Breaking Wasabi and Automated Wallets
summary
Wasabi’s automated decision-making can break privacy and bleed funds: a remix-requeue heuristic that detects “coinjoin-like” transactions makes a wallet reopen and queue outputs together, letting an attacker construct a coinjoin with 0.1 BTC denomination outputs to link two identities (requires the wallet unlocked and costs roughly one round ≈ 0.1 BTC to set up). A separate attack inflates fees by adding many sybils — hypothetically 10000 fake participants or by increasing the round denomination — extracting several BTC from honest users. Fixes: client-side caps, disable automatic remix, separate accounts.
AI-written summary · about
chapters (6)
- 0:00Start
- 1:18COINJOIN PRIMER
- 3:48WASABI PRIMER
- 6:57AUTOMATED WALLETS
- 8:58REMIX ATTACKS
- 20:12COORDINATOR FEE ATTACK
related talks
15mHow To Make Privacy Convenient
27mThe Latest in Wasabi Wallet
15mTowards Better Privacy Reasoning
30mThe Battle For Privacy: Free Samourai
17mThe Hidden Danger in Financial Transactions
01h 02mThe Bitcoin Privacy Debate
15mThis Researcher Has a Plan to Put Privacy in Every Bitcoin Wallet
32mWallets Need to be Smarter