Topic: Wasabist.IO - Wasabi Wallet Coordinator & Explorer (Read 473 times)
It looks like the coinjoin server is down, but the website is still online. Any updates?
Wasabi has silently broken compatibility with non-free coordinators since the last release v2.0.9 by removing the free remix and friends don't pay feature. If you see "IncorrectRequestedAmountCredentials" exceptions on the client side, it is because of this. The coordinator fee will be completely removed with the next release
Get ready for much more drastic updates soon that will kill most active coordinators and force everyone to switch to ginger fork that works only with ''approved'' pro-censorship fed coordinators.It looks like last days for scammers who are lying everyone that they are magically making bitcoin anonymous
You're mistaken. The effect is the opposite. The most active free coordinators will get most of the users. The coordinator market will shrink. There is no such thing as a "fed coordinator" - it would not make any sense. If you know anything about Wasabi (Zero-Link, WabiSabi), you would know that the coordinator is not able to extract any information even if they wanted to. If you want a real discussion, be concrete and avoid talking in riddles, what updates? which scammers? who is everyone? where is the lie and who lied?
Wasabi has silently broken compatibility with non-free coordinators since the last release v2.0.9 by removing the free remix and friends don't pay feature. If you see "IncorrectRequestedAmountCredentials" exceptions on the client side, it is because of this. The coordinator fee will be completely removed with the next release
Get ready for much more drastic updates soon that will kill most active coordinators and force everyone to switch to ginger fork that works only with ''approved'' pro-censorship fed coordinators.It looks like last days for scammers who are lying everyone that they are magically making bitcoin anonymous
Wasabi has silently broken compatibility with non-free coordinators since the last release v2.0.9 by removing the free remix and friends don't pay feature. If you see "IncorrectRequestedAmountCredentials" exceptions on the client side, it is because of this. The coordinator fee will be completely removed with the next release - https://github.com/WalletWasabi/WalletWasabi/pull/13297#issuecomment-2283555140. The last Wasabi version that is working properly with non-free coordinators was v2.8.0.1.
How it works now:
- Each round generates a SHA-256 hash and publishes it after the round starts.
- After the round ends, Coordinator publishes the winning number, winner’s address, and winner’s salt. (https://i.imgur.com/qO9a01e.png)
- You can verify the hash using this pseudocode: base64_decode(winner_hash) === sha256(winner_number . winner_salt)
- The winner is determined using confidence intervals after sorting the address list alphabetically (A-Z), after this i use winner_number to determine the winner and provide.
- The winner will receive the reward in the next successful round! This change is necessary because if the winner received the reward in the current round, it would be shown during the Signing phase, allowing someone to track this data and sabotage the round if he is not the winner. (https://i.imgur.com/RLoNfDI.png)
Cool! I don't quite understand sorting the address list alphabetically, shouldn't the sorting be based on value of the output created by each address?
Sending the reward in the next successful round is a nice solution to the problem of players cheating. But if 50% of fees are sent to the winner, then Round B always needs to collect at least half of the fee that round A collected.
Regarding fees - the winner receives the reward for the next round, meaning it can even be higher in fees than the round in which they won. There are no guarantees that they will receive a specific amount; it works as I intended.
How it works now:
- Each round generates a SHA-256 hash and publishes it after the round starts.
- After the round ends, Coordinator publishes the winning number, winner’s address, and winner’s salt. (https://i.imgur.com/qO9a01e.png)
- You can verify the hash using this pseudocode: base64_decode(winner_hash) === sha256(winner_number . winner_salt)
- The winner is determined using confidence intervals after sorting the address list alphabetically (A-Z), after this i use winner_number to determine the winner and provide.
- The winner will receive the reward in the next successful round! This change is necessary because if the winner received the reward in the current round, it would be shown during the Signing phase, allowing someone to track this data and sabotage the round if he is not the winner. (https://i.imgur.com/RLoNfDI.png)
Cool! I don't quite understand sorting the address list alphabetically, shouldn't the sorting be based on value of the output created by each address?
Sending the reward in the next successful round is a nice solution to the problem of players cheating. But if 50% of fees are sent to the winner, then Round B always needs to collect at least half of the fee that round A collected.
I have updated the Coordinator to now provide a "Proof of Honesty" for our gambling option.
Link to coordinator page: https://wasabist.io/15
URI for connection:
How it works now:
To make this process clearer, the wasabist.io explorer now provides all this information for our Coordinator.
