Dust Attack

A Dust Attack is a privacy-invasive tactic where attackers send tiny cryptocurrency amounts, known as "dust," to many wallet addresses. These minuscule transactions, often worth fractions of a cent, aim to track users' spending habits and de-anonymize them on public blockchains.

Attackers first collect wallet addresses from blockchain explorers, exchanges, or data breaches. They then broadcast transactions distributing dust—for example, 546 satoshis (0.00000546 BTC) to thousands of addresses. When a wallet owner spends any output, including the dust, it mixes with other inputs in a new transaction. Attackers monitor the blockchain to link these inputs and outputs, clustering addresses owned by the same user and potentially tying them to real-world identities via exchange KYC data or spending patterns.

This attack matters because blockchains are transparent by design. It undermines pseudonymity, exposing users to phishing, extortion, or surveillance. High-value wallet holders face greater risks, as attackers prioritize addresses with significant balances. Dust attacks have targeted Bitcoin users since 2018 and extend to Ethereum and other networks.

Key characteristics include low cost for attackers (batched transactions minimize fees) and unsolicited nature—victims receive dust without requesting it. Types vary: random mass distribution or targeted sends to specific communities. To counter, users ignore dust transactions, avoid consolidating small UTXOs, or use privacy enhancers like CoinJoin or privacy coins such as Monero.