Pages:
Author

Topic: 📣📣📣 [ANN] 👉 BESTMIXER.IO 👈 THE FUTURE OF BITCOIN MIXING! TECHNOLOGY IS HERE - page 13. (Read 25811 times)

copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
Quote
How much are your reserves and are you going to escrow some btc?

By the moment our system is being tested.

We collect feedbacks from users, fix bugs, add new functionality. While testing, the pool of our system is deliberately limited to about $150,000.

After testing and before the start of the advertising campaign, we are planning to increase them significantly.

With regard to escrow service, we do not have a final solution on this matter yet. For example, Bitmixcoin has an opportunity to return all funds from escrow service at any time, and therefore we do not consider it a reliable solution...

What prevents to draw all the money and to start doing scam? - Nothing.




Quote
PrivCoin: We tested your tool with 3 or 4 mixes and had a 0% success

Today we have tested your system, and we see that you have changed the payment delay settings indeed.
When choosing a delay of 1 hour, it is possible to see now in the Letter of Guarantee… ‘with a delay of 65 minutes’.
Well done!

But, please do not write that you have everything worked properly until it is corrected. Don't embarrass yourself! And add a delay in minutes to the form on the JS already. I understand that this is difficult to do for the level of your site, but you try Smiley




Quote
But what about tracing coins sent to multiple addresses with different delays?

In the case of using multiple addresses just cryptomixer.io and bitmixer.io were vulnerable since they used the same miners fee for transfers. Altogether, it is a strange coincidence that these two systems had even the same api calls, but it's not our business...

The search algorithm is the following: find all transactions in the desired time range and not exceeding the maximum amount of payment (ie, do not take into account the minimum values), then group all transactions that have the same miner fee, and their amount is in the right range, keep the groups with 2-10 addresses (the maximum number of addresses can be less than 10; the exact number of addresses is easy to figure out) and get the correct result in almost 99% of cases.


To summarize all above written.

Almost all mixers appeared after closure of Bitmixer.io, did not think how to create something new and really anonymous, everyone wanted to repeat the experience of bitmixer.io and earn a lot of money... money ruled their minds. Smiley

None of them thought about the words of Bitmixer.io: '...now I grasped the Bitcoin is transparent non-anonymous system by design. Blockchain is a great open book.’

We investigated, analysed, found vulnerabilities, fixed them and made a really good product finally.
The product that protects your anonymity.




newbie
Activity: 5
Merit: 1
But what about tracing coins sent to multiple addresses with different delays?
full member
Activity: 356
Merit: 113
I would normally not interfere with the thread of another mixer but since this one makes claims about us:

We tested your tool with 3 or 4 mixes and had a 0% success rate tracking coins even when we did the most insecure mix of 0.01 BTC which was our former minimum with no time delay, minimum 0.8% fee and a single forward address. There is no chance for your tool to follow a mix that uses 2 or more addresses with a proper fee and any time delay because as an attacker you don't know how many addresses your target is going to use.

Regardless the most important thing for a mixer to do is remove a direct link between your new coins and your old. No blockchain tracing tool is going to be able to say with certainty that a suspected transaction was indeed from our mixer.

If anyone wants to test this tool on our service themselves using 2 or more addresses and a time delay and your forum rank is sufficiently high, we'll refund your fee if you notify us in advance via PM as long as you post the results of your test publicly/
copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
Quote
Would like to see a review from you.

An illustrative example of the Coinmixer.se testing.

The configuration of the mixer:

Service fee: 1-3%
Possible payment delay: 1-24 hours
The service fee per each outgoing address: 0.0001 BTC
The number of required confirmations for order processing: 3
Order processing time after receiving the required number of confirmations: 1-75 seconds


Code:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

This is Letter of Guarantee for the participation 106860. The CoinMixer mixing service confirms that the outputs stated bellow will be sent to you when we receive 0.00111693 BTC to address 34Fi35guntcDkBiGC6cXSHizkDAMj7xJCz.

List of the outputs
Address: 3MRbPeSM2XYcrSXGTpq5HEM3LCgSXKend7, delay: 0 hours, value: 0.001 BTC

Permanent link for the participation
https://coinmixer.se/en/bitcoin-mixing-service/participation-permalink/eyJwayI6MTA2ODYwfQ:1f3q5G:DF-OwQm4s-91cookOgUQBVbF4QA/

