Your DeFi activity is public: what Aave, Uniswap and Etherscan reveal about you

Many people use DeFi because it feels more private than a bank: no account, no ID, just a wallet. In one sense that’s true, because Aave and Uniswap don’t ask for your name. In another sense it’s the opposite of private. Everything you do on them is written to a public ledger that anyone can search with a free website.

This guide walks through what one ordinary Ethereum address reveals, using public tools anyone can open. We use no real person’s address here, only the categories of data that every address exposes. Everything below was checked against official docs on 2 Nov 2026.

Short version: a block explorer like Etherscan turns any address into a full financial profile. DeFi protocols add detail on top: what you trade, how much you borrow, and how close you are to liquidation. Your name is not onchain, but it only takes one link (an exchange withdrawal, an ENS name, a public post) to attach that profile to you.

Non-custodial is not the same as private

It helps to separate two questions that are often blurred together.

1. Who holds the money? On Aave and Uniswap, your funds sit in smart contracts that only your keys can move. No company holds them, so these are non-custodial protocols.
2. Who can see it? Everyone. Ethereum is a public ledger, and both protocols run on it with no privacy layer.

There is also a third question this site asks of every tool: who can freeze it? For Uniswap’s core pool contracts, the only owner powers are over protocol fees; there is no function to freeze a user’s funds (Uniswap v3 pool code). Aave’s own FAQ says no one can freeze individual positions, but an emergency role (currently held by the Aave Guardian multisig) can pause or freeze whole markets, which blocks interactions for everyone in that market (Aave V3 Pool Configurator docs). And the websites you use to reach these protocols are run by companies that can screen and block wallets (more on that below).

Scroll the table sideways to see all columns.

So DeFi gives you strong control over your money and almost no privacy. A centralised exchange is roughly the reverse: the public can’t see your trades inside it, but the company holds your funds and knows who you are.

What Etherscan shows about any address

Etherscan is a free website that indexes the Ethereum chain. Paste in any address and you get, without logging in:

• Current balances of ETH and every token the address holds, with a dollar estimate.
• Every transaction it has ever sent or received, with timestamps, amounts and counterparties.
• Internal transactions and token transfers, which show money moving through smart contracts, for example tokens coming back from a swap.
• NFTs held, including position NFTs from protocols like Uniswap (see below).
• Labels where Etherscan knows who an address belongs to.

Those labels matter. Etherscan’s public label cloud showed, when we checked on 2 Nov 2026, more than 1,000,000 addresses tagged as Binance, about 237,000 as Coinbase and about 79,000 as Kraken. When your wallet sends funds to or receives funds from one of those addresses, the explorer names the exchange next to your transaction. That doesn’t reveal your name to the public, but it tells everyone which company does know it.

What Uniswap reveals: every trade, and your liquidity positions

A Uniswap swap is a public transaction. Anyone can see which tokens you sold, which you bought, the amounts, the price you got and the time. Do this for a few months and your address carries a full trading diary: what you bought early, what you dumped, how big your trades are and what hours you’re active.

If you provide liquidity, the detail goes further. Uniswap v3 and v4 positions are NFTs held in your wallet, and each one stores the two tokens, the fee tier, the price range you picked and the amount of liquidity (Uniswap Help Center). The position contract has a public positions() function that returns all of that for any position ID (Uniswap v3 periphery code). In plain terms: anyone can see where you think the price is heading and how much money you’ve put behind it.

What the Uniswap website itself collects

The protocol and the website are different things. Uniswap Labs’ privacy policy (last modified 12 Aug 2026) says that when you connect a wallet to its site, it logs your wallet address and screens it “using intelligence provided by leading blockchain analytics providers”. It also says it may share your wallet address with infrastructure providers such as Infura and Cloudflare and with blockchain analytics providers. The policy says it does not collect your name or store your IP address.

That is a fairly light-touch policy, and it’s spelled out clearly. The point is simply that the front end you use adds a party who sees your address at the moment you use it.

What Aave reveals: your loan, and your liquidation price

Aave is a lending protocol. You deposit collateral, such as ETH, and borrow against it. All of it is public: the deposit, the loan, every repayment and every withdrawal.

More revealing is the health factor. Aave compares your collateral (weighted by each asset’s liquidation threshold) with your debt; below 1, the position can be liquidated (Aave V3 health factor docs). Aave’s main contract has a public read function, getUserAccountData, that returns any address’s total collateral, total debt and health factor (Aave V3 Pool docs).