For example: https://wasabist.io/15/9f6cb303df8fca33aa099b3b6155d452f878fabdd89213cb1a7e83c11bed4b9c
Also some UI improvements have been made and light theme has been added.
Link to coordinator page: https://wasabist.io/15
URI for connection:
Quote
name=WASABIST.IO+%7C+UNIQUE+COORDINATOR+%7C+COINJOIN+AND+EARN+%7C+READ+MORE+ON+OUR+SITE&network=main&coordinatorUri=https%3A%2F%2Fwasabist.io%2F&coordinationFeeRate=0.001&readMore=https%3A%2F%2Fwasabist.io%2F15&absoluteMinInputCount=25
or simply visit https://wasabist.io and press on "Connect" button for more information.How it works now:
- Each round generates a SHA-256 hash and publishes it after the round starts.
- After the round ends, Coordinator publishes the winning number, winner’s address, and winner’s salt. (https://i.imgur.com/qO9a01e.png)
- You can verify the hash using this pseudocode: base64_decode(winner_hash) === sha256(winner_number . winner_salt)
- The winner is determined using confidence intervals after sorting the address list alphabetically (A-Z), after this i use winner_number to determine the winner and provide.
- The winner will receive the reward in the next successful round! This change is necessary because if the winner received the reward in the current round, it would be shown during the Signing phase, allowing someone to track this data and sabotage the round if he is not the winner. (https://i.imgur.com/RLoNfDI.png)
To make this process clearer, the wasabist.io explorer now provides all this information for our Coordinator.
For example: https://wasabist.io/15/9f6cb303df8fca33aa099b3b6155d452f878fabdd89213cb1a7e83c11bed4b9c
Also some UI improvements have been made and light theme has been added.
Finally launched my own coordinator! 
It's a bit different from other ones. Fees are completely random, from 0.01% up to 0.1%. Round time is also random.
After each round winner is calculated and half of round fee going to him. You can coinjoin and even earn during this process.
Connect by copying URI:
It's a bit different from other ones. Fees are completely random, from 0.01% up to 0.1%. Round time is also random.
After each round winner is calculated and half of round fee going to him. You can coinjoin and even earn during this process.
Connect by copying URI:
Quote
name=WASABIST.IO+%7C+UNIQUE+COORDINATOR+%7C+COINJOIN+AND+EARN+%7C+READ+MORE+ON+OUR+SITE&network=main&coordinatorUri=https%3A%2F%2Fwasabist.io%2F&coordinationFeeRate=0.001&readMore=https%3A%2F%2Fwasabist.io%2F15&absoluteMinInputCount=25
Read more: https://wasabist.io/15 Can you add any features to ensure that it is difficult to repeat what happened with WasabiCoordinator.IO, such as placing a warning label on any Coordinator that has Minimum Inputs less than 10 or a short Round Time, or tracking whether the fees are real or may be tampered with?
Thanks for the continued development, the project is good, I will put a super bump on it.
AFAIK problem is fixed by WW team, short round time is not a malicious behavior if inputs count is enough and now minimal inputs count can be set in wallet. There is nothing to do, everything done by WW team.Thanks for the continued development, the project is good, I will put a super bump on it.
You add a section for those coordinators that have gone rogue and maybe their current status (active or inactive) just to keep track of them and also help warn other new users about the coordinator that can not be trusted.
, i'm listing only good coordinators. And as exploit fixed by ww team there is no rogues anymore.BTW i've published a new update, now you can see remixed/new coins on the coordinator page.
Can you add any features to ensure that it is difficult to repeat what happened with WasabiCoordinator.IO, such as placing a warning label on any Coordinator that has Minimum Inputs less than 10 or a short Round Time, or tracking whether the fees are real or may be tampered with?
Thanks for the continued development, the project is good, I will put a super bump on it.
AFAIK problem is fixed by WW team, short round time is not a malicious behavior if inputs count is enough and now minimal inputs count can be set in wallet. There is nothing to do, everything done by WW team.Thanks for the continued development, the project is good, I will put a super bump on it.
You add a section for those coordinators that have gone rogue and maybe their current status (active or inactive) just to keep track of them and also help warn other new users about the coordinator that can not be trusted.
Can you add any features to ensure that it is difficult to repeat what happened with WasabiCoordinator.IO, such as placing a warning label on any Coordinator that has Minimum Inputs less than 10 or a short Round Time, or tracking whether the fees are real or may be tampered with?
Thanks for the continued development, the project is good, I will put a super bump on it.
