I am planning on building a utxo privacy analyzer, where you can select a series of privacy metrics to analyze a transaction by. The result will then say if the utxos included in the transaction passed or failed the various privacy metrics.

A few privacy metrics to watch for I have so far are,

- number of consecutive coinjoin rounds that a utxo came from.

- choose your anonymity set, aka how many txs should look like yours (aka equal output) in a tx.

- No change.

- no small change.

- no reused addresses

- reveal least amount of wealth

- reveal least amount of past tx history, aka don't combine utxos, especially not change outputs.

- don't mix post mixes (or any post mix tx change) from different rounds.

- don't mix postmix (or any post mix tx change) and non mixed.

- reduce change detection

- no round number payments.

- no same script type for the inputs and only one output.

- largest output amount heuristic (this is weak)

- spending to an exchange, it is obvious you are the change

- break the unnecessary input heuristic.

- more than one change output.

- change output should be of similar size of payment

- no dust attacked coins.

- break the common input ownership heuristic.

- break volume or other pattern recognition analysise.

- the change should not always be in the same output position.

- timing analysis, make sure you are not always receiving transactions on the same day.

- make sure do not spend utxos are not spent

- no kyc coins.

Does that sound like a useful tool to you?

Reply to this note

Please Login to reply.

Discussion

in depth chain analysis is incredible (timing, dust, kyc).

if made with foss ethos and a great ui/ux is definitely a great thing to have in your tool kit.

i remember using otx and kycp just for the experience of it. it was a great way to learn more about the ways bitcoin works.

Definitely plan on it being open source. Might just add it to my current project Live Wallet (https://livewallet.space/#/) .

Having access to oxt and kycp apps and codebases right now would be really helpful, but I haven't been able to track them down since the feds went after samurai.