Because prices are public too, anyone can work out roughly how far the price of your collateral has to fall before you get liquidated. That’s not hypothetical. Liquidation bots do exactly this all day: ethereum.org’s MEV guide describes searchers who “compete to parse blockchain data as fast as possible to determine which borrowers can be liquidated” so they can claim the liquidation fee.

Token approvals: a public list of the apps you trust

To swap or deposit tokens, you usually first give a smart contract permission to spend them. That permission, called a token approval, is stored in the token’s contract and is public (Revoke.cash explainer).

That has two effects. For privacy, your list of approvals is a map of which apps you’ve used, including ones you’ve since forgotten. For security, an approval lets that contract spend your tokens at any time, so if the contract is hacked or malicious, your tokens are at risk. Tools like Revoke.cash and Etherscan’s own token approval checker let you review and remove old approvals. Revoking is an onchain transaction too, so it’s also public.

ENS names: a label you attach yourself

ENS lets you register a readable name like alice.eth and point it at your address. If you also set it as your primary name, apps and explorers show the name instead of the address, and the link works in both directions: name to address, and address to name (ENS primary names docs). Since August 2025 you can also set primary names on several layer-2 networks, including Arbitrum, Base, Linea, OP Mainnet and Scroll.

That’s convenient, and it’s the most direct way people deanonymise themselves. If your ENS name matches your social media handle, or you’ve posted it anywhere, every transaction from that address now has your name on it.

How a stranger links an address to a real person

Your name is not onchain, so linking needs one outside clue. The common ones:

• Exchange deposits and withdrawals. Exchanges give each customer their own deposit address, which forwards funds to the exchange’s main wallet. Research by Friedhelm Victor (Financial Cryptography 2020) used this pattern to cluster addresses: if several of your wallets ever paid into the same deposit address, they very likely belong to the same person. The paper found the deposit-address method was the most effective of the heuristics it tested, and overall it grouped 17.9% of active Ethereum addresses into more than 340,000 multi-address entities. The exchange, of course, also knows the identity behind that deposit address from its KYC checks.
• Your own posts. Sharing a transaction link, a screenshot of a wallet or an NFT you own ties the address to your account.
• ENS names, as above.
• Shared funding. Funding a new wallet from your main one links the two forever. So does sending both to the same place.
• Timing and habits. Trading at the same hours, using the same odd amounts, or moving funds between wallets minutes apart all make clustering easier.

The parts you don’t see: RPC providers and the mempool

Two more parties see your activity before it reaches the chain.

Your RPC provider. Your wallet talks to Ethereum through a server called an RPC endpoint. Consensys, which makes MetaMask and runs Infura, put it plainly in a privacy update: when you send a transaction or check a balance through an RPC provider like Infura, “the provider receives both the user’s IP and wallet address”. That’s how the web works, not something unique to one company. MetaMask’s privacy notice (revised 30 Sep 2026) says it may temporarily process IP addresses depending on your settings, and its help centre explains how to turn off the default “Basic Functionality” features.

The public mempool. Before a transaction is included in a block, it usually waits in a public queue. Bots watch it. ethereum.org describes sandwich trading, where a bot spots a large pending swap, buys just before it and sells just after, leaving the original trader with a worse price (ethereum.org MEV guide). Private submission services exist for this: Flashbots Protect sends transactions to a private mempool hidden from sandwich bots, and its docs say it does not store or log user information such as IP addresses. Once the transaction lands in a block, it is as public as any other.

What actually helps (and what doesn’t)

None of these steps makes your DeFi activity hidden. They reduce how easily it’s tied to you and how much one address reveals.

Scroll the table sideways to see all columns.

Real privacy for amounts and counterparties needs a different design: privacy-focused chains like Monero or shielded Zcash, or shielded pools on Ethereum. Each comes with its own trade-offs in trust, cost and legal friction, which we compare in our overview of what’s visible onchain and which tools help and will cover one by one in upcoming guides.

Bottom line

Aave and Uniswap are non-custodial: no company holds your money. But they are public by design. One address can show a stranger what you own, what you trade, how much you’ve borrowed and the price at which you’d be liquidated. Your name only needs to be connected once, and the usual connections are an exchange, an ENS name or something you posted yourself.

If that matters to you, treat every DeFi wallet as a public profile, keep the links between that profile and your identity as few as possible, and remember that “nobody holds my funds” and “nobody can see my funds” are two very different promises.

This guide is for education only and is not financial or legal advice. Sources were checked on 2 Nov 2026; protocols and policies change, so check the linked documents for the latest version.