Topic: [END] [banned mixer] Premium Review and Suggestion Campaign - page 4. (Read 3458 times)

Hi Shahsan, thank you very much for your honest and detailed review!


We heard this already a lot, that people don't like the captcha, however, we have integrated into the website, so that bots aren't able to attack our website. It's only for security reasons and everyone needs to do the captcha, no matter if a VPN is, or is not used or similar.


Regarding the transaction fee that the user needs to pay, it is mentioned in the pricing page, as well in the FAQs. We didn't want to add too much information into the mixing process, as this can confuse people. Our approach is simplicity.

We thank you again for your detailed feedback. If any other questions or feedback arise, feel free to comment in this thread, in our personal thread or message us.

Hey Royse777, that means that current campaign is now closed for new participants making reviews or it is still open for new people to apply?
I know some really good members who are not yet Hero members (campaign rule) but I am sure they would make very good honest review.

We have Kavelj22, examplens and Little Mouse left.
Please leave your reviews as Unijoin has another promotion to come after this.

Cheers,

UniJoin seems to behave like a normal mixer, not so much like what you'd expect from a coinjoin (where afaik your coins are mixed with others'). So yes, the link is broken.
Even more, at least in theory, they seem to ensure (or at least imply) that, if you use your initial user code in the further mixing operations you do there, your funds from any deposit of yours don't end up to you. I've done only two deposits, so it may not be so much relevant, still, not bad. I don't know though for how long will this stay valid, since it may depend on the volumes they have and the mixed coins returning to UniJoin as deposits.

Yes, it is a standard transaction (exactly 1 input -> 2 outputs) and one of its parents looks like a coinjoin transaction (70+ inputs -> 100+ outputs).
btw, the coins I sent are still sitting there and hasn't been moved yet.
It looks like when you mix your coins with UniJoin, they will send you coins they already coinjoined.

The outputs of the coinjoin transaction are (in most cases) bigger than the mixed amount, if they are going to use one/few outputs for a payout then use the change for another payout(s) without coinjoining it again, then this is definitely a flaw in their approach!

Was your output transaction a CoinJoin transaction, or something more standard (ie 1 input -> 2 outputs)? If it wasn't a CoinJoin transaction, do you end up at a CoinJoin transaction by following the input chain up a few steps?

Premium review and suggestion spreadsheet#2

Immediately after opening the [banned mixer] web page, I clicked on "Start Mixing" and intentionally didn't read the FAQ or the T&C because I know most users won't do that and to see if this will affect the mixing experience (usually if you have to refer to the FAQ to figure out what to do or what's the next step then you can realize that the process is over-complicated and not suitable for everyone).
I completed all the steps in few minutes and after the mixing process finished, the mixed coins showed up in my wallet and the mixing session (containing my personal information) got destroyed or at least I can't access it anymore.
In general, the experience was smooth and the steps were straightforward that even someone who never used a mixer before won't face a problem mixing his coins with UniJoin. However, I noticed few things that I didn't like or that should be improved/changed, I'll detail them below step by step:

Step 1: Operation Details
    - UnjCode, the popup that appears after clicking the "?" button does not tell you what the UniCode is or what it is used for. You'll have to wait till the last step to get that information.
    - Checking address validity (taproot!), I tried different addresses' formats and changed few of their characters and, indeed, the form detects when you enter an invalid address. But when I provided a valid P2TR address I picked randomly from a block explorer, the form said it's invalid! I believe a service designed mainly to enhance users' privacy must support taproot (for payout addresses).
    - Transfer Delay, the minimum delay is 1 hour and you should probably lower it a bit more as some users won't want to wait that long.

