{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T16:03:12Z","timestamp":1780588992904,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":48,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1145\/3779208.3805963","type":"proceedings-article","created":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T15:21:58Z","timestamp":1780586518000},"page":"693-714","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["PayOff: A Regulated Central Bank Digital Currency with Private Offline Payments"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3480-2330","authenticated-orcid":false,"given":"Carolin","family":"Beer","sequence":"first","affiliation":[{"name":"ETH Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-2442-6200","authenticated-orcid":false,"given":"Sheila","family":"Zingg","sequence":"additional","affiliation":[{"name":"ETH Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9092-8683","authenticated-orcid":false,"given":"Kari","family":"Kostiainen","sequence":"additional","affiliation":[{"name":"ETH Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6000-3009","authenticated-orcid":false,"given":"Karl","family":"W\u00fcst","sequence":"additional","affiliation":[{"name":"Mysten Labs, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2971-8679","authenticated-orcid":false,"given":"Vedran","family":"Capkun","sequence":"additional","affiliation":[{"name":"HEC Paris, Paris, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5727-3673","authenticated-orcid":false,"given":"Srdjan","family":"Capkun","sequence":"additional","affiliation":[{"name":"ETH Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,4]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jmoneco.2021.05.002"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/800213.806523"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53887-6_7"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419614.3423259"},{"key":"e_1_3_2_1_5_1","volume-title":"Kaoutar El Khiyaoui, Romain Gay, Rebekah Mercer, and Alessandro Sorniotti.","author":"Androulaki Elli","year":"2024","unstructured":"Elli Androulaki, Angelo De Caro, Kaoutar El Khiyaoui, Romain Gay, Rebekah Mercer, and Alessandro Sorniotti. 2024. Secure and Privacy-preserving CBDC Offline Payments Using a Secure Element. https:\/\/eprint.iacr.org\/2024\/1746"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-46447-2_5"},{"key":"e_1_3_2_1_7_1","unstructured":"Bank for International Settlements. 2022. The Future Monetary System. https:\/\/www.bis.org\/publ\/arpdf\/ar2022e3.htm"},{"key":"e_1_3_2_1_8_1","volume-title":"Retrieved","author":"England Bank","year":"2025","unstructured":"Bank of England. 2025. Progress Update: The Digital Pound and the Payments Landscape. Retrieved April 14, 2025 from https:\/\/www.bankofengland.co.uk\/report\/2025\/digital-pound-progress-update"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","unstructured":"Emilio Barucci Andrea Gurgone Giulia Iori and Michele Azzone. 2025. Central Bank Digital Currency Flight-to-Quality and Bank-Runs in an Agent-Based Model. arXiv:2510.21071 doi:10.48550\/arXiv.2510.21071","DOI":"10.48550\/arXiv.2510.21071"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-75248-4_20"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.36"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-012-0027-1"},{"key":"e_1_3_2_1_13_1","volume-title":"Retrieved","author":"Board Federal Reserve","year":"2024","unstructured":"Federal Reserve Board. [n. d.]. Federal Reserve Payment Study. Retrieved June 24, 2024 from https:\/\/www.federalreserve.gov\/paymentsystems\/fr-payments-study.htm"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.5819104"},{"key":"e_1_3_2_1_15_1","volume-title":"Retrieved","author":"United States Census Bureau. [n.d.]. U.S.","year":"2024","unstructured":"United States Census Bureau. [n.d.]