wasabiwallet on Nostr: Primitive coinjoin designs isolate change, creating a definite trail. Efficient ...
Primitive coinjoin designs isolate change, creating a definite trail. Efficient coinjoin designs include change, creating probable links.
Both strategies fall short of user expectations, so there’s only one option left: getting rid of toxic change in coinjoins. Since we cannot spend toxic change from coinjoins privately, we must eliminate it.
No more change.
Having one standard denomination per pool seems inflexible since inputs under the denomination require consolidation and inputs over the denomination create change.
With single-value coinjoins in Wasabi 1.0, JoinMarket & Whirlpool, the problem of toxic change cannot be eradicated. The ZeroLink protocol developed by cryptographers such as nopara73 (npub1qqv…0c3j) , founder of Wasabi Wallet, was not made for multiple values: a redesign was required.
Enter the WabiSabi protocol with arbitrary-amount coinjoins, allowing multiple denominations, which successfully gets rid of the problematic change outputs in single denomination coinjoins. After almost three years of research, the Wasabi team invented a novel way of doing coinjoins by using key-verified anonymous credentials (KVACs) and a specific type of amount organization; maximizing privacy and efficiency while eliminating change outputs.
The new cryptographic protocol was named WabiSabi, which is a Japanese word for finding beauty in imperfection. The complete redesign of the Wasabi Wallet that utilizes WabiSabi was named Wasabi 2.0.
With WabiSabi, instead of having to consolidate inputs to meet a minimum denomination, each input gets registered separately, resulting in no connection between different inputs registered in a coinjoin round. The minimum denomination in the WabiSabi protocol that Wasabi 2.0 uses is only 0.00005000 BTC (5,000 sats), which means that now everyone is able to reclaim their privacy and participate in coinjoins.
The user can register up to 10 inputs and get up to 8 outputs, with randomization. Inputs may be broken down into multiple smaller outputs or consolidated into fewer large outputs, or both.
A large list of 79 predetermined output amounts enables having multiple equal amount outputs of different denominations, without creating a change output.
Even if there is an unequal amount output whose value is close to the other outputs, it is practically impossible to know which input or output it is linked to due to the vast number of possibilities.
Try it yourself: https://wasabiwallet.io
A user may decide to coinjoin multiple times to get better plausible deniability, but one tx can already provide good privacy. No matter how much bitcoin a Wasabi 2.0 user has, they may coinjoin all of their UTXOs into one single tx, often without creating toxic change.
With Wasabi 2.0 coinjoins, there are no deterministic links between input and outputs with the exception of whales, who have much larger inputs than all the other participants’. Additional rounds of coinjoins will easily and entirely reclaim their privacy.
With the WabiSabi coinjoin protocol used in Wasabi Wallet 2.0 a new era of digital privacy has begun. A major design tradeoff of the Bitcoin UTXO model was fixed and fungibility is finally here with interchangeable bitcoin transaction histories.
Change outputs can now be eliminated from coinjoin transactions, which has huge implications for bitcoin wallets in terms of privacy and usability. Bitcoiners using coinjoins don't need to worry about change outputs being a privacy leak or outright liability anymore.
“Toxic change?” you ask. What toxic change? There is no toxic change. Bitcoin is finally fungible and you can reclaim your privacy today with state of the art coinjoins.
Both strategies fall short of user expectations, so there’s only one option left: getting rid of toxic change in coinjoins. Since we cannot spend toxic change from coinjoins privately, we must eliminate it.
No more change.
Having one standard denomination per pool seems inflexible since inputs under the denomination require consolidation and inputs over the denomination create change.
With single-value coinjoins in Wasabi 1.0, JoinMarket & Whirlpool, the problem of toxic change cannot be eradicated. The ZeroLink protocol developed by cryptographers such as nopara73 (npub1qqv…0c3j) , founder of Wasabi Wallet, was not made for multiple values: a redesign was required.
Enter the WabiSabi protocol with arbitrary-amount coinjoins, allowing multiple denominations, which successfully gets rid of the problematic change outputs in single denomination coinjoins. After almost three years of research, the Wasabi team invented a novel way of doing coinjoins by using key-verified anonymous credentials (KVACs) and a specific type of amount organization; maximizing privacy and efficiency while eliminating change outputs.
The new cryptographic protocol was named WabiSabi, which is a Japanese word for finding beauty in imperfection. The complete redesign of the Wasabi Wallet that utilizes WabiSabi was named Wasabi 2.0.
With WabiSabi, instead of having to consolidate inputs to meet a minimum denomination, each input gets registered separately, resulting in no connection between different inputs registered in a coinjoin round. The minimum denomination in the WabiSabi protocol that Wasabi 2.0 uses is only 0.00005000 BTC (5,000 sats), which means that now everyone is able to reclaim their privacy and participate in coinjoins.
The user can register up to 10 inputs and get up to 8 outputs, with randomization. Inputs may be broken down into multiple smaller outputs or consolidated into fewer large outputs, or both.
A large list of 79 predetermined output amounts enables having multiple equal amount outputs of different denominations, without creating a change output.
Even if there is an unequal amount output whose value is close to the other outputs, it is practically impossible to know which input or output it is linked to due to the vast number of possibilities.
Try it yourself: https://wasabiwallet.io
A user may decide to coinjoin multiple times to get better plausible deniability, but one tx can already provide good privacy. No matter how much bitcoin a Wasabi 2.0 user has, they may coinjoin all of their UTXOs into one single tx, often without creating toxic change.
With Wasabi 2.0 coinjoins, there are no deterministic links between input and outputs with the exception of whales, who have much larger inputs than all the other participants’. Additional rounds of coinjoins will easily and entirely reclaim their privacy.
With the WabiSabi coinjoin protocol used in Wasabi Wallet 2.0 a new era of digital privacy has begun. A major design tradeoff of the Bitcoin UTXO model was fixed and fungibility is finally here with interchangeable bitcoin transaction histories.
Change outputs can now be eliminated from coinjoin transactions, which has huge implications for bitcoin wallets in terms of privacy and usability. Bitcoiners using coinjoins don't need to worry about change outputs being a privacy leak or outright liability anymore.
“Toxic change?” you ask. What toxic change? There is no toxic change. Bitcoin is finally fungible and you can reclaim your privacy today with state of the art coinjoins.