Re: [bitcoindev] Reiterating centralized coinjoin (Wasabi & Samourai) deanonymization attacks

[Peter Todd <pete@petertodd.org>]

[-- Attachment #1: Type: text/plain, Size: 1759 bytes --]

On Fri, Jan 31, 2025 at 10:39:10PM +0100, Yuval Kogman wrote:
> - https://youtu.be/v952Fd1vmOs?t=2073 - here, months after launching
> his service, he fails to disclose until pressed to elaborate, then
> admits he's collecting revenues and casually misrepresents the
> "optimistic" behavior of wasabi (which a bug) as a "little known
> secret" that justifies his appropriation of excess funds, which under
> the zksnacks coordinator went to the mining fees (thereby bolstering
> sybil resistance, not undermining it).

For the record, I checked the archive.org and github history of the
Wasabi Wallet docs themselves, and since at least Nov 23rd 2024
(archive.org) or possible Oct 10th 2024 (git commit), they've clearly
stated that leftovers go to the coordinator:

"In rare cases the output decomposition contains change (maximum of
10,000 sats per coinjoin), this leftover goes to the coordinator. This
is because creating such small amounts would harm privacy and ends up
being more expensive than just forfeiting it."

(note: this whole passage is highlighted)

https://web.archive.org/web/20241123035844/https://docs.wasabiwallet.io/using-wasabi/CoinJoin.html#fees
https://github.com/WalletWasabi/WasabiDoc/commit/a1f2f474f282918f2e1626a01351ac8f1b9c43cf

The git commit that introduced that language is PGP-signed by Github as
of Nov 9th 2024.

-- 
https://petertodd.org 'peter'[:-1]@petertodd.org

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/Z_AMBe7CnGX_Rm14%40petertodd.org.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]