AFAIK problem is fixed by WW team, short round time is not a malicious behavior if inputs count is enough and now minimal inputs count can be set in wallet. There is nothing to do, everything done by WW team. Thanks for the continued development, the project is good, I will put a super bump on it.
Can you add any features to ensure that it is difficult to repeat what happened with WasabiCoordinator.IO, such as placing a warning label on any Coordinator that has Minimum Inputs less than 10 or a short Round Time, or tracking whether the fees are real or may be tampered with?
Thanks for the continued development, the project is good, I will put a super bump on it.
The Wasabi Wallet team took care of it, they reacted very quickly with the new update.Thanks for the continued development, the project is good, I will put a super bump on it.
Quote
Yesterday, we were informed that the "wasabicoordinator.io" coordinator was using suspicious parameters, including requiring only 2 inputs, creating rounds as quickly as possible, and charging the maximum allowable coordination fee. This also involved changing the fee after a round failure. We confirmed that the wasabicoordinator.io coordinator was indeed exploiting the vulnerability our team had been addressing.
Exploiting this vulnerability requires not just configuration or DevOps knowledge, but a deep understanding of the coinjoin protocol. We aim to release an update within hours to address this issue.
Thanks to community-developed monitoring systems, this exploit was detected relatively quickly. We communicated about it to minimize impact and advise users to pause coinjoining. Subsequently, we swiftly released version 2.1.0, which prevents similar attacks.
Exploiting this vulnerability requires not just configuration or DevOps knowledge, but a deep understanding of the coinjoin protocol. We aim to release an update within hours to address this issue.
Thanks to community-developed monitoring systems, this exploit was detected relatively quickly. We communicated about it to minimize impact and advise users to pause coinjoining. Subsequently, we swiftly released version 2.1.0, which prevents similar attacks.
https://github.com/WalletWasabi/WalletWasabi/discussions/13249
Can you add any features to ensure that it is difficult to repeat what happened with WasabiCoordinator.IO, such as placing a warning label on any Coordinator that has Minimum Inputs less than 10 or a short Round Time, or tracking whether the fees are real or may be tampered with?
Thanks for the continued development, the project is good, I will put a super bump on it.
Thanks for the continued development, the project is good, I will put a super bump on it.
- Improved receiving round states when coordinator network conditions are poor
- Added connection string for autoconnection to coordinator for wasabi wallet 2.1+
- Minor fixes and improvements
- Added connection string for autoconnection to coordinator for wasabi wallet 2.1+
- Minor fixes and improvements
Thanks. Some improvements have been made:
- now root domain is shown on main page
- added a simple mobile version with sorting
- stuck rounds now deleting automatically from database
- drugshop coordinator removed
- now root domain is shown on main page
- added a simple mobile version with sorting
- stuck rounds now deleting automatically from database
- drugshop coordinator removed
Amazing service, idea from us: add search by address/round/tx hash.
What do you mean? Ginger provides the same coordinator in that sense as zkSNACKs which was working well for years until the shutdown. It had AML as well.
This does not mean that it is a good solution.I will not risk a single satoshi to go through an AML check by Ginger's wallet. I don't deal with crime or anything illegal, but I don't want any additional requests when I anonymize my coins.
Personal request - could you change the name of my coordinator in the list from btcpay.kruw.io to just kruw.io ? Users who try to visit btcpay.kruw.io will only find a login page that they can't do anything with, but they will see some educational material about coinjoins if they visit the main page of kruw.io
Nice project, interface is clean. You can add a Tor link and more details about each coordinator.
At some point api.gingerwallet.io may only work via gingerwallet so it is best to exclude any coordinator with KYC regulations.
At some point api.gingerwallet.io may only work via gingerwallet so it is best to exclude any coordinator with KYC regulations.
Currently, the GingerWallet has its own coordinator integrated directly, which cannot be changed. We believe it is much simpler to think in terms of plug and play, providing a ready-made solution without the need for users to search the internet separately. Nevertheless, it is not excluded that anyone can use our coordinator with the help of an external program. For example, in the past, Trezor used the Wasabi coordinator in its own application.
Some updates have been published:
- added sorting (saves to cookies)
- added filter for only success rounds
- information about coinjoin plugin for btcpayserver now showing by click on 'connect'
- some minor fixes and UI improvements
- added sorting (saves to cookies)
- added filter for only success rounds
- information about coinjoin plugin for btcpayserver now showing by click on 'connect'
- some minor fixes and UI improvements
Jump to: