On-chain privacy primitives such as ring signatures, private transactions, stealth addresses, bulltproofs++, and research into post-quantum cryptography (PQC) help shield BDX transaction data at the protocol level. While these mechanisms together underscore strong privacy protections, at the network level, end-to-end privacy can only be assured by obfuscation techniques like Dandelion++.
An adversary (for example, a botnet) who runs a large number of nodes within the network, or a platform that’s able to monitor incoming and outgoing transactions may use critical observation and advanced monitoring of peer-to-peer (P2P) transactions, to correlate or track down the transaction origins to IP addresses using timing analysis, node graphing, or eclipse-style attacks.
This means, without complementary protection at the network layer, transaction origins can still be inferred. True privacy, therefore, requires not only on-chain cryptography but also a robust network-level propagation protocol to prevent traffic correlation and source tracing.
This upgrade aligns with Beldex’s 2026 commitment to “privacy everywhere, and at every layer”.
Beldex Network Now
Beldex operates as a privacy-first blockchain with default anonymity for all transactions, powered by ring signatures, stealth addresses, and Bulletproofs++. The decentralized network uses masternode-based PoS consensus to validate transactions along with supporting tools like BChat, BelNet (dVPN), and Beldex Browser.
However, even the strongest on-chain privacy can be compromised if the originating IP is exposed during propagation. Conventional flooding instantly disseminates transactions to numerous peers, resulting in timing and graph patterns that facilitate correlation attacks. Dandelion++ changes this fundamentally.
Beldex Will Be Integrating Dandelion++
The primary idea behind Dandelion++ is to route the transaction to a random node in an untraceable way and then randomize the flooding of the transaction. The actual node that is trying to broadcast a transaction finds a proxy node to route the transaction to. This connection usually resembles a stem, so it is addressed as the stem phase. It is also termed the anonymity phase.
After this, the proxy node, which received the transaction, now broadcasts it in such a way that a flow of information creates a Dandelion-like structure. This phase is called the fluff phase or spreading phase.
The stem phase achieves anonymity through dynamic connectivity. In this phase, the nodes switch connections every few minutes. The time taken between each switch is called an epoch. At the beginning of every epoch, nodes select two new connections at random to relay transactions to. After each epoch ends, the nodes select the next two relays to connect with.
During every epoch, the node also chooses to be a relayer or a diffuser in addition to the dynamic switching. A relayer will send transactions it gets to a proxy node (stem or anonymity phase), then a diffuser will start the diffusion process (spread or fluff phase). During the spreading phase, the times when nodes communicate with each other are dynamic and unpredictable. This in turn makes it extremely difficult for anyone to find the source of the transaction and the IP address that goes along with it.
The Difference Between Dandelion and Dandelion++
Dandelion was conceived as a way to mitigate against large-scale deanonymization attacks on the network layer of Bitcoin, made possible by the diffusion method for propagating transactions on the network. Diffusion essentially introduces a time delay to propagate transactions, instead of the flooding method normally used.
During Dandelion’s first stem phase, each node sends the transaction to one randomly chosen peer, which builds a line graph. Then, users send transactions along the same path on the graph.
After a random number of hops down the single stem, the transaction enters the fluff phase, which works like normal diffusion. While this obfuscates the originator’s IP to a certain extent, it was found to be vulnerable if an attacker knew the network’s topology, since they could simulate paths and “guess” the source of the transaction with high accuracy.
Besides, Dandelion also assumes that all nodes on the network will run the propagation protocol, and that each participant will send out only one transaction.
However, with a significant number of adversaries on the network, tracing transactions, sending out multiple transactions, or outright denial of transaction propagation was still possible.
How Dandelion++ Offers Greater Degree of Anonymity to Network Nodes
This is why Dandelion++ was developed to protect the origin of transactions against such strong adversaries. Like Dandelion, Dandelion++ features a stem and fluff phase. Like we discussed earlier, to achieve dynamic connection in the new stem phase, it moves in short bursts called epochs.
In each epoch, a node selects two outbound peers as stem relays for that epoch. At the start of the epoch, each node rolls a dice to choose whether to pass on the transaction or initiate the fluff phase. If it is a diffuser, it immediately starts the fluff phase. If it is a relayer, it forwards via one of its two relays.
Once this epoch ends, the node selects two new outbound peers as relays. This makes the structure more difficult, complex, and hard to guess.
In addition to this, one more feature that makes the Dandelion++ more effective than its original version is the Fail Safe Mechanism. Stem phase nodes start transaction timers for each transaction they relay. If the node doesn’t get the same transaction back via broadcast after a certain time, it starts its own fluff phase.
The fluff phase in Dandelion++ still uses diffusion, the flooding process where the timing of the communications is random so as to make it harder for spy nodes to locate the source.
This mitigates the effectiveness of timing-based deanonymization and black-hole attacks, when adversarial nodes delete transactions during the stem phase instead of relaying them.
With this enhanced structure and dynamic connection techniques in place, Dandelion++ provides resistance to large-scale deanonymization under adversarial network models.
Why This Matters for Beldex Users
IP protection for everyday transactions: Whether sending BDX privately
via wallet or paying via merchant POS, your real IP stays hidden.
Synergy with BelNet: Combine Dandelion++ with BelNet’s onion routing for
layered anonymity (network-layer + VPN-like cover).
Future-proofing: As privacy networks are increasingly scrutinized,
network-layer defenses like Dandelion++ close future attack vectors.
Masternode benefits: Incentivized nodes running Dandelion++ contribute
to collective privacy while earning rewards.
Conclusion
Dandelion++ isn’t just an add-on technology, it’s a foundational tech that ensures privacy in the network layer. By adopting this privacy-enhanced propagation protocol, Beldex can offer enhanced privacy and cut down the invisible thread that can track down the transaction initiation and their IP address. Privacy isn’t complete until the network layer is secure. With Dandelion++, Beldex takes another deliberate step toward making true, resilient privacy the default.
Listen
back to blog