Step 2: Terms
    - The warning message in that page says: "the fees range from 1% to 3% and are randomly generated as soon as an incoming payment is detected"!
Why do you generate the fees after detecting the incoming transaction? Someone might accuse you of charging fees depending on the transaction amount ( the higher the amount the higher the fees)! You should either let the user customize the fees manually or generate and publish it from the start of the session.
    - Letter of Guarantee, both LoyceV and  DarkStar_ are correct, verifying the signed message shouldn't be that complicated and the message should include the date when it was generated.
Also, you should publish your public key somewhere else other than on your website. You can upload it to public key servers or post it on your ann thread here. This will help in case your servers get compromised and the attacker publish his public key instead of yours.
The aim of the LoG isn't only to allow restoring a session but, and most importantly, to verify that the deposit address was generated by you. So validating the signed message and having the public key on your website doesn't mean anything.
    - There are also some terms that are technically incorrect and a bit misleading such as "funds sent will not be accepted" and " valid address".
Step 3: Send Coins
    - The warning message says that only funds send within the remaining time will be accepted but it doesn't say what will happen to funds send after that, will it be lost or it can be recovered? the same for sent funds below the minimum amount (0.001btc)? What will happen if someone send coins, your system detects it while it's still unconfirmed, then the user replaces it by bumping the fees thinking he is helping speed up the process?
And why 24 hours?
    - After detecting the incoming transaction, the fee will be generated and displayed, this had to be done since the start of the session for the reason mentioned above ( avoid manipulation and let the user decide whether to accept the generated fee or not).

Step 4: Mixing Coins
    - The warning message, again, in this page says that the payout may take longer than the preset transfer delay if the CoinJoin hasn't been completed yet and the transaction fees will be charged to the customer. You had to be transparent about this from the beginning (remember that I didn't reed your ToS).
  
Step 5: Done
    - The amount received was exactly what I expected after deducting the service and network fees.
    - Unijoin claim they deleted all personal data and we have to trust them on that as there is no way to verify it. What's certain is that you can't restore your session using the Order Id or the LoG.

I'm not an expert when it comes to blockchain analysis But when I looked up the payout transaction on a block explorer, I saw that the inputs used (UTXOs) by that transaction were created before I made the deposit transaction (this is not always true for all orders). So, this means there is no direct link between the coins I sent and the mixed coins I received, at least not through UniJoin.

Premium review and suggestion spreadsheet#1>

/en/coinjoin/btc]start mixing on the homepage and then I clicked on that. And also I have placed my bitcoin wallet address (It is great that I can add up to 8 addresses.) to where I want to receive my bitcoin. And then clicked into continue.

 Then I found captcha which I personally dislike and I don't think we have done something for which we have to fill out the captcha I think it should be removed. Anyway, I have filled the captcha and now I came to know the price is (1% to 3%) though it was presented on the pricing page too. We may miss to see the pricing option but we won't miss from here. In this case the site seems to me just awesome. I have filled all the boxes which is required. And it is very much important. If they didn't have these option then we  could miss a lot of thing. However, after clicking all the boxes I clicked on continue. Note: the wallet address which will be generated for the payment will be active for 24 hours and I think it is enough time while it could be okay with lower time too. Now I am on third steps. The page shows like below image:

From this page I came to know minimum mixing amount is 0.001BTC and maximum amount is 250 bitcoin. Also another thing though they have mentioned it is 24hours but they gave me 23 hours and 50 minutes instead of 24 hours. After a while of my sending payment they cross the wallet id and shows my final fee which is 1.759%
Another important thing I came to know that they require 2 confirmation. Which I have not seen before sending the payment. I think the admin should take step sothat we can know before sending the payment. Anyway, now I am waiting to see whats going to happen. Just saw already 1 confirmation done now waiting for the second  confirmation. I am curious to see whats on next. Now 2nd confirmation done and it is automatically sent me to 4th step. Here I have nothing to do. So, if I went out after payment sent then that was okay too. But for future reference we should write/save order link and unicode. Anyway, now it is showing 1 hour 50 minutes time require for the completion of the mixing. And also they have informed that it may delayed further. I think they should provide this information earlier. Also, they will deduct transaction fee which will be deducted at the time of transferring fund from the mentioned amount. I had sent0.001 bitcoin as a test. Now they are showing 0.00098241 bitcoin which I should receive (they will deduct transaction fee from this amount) I have not seen this type of fee and it is not illegal but I think they should mention it at the same place where they have mentioned their fee is 1% to 3%. 2 hours passed and it is showing payment will be completed within few moment. Oh, great I have received it within a moment. I have finally received 0.0097818 bitcoin. And I have been informed that my personal data has been deleted.
>