Date: 2018-04-04
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJaxUVuAAoJEFgge087XY5qlmwH/jSyczXTH7I6YS5FH3CcfCvB
EHPWqqrZ9w62fM3Uxk32eHnxa2l9ctqSTGCNw35DkUwVHOjb+VqxYmyZJ9vvPIQC
/svqoVQurBMjvnRyWuqWnmSwYBlWOKmLPZffrhZ+mtodDcLI2RNRujRHJ7QjFKX5
+fyYcpt/gqPhO7qCr2bcI0Yv3MCeAmxn8FSz7MikESm449N8HW6u0yJStwiPah/c
g4h7RrMXHZ2mH4vOxpucHafYm1XEzhc8IPGc5rEE86WTKo96F+OrtNIJKyLI51WX
rB1n0sV7SdwiNom3DRVXd9gV1yQ0euyGMmfKpPigx/wE47twN4xWztCZEn8QeeU=
=Po5N
-----END PGP SIGNATURE-----

1. 2018-04-04 21:38:10 - 0.00111693 BTC were sent to their address 34Fi35guntcDkBiGC6cXSHizkDAMj7xJcz.
2. Waiting for 3 to confirmations...
3. 2018-04-04 22:19:38 - the transaction received third confirmation
4. Start analysing all outgoing transactions to the bitcoin network with the following configuration of the mixer:

- all outgoing transactions between 2018-04-04 22:19:38 and 2018-04-04 22:20:53 (75 seconds after 3 confirmations)
- transactions amount from 0.0009834221 (0.00111693 - 3% - 0.0001) to 0.0010057607 (0.00111693 - 1% - 0.0001)

continue the search at intervals of 1 hour:

- all outgoing transactions between 2018-04-04 23:19:38 and 2018-04 23:20:53 (1 hour and 75 seconds, after 3 confirmations)
- transactions amount from 0.0009834221 (0.00111693 - 3% - 0.0001) to 0.0010057607 (0.00111693 - 1% - 0.0001)

etc, similarly, continue research within 24 hours.

We have found only +/- 10 matches (there are very few transactions in the bitcoin network, compared, for example, to VISA, thousands of times less; on average only 9,000 transactions per hour are confirmed in the bitcoin network, and there are EXTREMELY few that suitable for the search terms)

Finally, we do have just 3 matchs:

3HHoYFZPugZFEFThXYRwDAAsTpKbMwVCmn
3KRtFxACrKwoMoNDaZnbHNyruXPBqede2u
3MRbPeSM2XYcrSXGTpq5HEM3LCgSXKend7 (transaction time 2018-04-04 22:20:14)



Similarly, both bitmix.biz and privcoin.io are vulnerable too. It is just necessary to apply relevant config to the search.

bitmix.biz

Service fee: 0.4-4%
Possible payment delay: 1-24 hours
The service fee per each outgoing address: 0.001 BTC
Number of required confirmations for order processing: 3
Order processing time after receiving the required number of confirmations: 1-75 seconds

privcoin.io

Service fee: 0.8-3.8%
Possible payment delay: 1-24 hours
The service fee per each outgoing address: 0.0005
Number of required confirmations for order processing: 1
Order processing time after receiving the required number of confirmations: 1-75 seconds

Cryptmixer.io improved the vulnerability with payment delay and fixed miner fee BUT they are still using the vulnerable architecture. This mixer uses a pool of addresses with a large balances. That’s why it is possible to de-anonymize their coins for a low cost.

copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
Quote
I didn't see how you crack other services with your wonderful CAE check.

Everything is very simple.

On our opinion, Cryptomixer.io is the most sad example, since the mixer has been using the same miner fee for all outgoing transfers, the fee has been changed very rarely. It was enough to make one test mix and to see that all outgoing transactions from this mixer had a fixed miners fee, the last couple of months it was 0.0001001 BTC.

Anyone who used this mixer and saved the "Letter of Guarantee" or keeps in mind the address where the money came from this mixer for the last couple of months, can see it.

If you check logs of all bitcoin transactions before 2018.04.01 with such a service fee (actually it is pretty easy, and a lot of services provide the API), you can easily find all the transactions of this mixer, it will be possible to see all the addresses of their pool, to find out the turnover of the system and, of course, all the addresses of the clients, what is the worst.

For example, other mixers (coinmixer.se, bitmix.biz, privcoin.io) have a huge vulnerability in the preset time delay, in other words, the lack of the ability to preset the time delay up to a minute.

The algorithm of most mixers is simple: their system waits for a transfer, then waits for 1 to 3 confirmations and after, within 60-75 seconds, creates or executes a task for payment. This information is enough to track the address of the customer of the mixer even if the time delay is preset up to a few hours.

On the example of coinmixer.se (this mixer used to wait for 3 confirmations):

1. Coinmixer had generated the address where you sent money.
2. 2018-01-01 13:00:00, your transaction to this mixer had got 3 confirmations, and the mixer created a task for payment subject to preset time delay.
3. If preset time delay was equal to 0 (0 hours) then money left the mixer to the recipient's address within 75 seconds (from 2018-01-01 13:00:00 until 2018-01-01 13:01:15). If preset time delay was equal to 1 hour, the funds left the mixer between 2018-01-01 14:00:00 and 2018-01-01 14:01:15 etc.

