis research found evidence of more than $115 million worth of stolen value affecting nearly 17,000 victims on the Ethereum blockchain alone. Just like following a dodgy email link that pretends to be your bank, cryptophishing usually involves suckering investors into sending money to the wrong address for a supposed presale of coins in an ICO, with Twitter often used to spread the misinformation. Allegations of selling based on misinformation and Ponzi schemes are also rife in the ICO space.

 

To date, there have been no cases of a major blockchain itself getting hacked, but the code behind the applications built on top of that infrastructure is also a vulnerability. In 2016, a crowdfunded venture capital fund called the DAO raised more than $150 million in a month (at the time, the largest crowdfunding event in history) — and a month later thieves exploited a vulnerability in the DAO code to steal more than $74 million from 11,000 investors. In all, roughly 10 percent of money invested in Ethereum-based ICOs so far in 2017 has ended up in the hands of criminals, estimates Chainalysis.

Despite the security credentials of blockchain, the technology is not necessarily perfectly secure — and if it’s not, the consequences could be devastating. Given the value now stacked on a few major blockchains (primarily, Bitcoin and Ethereum), “you’re placing the world’s biggest bug bounty on that network,” says Palmer. “The code itself has to be absolutely rock-solid” — and open-source software only makes the search for vulnerabilities easier. If a software bug on the scale of the 2014 “Heartbleed” bug is found in Ethereum, says Palmer, “we could be talking about billions of dollars being stolen, siphoned off by hackers before people know about it.”

And while phishing and hacking threats are present in any technology-supported marketplace, there is a big gray area in the ICO space because regulators have yet to decide exactly what a cryptotoken is. It can have characteristics of “a currency and a commodity and a security and property,” says Cohn, because of the equity or other rights that come with the purchase of some coins. This regulatory uncertainty means coin creators are engaging in all manner of shady practices, including the alleged secret sale of leftover tokens to existing investors at a lower price — a practice that would be a felony on Wall Street, according to Forbes.

“It’s always going to be a cat-and-mouse game between law enforcement and criminals,” says Cohn. And in the new Wild West of the digital economy, it’s game on.

from OZY http://my.onmedic.com/2hL99eL
via IFTTT

Researchers propose an open ‘internet of water’ tracking use, quality and costs

Where did the water coming out of your tap come from? How is it filtered and purified? How much does it cost the city and state per gallon to deliver? How can they improve that? These and other questions come naturally as fresh water becomes more and more valuable a resource — and we need a shared, open ‘internet of water’ to answer them, say researchers from Duke University and the Aspen Institute.

With natural disasters like droughts and flooding, and with man-made problems like overcrowded cities and factory runoff, the water system is frequently overtaxed and understudied. Local authorities and utilities produce reams of data on use, but there is little in the way of national databases, let alone standardized, open datasets.

“Our water world is data rich, but information poor,” explained Martin Doyle, of Duke’s Nicholas Institute. “If water data were shared openly and then integrated in a common digital platform, there would be game-changing opportunities ranging from private citizens’ ability to gauge the quality of local water to public officials’ ability to warn populations of water-borne public health hazards.”

It’s not that some utility guy in Minneapolis wants to know the dollars per gallon being paid by someone in Phoenix. It’s really more of a missed Big Data opportunity. The wider your perspective and the more data you have, the better you can make decisions as to how to optimize parts of the system, both at the macro and micro level.

But collecting and analyzing that data isn’t free, let alone building a resource sharing system at a national level. So what researchers need to do, the researchers concluded, is explicate in very clear terms the benefits of doing so. After all, what cash-strapped state agency would shell out millions for some newfangled data effort when that money could be put into its existing, working services?

The researchers assert that water and water data are extremely under undervalued. They hope that by examining existing data collection efforts, like those done in California during the latest major drought, they can show tangible benefits to this kind of open, accessible data.

That said, it’s not like fresh water is getting any easier to come by; scarcity and seasonal fluctuations are problems that will only get worse as natural resources are depleted and populations grow.

“With finite water resources and growing demand for them, we need open and accessible data to help us navigate tradeoffs,” said Greg Gearheart, of California’s State Water Board.

This hypothetical “internet of water,” as the Duke team likes to call it, would be a clearinghouse for water data of all kinds, from all municipalities. Everyone from curious citizens to government data scientists and app developers would be able to  access it.

Featured Image: ImagineH2O

from TechCrunch http://my.onmedic.com/2yKdaLm
via IFTTT