I'm the author. You can zap me here.

Thanks to the good work of cashu devs like @calle and lollerfirst it has since been patched, with stable long-term protocol-level fixes coming soon.

#1462352

These results look scammy because one or more 'wrong guesses' were correct answers.

If the mint did not publish their keyset IDs, would a wallet hypothetically still be able to detect this?

No. The mint already publishes keyset IDs which can be accessed using /v1/keys, v1/keysets endpoints. However, its not validated by the wallets and could be changed by the mints.

Have you heard of any cashu wallets that check for such tagging? (I imagine wallet software could alert the user if detected a pattern in denomination or expiry timestamp etc

No.

Bit 5 (0x20): CTV (0/1815 blocks thus far, can't be activated this epoch)

Signaling will begin at the end of this month according to the parameters defined in the activation client.

// Deployment of CTV (BIP-119)
consensus.vDeployments[Consensus::DEPLOYMENT_CTV].bit = 5;
consensus.vDeployments[Consensus::DEPLOYMENT_CTV].nStartTime = 1774809000; // 30 March 2026
consensus.vDeployments[Consensus::DEPLOYMENT_CTV].nTimeout = 1806345000; // 30 March 2027
consensus.vDeployments[Consensus::DEPLOYMENT_CTV].min_activation_height = 1001952; // May 2027
consensus.vDeployments[Consensus::DEPLOYMENT_CTV].threshold = 1815; // 90%
consensus.vDeployments[Consensus::DEPLOYMENT_CTV].period = 2016;

I would be curious to hear from @1440000bytes if I am interpreting his article correctly

Yes.

This is the first time I am reading about dakar. Thanks for sharing the link. Although such analysis won't work for payment pools (with musig+pre-signed txs or covenants).

One thing that gave me some hope is that this software wouldn't necessarily disentangle payjoins.

Payjoin can also reveal the amount transacted, change address etc. if not done correctly. Also it involves different trade-offs in which recipient has to share the UTXOs with the sender.

others see it as the thin end of the wedge that leads to transaction censorship via recursive covenants.

Makes no sense.

Taproot's privacy benefits were universal; CTV's benefits are mostly for infrastructure operators.

This is not true. In fact, CHECKTEMPLATEVERIFY improves coinjoin and privacy.

Re-signed: https://github.com/OpenSats/website/pull/534#issuecomment-3648054384

The last 3 re-signings were done on the 1st day of each month. I would be surprised if @dergigi forgot to do it in November and 12 days have already passed in December as well.

Cashu is custodial trash promoted by clowns.

The bounty is based on their limited budget and not the severity of the vulnerability.

I can't find it on delvingbitcoin.

Learn to appreciate the research, so that others will be motivated to do it when you find problems with an implementation or protocol.

Thanks for adding joinstr :)