The block is generated every 10 minutes on average, there are about 1,500 transactions, per hour in the block, that is approximately 9,000 transactions, but there are only few transactions suitable for the amount and time delay setting.

This vulnerability has not been fixed yet.

It is also possible to add several more patterns for searching and analysing transactions besides a time delay vulnerability, for example:

- fixed service fee in a certain range
- sending payments from 1 address
- money from the mixer to the address of the client go from the addresses with a large balance, usually over 10 BTC
- for example, cryptomixer.io still uses a vulnerable system of mixing, particularly sending money from the addresses of its pool. But with just $200-300 it is possible to find out all the addresses of their pool and analyse all their transactions in the future...

And these are not all patterns that you can use... not taking into account mixing algorithms, many of the similar mixers use third-party services such as cloudflare, load external scripts such as google analytics, etc., without thinking about the big brother... Smiley

Before announcing our system of mixing we took into account all the vulnerabilities of our competitors and created a truly high-quality product. Our system, unlike many others, is really anonymous.




Quote
Also what would you say about anonimity of bitblender and cryptomixer.io ?

Regarding bitblender, we did not analyse this mixer in detail, and a cursory analysis revealed no vulnerabilities.

Cryptomixer.io has vulnerabilities according to our assessment (read above).

We also like architecture of chipmixer.io, it is really interesting implementation. The only negative is the possibility that private keys to the addresses, that they give out, remain on their servers after mixing. It is not possible to check the opposite without access to their server.
hero member
Activity: 2352
Merit: 905
Metawin.com - Truly the best casino ever
Welcome OP, this is the first time I said welcome to any mixer service.
I hate the fact there are a lot of mixerd and 99% of them are just a junk.
Liked the words you claim but don't know how real they are, would like to try your mixer. How much are your reserves and are you going to escrow some btc?
Also what would you say about anonimity of bitblender and cryptomixer.io ? Would like to see a review from you.

copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
Dear bestmixer, you use very aggressive marketing strategy, bumping your own threads is no good.
Indeed. Please read the forum rules (short version: delete old bumps).

Quote
I am interested in your CAE check. Could you provide the details on how it works?
I'm curious about this too. I don't have previously mixed addresses to test it, but doesn't the fact that you ask me to disclose the name of the mixer and the number of outputs already mean you can't deduce anything from only the address?

Quote
The question: why do you so categorically blame other mixers? I didn't see how you crack other services with your wonderful CAE check.
I'd like to test this, but I'm not willing to spend the funds on this. If OP stands by his claim, I can confirm or deny it after testing, but not for free.


In the section CAE-check there are as simple as possible instructions for its use: https://bestmixer.io/en/cae-check. But if you have an idea about testing this service on your terms, please write PM

Best regards,
BestMixer Team
copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
Dear Friends,

all tasks are carried out according to the planned schedule.
We are ready for new mixings for you 24/7.

Best regards,
BestMixer Team


Dear bestmixer, you use very aggressive marketing strategy, bumping your own threads is no good.

I am interested in your CAE check. Could you provide the details on how it works? I used couple of mixers and tried to trace my funds using your service. Well, it didn't give me any sensible information, outputs contain hundreds of bitcoin addresses and my target addresses are not listed.

The question: why do you so categorically blame other mixers? I didn't see how you crack other services with your wonderful CAE check.




Thank you for spending your time and choosing precisely our service for your review. It is always nice to see when somebody registered on the forum two days ago, is worrying so much about our advertising strategy. Your review was an appeal for us to pay attention to possible changes in the work of other mixers mentioned as vulnerable on the CAE-check page.

Bingo! One of them has really changed their settings to improve result of anonymization. So we're changing the world for the better!

We will update the information on changes in the list of vulnerable mixers on the CAE-check page the nearest time.


Best regards,
BestMixer Team
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
Dear bestmixer, you use very aggressive marketing strategy, bumping your own threads is no good.
Indeed. Please read the forum rules (short version: delete old bumps).

Quote
I am interested in your CAE check. Could you provide the details on how it works?
I'm curious about this too. I don't have previously mixed addresses to test it, but doesn't the fact that you ask me to disclose the name of the mixer and the number of outputs already mean you can't deduce anything from only the address?

Quote
The question: why do you so categorically blame other mixers? I didn't see how you crack other services with your wonderful CAE check.
I'd like to test this, but I'm not willing to spend the funds on this. If OP stands by his claim, I can confirm or deny it after testing, but not for free.
newbie
Activity: 5
Merit: 1
Dear Friends,

all tasks are carried out according to the planned schedule.
We are ready for new mixings for you 24/7.

Best regards,
BestMixer Team


Dear bestmixer, you use very aggressive marketing strategy, bumping your own threads is no good.