. U.S. and World Population Clock. Retrieved June 24, 2024 from https:\/\/www.census.gov\/popclock\/"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180431"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/11426639_18"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/11832072_10"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-72540-4_28"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-68914-0_13"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00061"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4757-0602-4_18"},{"key":"e_1_3_2_1_23_1","volume-title":"Joeri De Ruiter, and Alan T. Sherman","author":"Chaum David","year":"2017","unstructured":"David Chaum, Debajyoti Das, Farid Javani, Aniket Kate, Anna Krasnova, Joeri De Ruiter, and Alan T. Sherman. 2017. cMix: Mixing with Minimal Real-Time Asymmetric Cryptographic Operations. In Applied Cryptography and Network Security, Dieter Gollmann, Atsuko Miyaji, and Hiroaki Kikuchi (Eds.). Springer International Publishing, Cham, 557\u2013578."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-34799-2_25"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2012.08003"},{"key":"e_1_3_2_1_26_1","unstructured":"European Commission. 2023. Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro. https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX:52023PC0369"},{"key":"e_1_3_2_1_27_1","volume-title":"Retrieved","author":"Atlantic Council","year":"2024","unstructured":"Atlantic Council. [n. d.]. Atlantic Council CBDC Tracker. Retrieved August 29, 2024 from https:\/\/www.atlanticcouncil.org\/cbdctracker\/"},{"key":"e_1_3_2_1_28_1","volume-title":"Tor: The Second-Generation Onion Router. In 13th USENIX Security Symposium (USENIX Security 04)","author":"Dingledine Roger","year":"2004","unstructured":"Roger Dingledine, Nick Mathewson, and Paul Syverson. 2004. Tor: The Second-Generation Onion Router. In 13th USENIX Security Symposium (USENIX Security 04). USENIX Association, San Diego, CA, 17 pages. https:\/\/www.usenix.org\/conference\/13th-usenix-security-symposium\/tor-second-generation-onion-router"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3052980"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","unstructured":"European Central Bank. 2024. Progress on the Preparation Phase of a Digital Euro - First Progress Report. doi:10.2866\/10580","DOI":"10.2866\/10580"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-54970-4_5"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","unstructured":"Jonas Gross Johannes Sedlmeir Matthias Babel Alexander Bechtel and Benjamin Schellinger. 2021. Designing a Central Bank Digital Currency with Support for Cash-Like Privacy. doi:10.2139\/ssrn.3891121","DOI":"10.2139\/ssrn.3891121"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49896-5_11"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1093\/restud\/rdac017"},{"key":"e_1_3_2_1_35_1","volume-title":"Regulated and Distributed Central Bank Digital Currencies. In ACM Conference on Computer and Communications Security(CCS). Association for Computing Machinery","author":"Kiayias Aggelos","year":"2022","unstructured":"Aggelos Kiayias, Markulf Kohlweiss, and Amirreza Sarencheh. 2022. PEReDi: Privacy-Enhanced, Regulated and Distributed Central Bank Digital Currencies. In ACM Conference on Computer and Communications Security(CCS). Association for Computing Machinery, New York, NY, USA, 1739\u20131752."},{"key":"e_1_3_2_1_36_1","unstructured":"Frederik R\u00e6bild Kjemtrup. 2023. Offline Card Payments as a Payment Contingency Measure. Technical Report. Danmarks Nationalbank. Retrieved December 11 2025 from https:\/\/www.nationalbanken.dk\/media\/isypwalp\/offline-card-payments-as-a-payment-contingency-measure.pdf"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"crossref","unstructured":"Konstantinos Markantonakis Michael Tunstall Gerhard Hancke Ioannis Askoxylakis and Keith Mayes. 