Kortik 🇦🇲 on Nostr: The major difference between whirlpool and wasabi is that wasabi is not zerolink and ...
The major difference between whirlpool and wasabi is that wasabi is not zerolink and whirlpool is 100% entropy, so many of the issues with wasabi's mix composition do not apply to whirlpool.
Wasabi made little effort to stop a user from spending the unmixed change with their mixed outputs. In fact it encouraged this with a "select all" button that spends the entirety of the wallet balance, mixed and unmixed in the same tx, which undoes all the mixing. Unmixed change can also reduce user anonymity sets (toxic recall attack) and de-anonymize users without any user feedback.
Dealing with the different mixed TXO amounts is a nightmare, which is why wasabi purposefully made their coin selection deterministic (predictable), which negates the effects of remixing.
Wasabi also has an address reuse problem. Which comes in various flavors, my favorite of which is the kind where a mixed TXO and unmixed TXO are paid to the same address, which automatically de-anonymizes the user. See YouTube video for explainer.
https://youtube.com/watch?v=alcLdBsoDDg
De-anonymizing users with the above issues does not require "compromised XPUBs", which seems to be the only gripe by The Kliq against Samourai.
Whirlpool, being 100% entropy, does not have the problems discussed above.
Wasabi made little effort to stop a user from spending the unmixed change with their mixed outputs. In fact it encouraged this with a "select all" button that spends the entirety of the wallet balance, mixed and unmixed in the same tx, which undoes all the mixing. Unmixed change can also reduce user anonymity sets (toxic recall attack) and de-anonymize users without any user feedback.
Dealing with the different mixed TXO amounts is a nightmare, which is why wasabi purposefully made their coin selection deterministic (predictable), which negates the effects of remixing.
Wasabi also has an address reuse problem. Which comes in various flavors, my favorite of which is the kind where a mixed TXO and unmixed TXO are paid to the same address, which automatically de-anonymizes the user. See YouTube video for explainer.
https://youtube.com/watch?v=alcLdBsoDDg
De-anonymizing users with the above issues does not require "compromised XPUBs", which seems to be the only gripe by The Kliq against Samourai.
Whirlpool, being 100% entropy, does not have the problems discussed above.