I am interested in your CAE check. Could you provide the details on how it works? I used couple of mixers and tried to trace my funds using your service. Well, it didn't give me any sensible information, outputs contain hundreds of bitcoin addresses and my target addresses are not listed.

The question: why do you so categorically blame other mixers? I didn't see how you crack other services with your wonderful CAE check.
copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
Dear Friends,

all tasks are carried out according to the planned schedule.
We are ready for new mixings for you 24/7.

Best regards,
BestMixer Team
copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
Dear Friends,

our cooperation with you brings to us a lot of interesting work for the BestMixer project every day. It is so nice to see your activity about developing our service by sending to us new reasonable suggestions.

Kind regards,
BestMixer Team

copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
Dear Friends,

the Review Program shows good results. Thanks to your participation in it, we continue to improve our service.
We have already implemented a lot of your suggestions, and we will add others the nearest future.
We are glad to see you among our partners.

Best wishes,
BestMixer Team

legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
I would suggest that you actually escrow a small portion of your total available coin pool. This way, you are able to gain a lot more trust and confidence from people who actually want to use your mixer. This is something that was done previously by Bitmixcoin.
Personally I wouldn't care about an escrow when using a mixer, their reputation is what counts for me. Bitmixcoin indeed continuously advertises "how safe they are" by reminding users about the escrow, but if they were to pull an exit scam, the escrow would run out in just a few hours.
That's false security for users.
copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
Thank you for your opinion.

Quote
please add TLS/SSL to your hidden service link, it's very preferred

Tor protocol is encrypting peer-to-peer communication itself, and it seems there is no need to use TLS/SSL (https://stackoverflow.com/questions/27759745/need-for-ssl-in-tor).

Quote
also i'd agree there, you could make a little effort to make a non-js site version.

The special version non-js site is expected the nearest future.

Best wishes,
BestMixer Team
jr. member
Activity: 49
Merit: 107
please add TLS/SSL to your hidden service link, it's very preferred

Quote
It is necessary to enable Javascript when using BestMixer.io. Javascript allows us to make our website more convenient and functional.

also i'd agree there, you could make a little effort to make a non-js site version.
hero member
Activity: 1022
Merit: 521
I would suggest that you actually escrow a small portion of your total available coin pool. This way, you are able to gain a lot more trust and confidence from people who actually want to use your mixer. This is something that was done previously by Bitmixcoin.

Also, I would consider to invest some money when you're getting started in advertising and designing. Right now, your site design looks mediocre at least in my opinion. I understand that you're just getting started, however.

Just wondering - will the CAE actually show you the receiving addresses just by having the sending address, or will it just tell you whether you are vulnerable or not?

Cheers

Thank you for your opinion. By now we focus on the functionality of the website. After finishing of the Review Program, definition of all possible improvements and their realization we are planning to make a large-scale advertising campaign of our service that, perhaps, will include escrow use.

Regarding the CAE it really shows the receiving address of the final destination.

By the moment the BestMixer is working in the operating mode. And we are always glad to find new partners.

Sincerely Yours,
BestMixer Team.

Starting a marketing campaign will be much beneficial for your mixer because in the past it is evident that bitmixer and some other services got a great success because of advertising much higher. They have started their signature campaign with a much better pay and they remain here for a longer time.
By the way I visit to your site and it is much attractive and I hope that you will get a huge traffic. But advertising is must for any business. 
copper member
Activity: 176
Merit: 27
Ever used BestMixer.IO? Leave your feedback!
I would suggest that you actually escrow a small portion of your total available coin pool. This way, you are able to gain a lot more trust and confidence from people who actually want to use your mixer. This is something that was done previously by Bitmixcoin.

Also, I would consider to invest some money when you're getting started in advertising and designing. Right now, your site design looks mediocre at least in my opinion. I understand that you're just getting started, however.

Just wondering - will the CAE actually show you the receiving addresses just by having the sending address, or will it just tell you whether you are vulnerable or not?

Cheers

Thank you for your opinion. By now we focus on the functionality of the website. After finishing of the Review Program, definition of all possible improvements and their realization we are planning to make a large-scale advertising campaign of our service that, perhaps, will include escrow use.

Regarding the CAE it really shows the receiving address of the final destination.

By the moment the BestMixer is working in the operating mode. And we are always glad to find new partners.

Sincerely Yours,
BestMixer Team.
hero member
Activity: 1666
Merit: 753
I would suggest that you actually escrow a small portion of your total available coin pool. This way, you are able to gain a lot more trust and confidence from people who actually want to use your mixer. This is something that was done previously by Bitmixcoin.

Also, I would consider to invest some money when you're getting started in advertising and designing. Right now, your site design looks mediocre at least in my opinion. I understand that you're just getting started, however.

Just wondering - will the CAE actually show you the receiving addresses just by having the sending address, or will it just tell you whether you are vulnerable or not?

Cheers
Pages:
Jump to: