When are we going to fix coinjoins? 😀 This needs funding We need a very high quality BIP for a *protocol* such that even the coordinator doesn't know which inputs correspond to which outputs. And then we need at least one high quality fully-open-source implementation of this. Peter Todd did an interesting piece on this topic. With blinded signatures (i.e. the cryptographic tech in Cashu) it is possible to keep the coordinator in the dark In that context, it would be fine if there was just one main coordinator that is responsible for the vast majority of coinjoins. That would allow the typical Bitcoin block to just be one big coinjoin. If the protocol doesn't require *trust* in the coordinator, then we can simply choose the most 'reliable' coordinator, where reliable simply means that it's online and doesn't rotate their keyset too often

How Good Are The Widely Used Coinjoin Implementations?

I was asked by Kruw to analyze and respond to Yuval“nothingmuch” Kogman’s post1 on centralized,coordinator-based, deanonymization attacks. I...

@Peter Todd