2009. Attacking smart card systems: Theory and practice. Information Security Technical Report 14 2 (2009) 46\u201356. doi:10.1016\/j.istr.2009.06.001","DOI":"10.1016\/j.istr.2009.06.001"},{"key":"e_1_3_2_1_38_1","volume-title":"ROTE: Rollback Protection for Trusted Execution. In 26th USENIX Security Symposium (USENIX Security 17)","author":"Matetic Sinisa","year":"2017","unstructured":"Sinisa Matetic, Mansoor Ahmed, Kari Kostiainen, Aritra Dhar, David Sommer, Arthur Gervais, Ari Juels, and Srdjan Capkun. 2017. ROTE: Rollback Protection for Trusted Execution. In 26th USENIX Security Symposium (USENIX Security 17). USENIX Association, Vancouver, BC, 1289\u20131306."},{"key":"e_1_3_2_1_39_1","volume-title":"Draft Report on the Proposal for a Regulation of the European Parliament and of the Council on the Establishment of the Digital Euro (COM(2023)0369 - C9-0219\/2023 - 2023\/0212(COD)). Retrieved","author":"Rojas Fernando Navarrete","year":"2025","unstructured":"Fernando Navarrete Rojas. 2025. Draft Report on the Proposal for a Regulation of the European Parliament and of the Council on the Establishment of the Digital Euro (COM(2023)0369 - C9-0219\/2023 - 2023\/0212(COD)). Retrieved December 6, 2025 from https:\/\/www.europarl.europa.eu\/doceo\/document\/ECON-PR-778136_EN.pdf"},{"key":"e_1_3_2_1_40_1","unstructured":"Bank of England. 2023. The digital pound: Technology Working Paper. https:\/\/www.bankofengland.co.uk\/paper\/2023\/the-digital-pound-technology-working-paper"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-34805-0_43"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179430"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2205.12742"},{"key":"e_1_3_2_1_44_1","volume-title":"UTT: Decentralized Ecash with Accountable Privacy. Cryptology ePrint Archive, Paper 2022\/452. https:\/\/eprint.iacr.org\/2022\/452","author":"Tomescu Alin","year":"2022","unstructured":"Alin Tomescu, Adithya Bhat, Benny Applebaum, Ittai Abraham, Guy Gueta, Benny Pinkas, and Avishay Yanai. 2022. UTT: Decentralized Ecash with Accountable Privacy. Cryptology ePrint Archive, Paper 2022\/452. https:\/\/eprint.iacr.org\/2022\/452"},{"key":"e_1_3_2_1_45_1","unstructured":"Stephan van Schaik Alex Seto Thomas Yurek Adam Batori Bader AlBassam Christina Garman Daniel Genkin Andrew Miller Eyal Ronen and Yuval Yarom. 2022. SoK: Sgx. fail: How stuff get exposed."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","unstructured":"Kaili Wang Qinchen Wang and Dan Boneh. 2022. ERC-20R and ERC-721R: Reversible Transactions on Ethereum. arXiv:2208.00543 doi:10.48550\/arXiv.2208.00543","DOI":"10.48550\/arXiv.2208.00543"},{"key":"e_1_3_2_1_47_1","volume-title":"Platypus: A Central Bank Digital Currency with Unlinkable Transactions and Privacy-Preserving Regulation. In ACM Conference on Computer and Communications Security (CCS)","author":"W\u00fcst Karl","year":"2022","unstructured":"Karl W\u00fcst, Kari Kostiainen, Noah Delius, and Srdjan Capkun. 2022. Platypus: A Central Bank Digital Currency with Unlinkable Transactions and Privacy-Preserving Regulation. In ACM Conference on Computer and Communications Security (CCS). Association for Computing Machinery, New York, NY, USA, 2947\u20132960."},{"key":"e_1_3_2_1_48_1","volume-title":"Nir Jacoby, and Amir Moshe.","author":"Yosef Tsahi Ben","year":"2025","unstructured":"Tsahi Ben Yosef, Asaf David Margalit, Nir Jacoby, and Amir Moshe. 2025. Preliminary Design for the Digital Shekel System. Technical Report. Bank of Israel."}],"event":{"name":"ASIA CCS '26: ACM Asia Conference on Computer and Communications Security","location":"Bangalore India","acronym":"ASIA CCS '26","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3779208.3805963","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T15:34:20Z","timestamp":1780587260000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3779208.3805963"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":48,"alternative-id":["10.1145\/3779208.3805963","10.1145\/3779208"],"URL":"https:\/\/doi.org\/10.1145\/3779208.3805963","relation":{},"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"2026-06-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}