Topic: What software exists to run a CoinJoin server? [Wasabi debacle] (Read 646 times)

Blockchair is pretty decent of an explorer.  I like for somethings.  One of the handy features is that it shows if an address has any fork coins locked within.  I was using it almost exclusively for a while until several months ago when a discussion about privacy caused me to switch to mempool.space. 

I've been (slowly) attempting to launch my own instance of mempool, but I was trying to build it from code, and implement it myself with ngix and npm and nodejs, and oh my god what a shit-show.  Last weekend I finally broke down and tried the docker image.  Still having some trouble, but I'm getting closer. 

As for the ads in blockchair, at least they give you the option to turn them off temporarily without an ad-blocker.  Not too many sites offer such a feature.

I never use Blochair website, or should I say almost never, because sometimes I click on link that someone sent me from blockchair.
Much better and cleaner alternative in my opinion is mempool.space, and it's not supporting bunch of shitcoins like it's competition.
One more good thing, mempool.space is fully open source, you can run it with your own node and you don't have to trust any third party.

I am using uBlock Origin all the time (except in bitcointalk forum) and I can't even imagine browsing internet without it.
Recently I had to install new operating system in one laptop and test how it works including internet browsing, it was painful experience to do it without ad blocker... funny thing is that most people don't use any ad blockers, believe it or not

Yeah, that works. I just tried it out and it works for both the horizontal ones that appear on top and and the vertical ones appearing underneath the Bitcoin price graph. But you have to click on one from each group.

I just noticed that blockchair also has a button to turn off all ads, but it only does it for 3 days according to the provided description. You can find it in the top right corner under the sponsored casino ads. I did that on a different browser just to see how it works and it gets the job done as well. However, it's just a temporary fix.



Additionally, this reddit thread explains how to filter out the unwanted ads yourself.

Huh. A quick look at my set up shows the Blockchair ads are indeed on my own personal filter list and not the pre-installed ones, which means I must have added them at some point, although I don't remember doing so. You can permanently add an ad (heh) to your block list with 4 clicks with uBlock Origin (uBlock Origin icon -> select element picker tool -> click on the ad -> click on "create"). I do this aggressively with any ad which gets through the standard filters, so I probably did it years ago the first time I ever saw them and then simply forgot they exist.

Even with uBlock Origin and AdGuard, the blockchair casino advertisements are still visible if you look up a BTC address. I know it's possible to customize the filtering system of uBlock Origin and add sites whose ads should be blocked manually, so that might fix it.

I still don't see the point, though. Why start with a flawed concept (centralized coordinators which have the power to censor you) and then fork and try to modify around it, when there already exist coinjoin implementations with no centralized coordinator in the first place. Anyone with the time and ability to do this would be far better spending their time on making JoinMarket more newbie friendly.

...Chrome. *shudder*

Honestly, I didn't even know Blockchair were running ads at all, let alone ads for scammers. I just stopped using them cause their new layout is so bad. Are you guys not using uBlock Origin?

Yes.

Mycelium.

Would that be Eclair Wallet?  I haven't used it since Electrum implemented Lightning.

---

Me too.  I used to really like their site, and I was excited when they launched their chrome extension.  I figured it was going to make searching for addresses much easier, but oh my god what a nightmare.  It made chrome slower than molasse in winter time. 


I was using mempool before it was cool. [/gen-x-er mantra]

Are you talking about the casino ads they have and particularly the one from 1xBit or is there something else that I missed?

Me: Jesus Christ!
CMC: Oh, did you say Jesus? We have that too, here you go https://coinmarketcap.com/currencies/jesus-coin/.

Btw, Cycling coin even had an ANN on Bitcointalk and a phenomenal use case. You could use it to buy cycling clothes. Don't you just hate it that no one can buy cycling clothes anymore since the Cycling coin project failed? It's so sad.   

Me: Searches for "cycling.coin".
Also me: Figures out there's no .coin TLD.
DuckDuckGo: No, problem. Here's a shitcoin. 

---

---

I have an idea: Instead of working to create a CoinJoin server, which is open to the same zkSNACKs-kind-of attack, why not making a JoinMarket plugin, which can treat the JoinMarket maker as a CoinJoin coordinator as well? That'd be like killing two birds with one stone.

CoinCycling.Club is available! Temping, but I don't think I'll have the time to figure it all out.

It's no secret that author of that article about wasabi wallet was signed bellow and his name is Shawn Amick, he is an author "Dick, Stan Greene", podcast co-host for Citizens of Blockchain, blogger, and BitcoinMagazine contributor.
I found one interesting thing, the original founders of BitcoinMagaize are Vitalik Buterin and Mihai Alisie back in 2012, but it is currently owned by BTC Inc aka BTC Media LLC.

CoinTroy sounds better, if you know the history of ancient Troy

Yes, but the source code is released under the MIT license, wherein you're allowed to modify and distribute, which means it allows you to develop it. However, being hosted by zkSNACKs means you're going to have a hard time forking it and re-releasing it successfully, as far as I understand.

