The InterPlanetary File System~(IPFS) offers a decentralized approach to file storage and sharing, promising resilience and efficiency while also realizing the Web3 paradigm. Simultaneously, the offered anonymity raises significant questions about potential misuse. In this study, we explore methods that malicious actors can exploit IPFS to upload and disseminate harmful content while remaining anonymous. We evaluate the role of pinning services and public gateways, identifying their capabilities and limitations in maintaining content availability. Using scripts, we systematically test the behavior of these services by uploading malicious files. Our analysis reveals that pinning services and public gateways lack mechanisms to assess or restrict the propagation of malicious content.
View on arXiv@article{karapapas2025_2506.04307,
title={ Hello, won't you tell me your name?: Investigating Anonymity Abuse in IPFS },
author={ Christos Karapapas and Iakovos Pittaras and George C. Polyzos and Constantinos Patsakis },
journal={arXiv preprint arXiv:2506.04307},
year={ 2025 }
}