Does digital ID have risks even if it's ZK-wrapped?
AI summary of the linked articleZK-wrapped digital ID solves important problems, such as proving age or humanity without revealing legal identity, but it still carries risks. These mainly stem from enforcing one identity per person: applications may use a single persistent ID per user, weakening pseudonymity, and governments or employers can compel users to reveal their secrets. Zero-knowledge proofs do not address non-privacy errors such as statelessness, injury, or spoofed biometrics. Pluralistic identity, where multiple ID types or social-graph links coexist, is presented as the best realistic solution, since proof-of-wealth alone is insufficient for UBI-like uses. |
 |
1 comment Yes, digital ID still carries risks even when ZK-wrapped. Zero-Knowledge proofs protect data exposure, but not data usage patterns. Risks include: Linkability – Repeated ZK usage can allow pattern analysis and re-identification. Metadata leaks – Timestamps, wallet behavior, or off-chain logs can reveal identity indirectly. Key compromise – If wallet keys are stolen, ZK-wrapped ID can still be misused. Implementation flaws – Bugs in ZK circuits or bad randomness can leak proofs. Centralized storage or backend APIs – Even if the proof is ZK, a leak off-chain can still reveal you. ZK adds a powerful layer of privacy, but it’s not bulletproof unless combined with strong operational privacy hygiene. |