"Cycling Club" as a name for a mixing service does sound cool. 

CoinJoy 

It's not independent. Wasabi is built, developed, and maintained by zkSNACKs. zksnacks.com calls Wasabi their "flagship product", and the Wasabi code is on the zkSNACKs GitHub.

Loycepup's Coin Cycling Club.

I have largely avoided blockchair since their horrendous redesign last year. mempool.space is where all the cool kids go.

I like the idea, and I happen to have a (donated) dedicated Xeon server with 16 GB that's mainly idling.

I'm thinking of names: Loycabi? NotACoinJoin? CoinJoinAnything? TaintThis?

My favourite mobile wallet sold out advertising a scam, my favourite Blockchair website does it too. It sucks, but money makes loyalties flexible.

Would this be something we, as a community, could provide? Say we start with one CoinJoin transaction per week, on a fixed time. So anyone willing to join can plan their transaction as long as they're not in a rush.

Bitcoin Magazine allows you to submit articles to be posted for a fee. I've attempted to do that with some of my own articles before.

What I'm saying is that it's entirely possible that this is a generic piece submitted by Wasabi workers.

As I said in a previous post, Wasabi Wallet is a free, open source software totally indipendente from zkSNACSn, the e corporation running the default coordinator.
Wasabi wallet (the client) do not implement any of the chain-analysis like techniques because those are implemented in the coordinato itself, and the client has no way to know if the coordinator implements those rules.

So, basically, Wasabi 2.0 is a nice, new, useless software.

...

An hour or so ago, author Shawn Amick published this piece on Wasabi's new wallet:

https://bitcoinmagazine.com/business/wasabi-wallet-2-contains-new-features-for-optimizing-bitcoin-coinjoins

He writes nothing about Wasabi working with analysis companies, hmm...

Maybe. But even if JoinMarket is largely being used by bigger players, there is nothing stopping the average user from getting involved too. It's not like Wasabi where they are sacrificing the privacy of the average user to cater to the bigger players.

I've not tried it myself, but I don't see any reason why not, provided the wallet you are using for JoinMarket is fully synced and up to date. A quick search of their GitHub shows a couple of users who seem to be using pruned nodes without any issue.

This is good source of information and nice comparison between Wasabi, JoinMarket and Whirpool.
However, I think that most small fish lazy people prefer easy one click solutions for privacy, and bigger players are using JoinMarket, that is why they probably have much bigger volume.
In light of current market conditions, I expect volume to go down for all options now.

Do you know if it's possible to use this with pruned Bitcoin node as well?
It's not that hard to run this for most of the people.

But again, does that really matter?  There are always going to those who try to avoid taint.  You'll know them IRL because they put on latex gloves when handling cash.


I wouldn't be so naive to believe that a that a mixer couldn't be in cahoots with the government.  And again, how would we know?  Mixers are centralized services.  Any privacy, anonymity, and most importantly, safety that you get from a mixer is purely assumed.  We must trust that the mixer will provide the services as promised.  With the exception of privacy, there is no way to verify and validate the results. 

---

Okay, okay, JoinMarket, I got it. 

I'll look into it, do my own research.  Thank you.

I feel like I've written this word about 600 times over the past few days, but the answer is JoinMarket. Run your own JoinMarket client, connect to other JoinMarket clients peer to peer, and bypass any centralized coordinator with the power to blacklist your inputs.

According to https://www.bitcoinkpis.com/privacy, Wasabi coinjoin volume averages around 700-800 BTC per week, while JoinMarket volume averages around 1000-2000 BTC per week. And as an added bonus, if you are in no rush to coinjoin and are happy to be a maker providing liquidity, you can even earn some fees doing it.

Downsides are you need to run your own node, and it is more complicated to set up for the average user than opening a Wasabi wallet.

The problem here is that other wallets will follow Wasabi's precedent, also voluntarily.

Sure, we could just use mixers and that would be the end of it, but we are trying to discourage this trend by demonstrating that actions hostile to the bitcoin community will be punished.

Is it really worth the effort?  I mean if privacy and anonymity are the goals, aren't there better options than CoinJoin?  In the other thread n0nce mentioned one could even code in an easier way to add coinjoin coordinators, so you could even have a whole list to choose from.  Even if you had a whole list of coordinators, they are each a centralized entity which requires trust in those entities.  Wasabi told us they're using BCA, what's to prevent another coordinator from pretending they're not.  Would we know?

What i meant is very few people use Chaincase and even fewer people interested to make CoinJoin (probably due to 0 liquidity). sakewallet looks like is dead since their last tweet was on March 17.


Fair point, but how many Wasabi Wallet user know there's option to change coordinator?

1. Chaincase app coordinator is available for all platforms where Wasabi Wallet can run, or do you mean iOS users, in general, aren't that interested in making CounJoin transactions? As for sakewallet's website, I only found this:
https://trustedrevie.ws/reviews/sakewallet.com, but the domain has been suspended, so my guess is that this project has failed.
2. Again, this only indicates that very few are really interested in finding alternatives to default coordinator.
3. I don't know what those users would have chosen had they been given such a choice, but you can't expect zkSNACKS to add alternative coordinators to the client because their income depends on not including anything alternative.

