nostr:nprofile1qqsfuv8fgq3cek0ta0rr9qtkm4x3pxqjz22y9u4xcwrj0lrxlfl2jzsppemhxue69uhkummn9ekx7mp0qyg8wumn8ghj7mn0wd68ytnddakj7qg3waehxw309ahx7um5wgh8w6twv5hs25c7t0 nostr:nprofile1qqsxdqfx3t8ywjx5rfx0es0xgqr0hy6mhs6e0q4nm9s37ex4r3n49kgppemhxue69uhkummn9ekx7mp0qywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uq3xamnwvaz7tm0venxx6rpd9hzuur4vghs3mxevu is this article accurate?
CoinJoin doesn’t guarantee privacy—it just buys you a chance at privacy. One slip post-mix, and intersection attacks can trace you all the way back. Leaks compound fast, and even “perfect” mixes can collapse under real-world pressure.
All this and more in The Scroll #4, the longest document or newsletter we have ever published: https://spiralbtc.substack.com/p/the-scroll-4-intersection-attacks?publication_id=3715684&post_id=165670336&isFreemail=false&r=53cq2n&triedRedirect=true
Discussion
Yes. Nothing guarantees privacy.
Yes, the article is accurate and it shows you not only what is theoretically possible but even practical to do. However, for something to be practical, even when all the assumptions are met, doesn't imply that it is cost-free.
The idea of participating in a multi-party transaction (aka coinjoin) is to create, in the worst case, an imbalance where it is cheap for you to gain privacy while it is costly for an attacker to try to deanonymize you. We can see this cost in the real world where huge bounties are offered to track some entities which paid cents for joining a crowd in a coinjoin.