You are fully trusting the coordinator with your privacy when using Whirpool (Samourai). Here are some practical attacks with a PoC.

Gist

Whirlpool blind-signing-key tagging: a working PoC

Whirlpool blind-signing-key tagging: a working PoC - whirlpool_tagging.md