This.
For the moment being you should assume every liquid coordinator is in reality a “three letter agency honeypot” to break your privacy.

Regarding the Wasabi debacle, please remember that the risk in a centralised company were clear even to the founders on day one.

I tend to separate responsibilities from Wasabi the software developers, zkSNACKs (the company running the coordinators) and Wasabi the wallet.

Wasabi is an open software project funded by zkSNACKs. This same company appeared to run the default coordinator.
Having a “default” choice for coordinator was a good choice for privacy, as this maximised liquidity to an “honest” coordinator, but was a poor choice for the resilience of the system to legal threat. This trade off was very clear from the beginning both to the developers and zkSNACKs (Riccardo Masutti confirmed that on a live cast in the outbreak of the news).

Wallet developers, were in any way agreeing to the implementation of those techniques which are a “choice” of the coordinator. The wallet itself, as a front-end do not implement any of those.

So, while I condemn zkSNACKs, I cannot blame no para and the other developers who gave us such a great product for many years.

o_e_l_e_o mentioned that it's a problem of not enough outputs, but this can be solved by forking Wasabi Wallet, getting enough developers and contributors behind it, change its name, branding and website, and launch an aggressive advertising campaign to get Wasabi users to switch to a truly private wallet.Then the problem would be reduced to a purely funding one as you have described.

There are different reason about their zero liquidity, such as
1. Chaincase only available for iOS device and still on TestFlight/beta phase. As for sakewallet, i can't even find their website.
2. Both of them has very little publication. I just heard existence of sakewallet from your posts.
3. Wasabi Wallet only use their own CJ server. If the software force user to choose CJ server which show several alternative, i expect few user would choose different CJ server.


IMO if the problem is only money, they could increase coordinator fee or launch aggressive donation campaign.

Makes me wonder if that is part of the problem. If you have to put some of your own BTC on the line and since a large amount of the funds for their coordinator did come from Wasabi themselves if they found themselves in a financial hole. And as much as we would like to think we are all good people and would donate to the cause we know that is not the case. Not defending what they did, just putting it out there to think about.

-Dave

It's not so much that, but you need other users to coinjoin too. I could spin up a coordinator right now and load it up with 100 outputs ready to be coinjoined. Anyone using it would obtain zero privacy since their outputs could be completely de-anonymized by process of elimination.

Darn it. I completely forgot about liquidity. It's not like anyone wants to put their personal funds on the line to run a coordinator.

This is sympthom of a greater problem where the BTC community is gradually being split up into two factions of whales and everyone else, and people are finding out that the whales are the ones who can create exchanges, mixers and coordinators (assuming there is no 3rd party VC involvement which I will ignore for this analysis) and when these services get stung, we can't make alternatives because we got no liquidity of our own.

As witcher_sense has pointed out, you can spin up your own coordinator if you wanted and as others have done, but a complete lack of liquidity will mean you can't actually coinjoin anything. If you want to use coinjoin right now, then JoinMarket is the best option.

I also wouldn't recommend using Wasabi at all, even with a non censoring coordinator. The Wasabi devs have revealed very clearly where their priorities lie: Those priorities are not with their users or protecting privacy, but solely with making profits. Obviously Wasabi is open source, but I'm still not going to use a wallet which is run by a team who are willing to voluntarily sell out their users for profits.

Wasabi Coordinator is open-source, you can run your own if you like: https://github.com/zkSNACKs/WalletWasabi/tree/master/WalletWasabi.Backend


Examples of publicly known coordinators that don't censor incoming utxos:


https://twitter.com/sakewallet


https://chaincase.app/


I tested both these coordinators: they had literally zero liquidity, which is a clear indication that people either don't care about blacklisting or aren't aware they are being surveilled by a chainanal company.

This is probably a belated recognition of the threat posed by blockchain analysis companies crawling all over the user data of Wasabi Wallet, and specifically transactions, but their announcement of a signature campaign has caused a public uproar on this forum (thanks especially to PrivacyG for warning everyone).

The situation map is currently thus:

- The Wasabi wallet itself is still clean and uncompromised.
- But the default CoinJoin server used by Wasabi wallet (zksnacks) is now blacklisting "tainted" coins, an action which is intolerable to the community.
- Ignore the signature campaign for now, it is irrelevant to remedying the situation.


This thread exists to gather open source software on Github/Gitlab/etc. which allows the running of a Wasabi-compatible CJ mixing server. Software that cannot be plugged in to Wasabi should not be listed here. Since this battle is being fought against their main CJ server, and not analysis companies/exchanges/governments, we still have a chance for winning this, even if we are 3 months behind schedule (the announcment for the blacklisting was made last march).

Discussion on how to make such CJ software work for Wasabi (as well as the other way around) is also welcomed. Special attention should be given to getting these to run on low-powered Linux servers (think 8GB of memory or less).