Nostr

You never know when poor privacy practices come to haunt you from your future past. All you can do is start learning and using the tools now. Avoid KYC like the plague. Restack your KYC'd bitcoin using Bisq. Make every transaction a Coinjoin.

https://sparrowwallet.com/docs/mixing-whirlpool.html

Kruw 2y ago

Whirlpool doesn't make every transaction a coinjoin: The tx0 that creates equal sized outputs for Whirlpool is a self spend transaction with no other participants. This transaction makes it completely transparent that a single wallet owns inputs consolidated to create the tx0, as creating nonprivate change that gets wasted because it can't be coinjoined at all.

If you want to make every transaction a coinjoin, Wasabi Wallet will do this since for you since every payment you receive gets spent directly in a round, reducing your privacy footprint to a single address.

Reply to this note

Please Login to reply.

Discussion

<old>cypherhoodlum 2y ago

Doxxic change can always be coinjoined later, and before that it is marked as unspendable, meaning you cannot harm your privacy accidentally by consolidating it with mixed funds.

You're right that tx0 is not a coinjoin and therefore *every* transaction cannot be a coinjoin. What is meant by that mantra is you should coinjoin every utxo you have, and use the post-mix tools offered by Samourai and Sparrow wallets. I don't trust wasabi because I have seen graphs of mixes where each utxo is not mixed with a unique partner, making it much easier to trace mixed funds back to the original owner.

Kruw 2y ago

Doxxic change can't always be coinjoined later: The minimum Whirlpool size is 0.001 BTC, so any amount of change less than 99,999 sats (plus fees) gets wasted.

What is meant by the mantra "make every spend a coinjoin" is literally "make every spend a coinjoin": There's no reason you should ever make a non private transaction that consolidates your inputs. Sacrificing the privacy of users by creating a tx0 transaction instead of making every spend a coinjoin is completely unacceptable.

I don't trust either, I verify: Show me how you can trace an output without a unique partner from a Wasabi coinjoin. Here's an example: https://mempool.space/tx/01a1a055719129397fb8344b5a09e6cfe72868c8e1d750e621d8b580c96bf77b

You can see that bc1qgsfth9mndvpjt64za7c4hrc550la0wartupa4c received 2.66401256 BTC, which is not a standard amount. Why don't you tell me which input address(es) this output belongs to?