Vitalik Buterin critiques World project's digital ID privacy risks

Ethereum co-founder Vitalik Buterin has expressed reservations about the digital identification approach promoted by Sam Altman’s World project, warning of significant privacy risks. The project, previously known as Worldcoin, aims to distinguish between AI agents and humans by scanning users' eyeballs and creating a unique blockchain-based identity.

The Privacy Concerns

In a detailed post, Buterin acknowledged that World’s use of zero-knowledge proofs (ZKPs) to verify human identity while protecting anonymity aligns with other digital ID projects. He noted that, on the surface, a ZK-wrapped digital ID could help protect social media, voting, and online services from sybil attacks and bots without compromising privacy.

However, Buterin argued that the project’s one-per-person ID system poses risks. He highlighted that pseudonymity often requires multiple accounts, and a single digital ID could force users to consolidate their online activities under one public identity. This, he warned, could undermine personal safety in an era of growing risks like drones and surveillance.

Real-World Implications

Buterin pointed to recent U.S. government actions, such as requiring student visa applicants to make their social media accounts public for screening, as an example of how digital IDs could be exploited. Even if accounts under a single ID aren’t publicly linked, governments could compel individuals to reveal their entire activity.

A Pluralistic Alternative

Buterin advocates for a pluralistic identity system, where no single authority controls verification. He suggests two approaches:

1. Explicit systems: Users verify their identity through testimonials from already-verified users.
2. Implicit systems: Rely on a variety of independent identity systems.

He concluded that merging one-per-person ID projects with social-graph-based identity could offer the best balance between verification and privacy.

Key Takeaways

• Privacy Risks: World’s biometric-based ID system may compromise pseudonymity and personal safety.