I’m wondering what’s happening with he XPUBs samourai wallet collected. Did govt get their hands on it and already passed to the chainanal?

Reply to this note

Please Login to reply.

Discussion

Most likely

Definitely, unless there was some kill switch built in. The govt is probably tracking the activity of those wallets already if they got their hands on them.

Even if there was a kill switch you think they were able to click it ? But yeah that’s bad

Not sure, the servers were in Iceland, one founder was in the US and, the other was in Portugal. The govt notice about the arrests says the “servers were seized”.

"Dead mans switch" goes off when they *don't* click it 😉

I would bet we will never find out. But, you best believe when surveillance agents get the proper tooling they will be able to audit every transaction that was ever done. Digital auditing will be weaponized, just a matter of time.

Hard to tell from the release. $2b in total inflow; $100m in known criminal proceeds. Those numbers needn't necessarily come from having access to the backend. Could just be a domain seizure + chainal.

If it's captured though, the pools are likely highly deanonymized now.

It’s easy to find all Samourai Whirlpool transactions by just purely looking at the blockchain, so you can calculate total volume that way. What xpub db could give extra is linkage between cj tx inputs and outputs.

Yep. If they have the xpubs, then the history of those wallets is unmixed, and every mix round those wallets participated in has its anonymity set reduced, because the known xpub adresses are effectively doxxed. There could be mix rounds with only one dojo input; elimination process, that round is now moot. Enough such rounds, and the whole pool is effectively deanonymized, with maybe small pockets of anonymity left over

Thanks. May have to read a few times lol.

been reading about this. samo uses hardened xpubs, which can be used to derive sibling accounts. only if the postmix xpub is shared does the problem exist as we think

If the app shows you the balance, it sent the xpub. Each of the 4 whirlpool accounts were sent. Only question is whether the agencies got that data, or eg. it was/will be wiped 🤷‍♂️

I'd err on the side of the xpub data being compromised

the app has separate views for each balanc eof the 4 accounts. if u havent opened the tab for mix in quite a while, the 3 relevant xpub may have been deleted from the cache

deposit xpub might as well be kyc anyway, if the funds deposited to it came from an exchange

I guess we're going to find out over the coming months.

Yeah people probably can recover their utxo in the other sats and move away. I would ditch that utxos by swapping or joinmarket