Coinjoin: common misconceptions

Learn about bitcoin

Answers to some common misunderstandings and false rumors.

Following four years of research and development, Trezor recently implemented a major privacy feature, coinjoin. We consider this a significant advancement in bitcoin privacy and have been carefully collecting feedback from the bitcoin community to understand the cause for some misunderstandings about our new feature. In this article, we will address the most common questions about coinjoin in Trezor.

What is the architecture of Trezor coinjoin?

To properly address potential concerns, it is important to explain the architecture of Trezor coinjoin. Coinjoin is a collaborative transaction that combines multiple coins from many users into a single supertransaction in order to obfuscate the history and thus achieve greater privacy for the involved users.

For the best user experience and sufficient volume, the coinjoin needs to be centrally organized via a so-called coordinator. Trezor coinjoin uses a coordinator run by the company zkSnacks (the same coordinator that is utilized by the Wasabi Wallet), mostly for the reason that their coinjoins have the highest volume and user participation on the market, which allows us to achieve the best level of privacy.

To learn more about how coinjoin coordination works, see the Twitter thread below:

Wasabi Wallet on Twitter: "Confused about coordinators in a Wasabi Wallet coinjoin? Don't be!A thread on coinjoin coordination 🧵👇1/8 pic.twitter.com/rBH3rDRGc2 / Twitter"

Confused about coordinators in a Wasabi Wallet coinjoin? Don't be!A thread on coinjoin coordination 🧵👇1/8 pic.twitter.com/rBH3rDRGc2

Can Trezor or the coordinator report users to authorities?

No, and not only because we don’t want to, but because we would have nothing to report. The “zk” in zkSnacks stands for “zero knowledge”, and zero is precisely the amount of information the coordinator knows about its users.

Coinjoin runs strictly over the Tor anonymization network and relies on block filters rather than user XPUBs, so there is no way to learn who owns the coins entering the coinjoin. Therefore it’s technically not possible to share any user details with authorities.

To learn more about how zero-knowledge software works, see the Twitter thread below:

Wasabi Wallet on Twitter: "Our website says, "Wasabi Wallet is programmed to be a zero-knowledge software. Developers can't collect any sensitive information about you." How does the software work if it can't collect any information on you?Here's how🧵👇1/11 pic.twitter.com/afbLvAR8RO / Twitter"

Our website says, "Wasabi Wallet is programmed to be a zero-knowledge software. Developers can't collect any sensitive information about you." How does the software work if it can't collect any information on you?Here's how🧵👇1/11 pic.twitter.com/afbLvAR8RO

Can Trezor or the coordinator censor users’ transactions?

No, we cannot censor users’ transactions, as users are always in full control of their private keys and thus able to execute regular bitcoin transactions at will. The only thing the coordinator can do is deny entry to specific coins into a coinjoin, as the coordination of the coinjoin is a centralized service where the coordinator faces potential legal liability and thus reserves a right not to offer its services to coins that the coordinator evaluates as high-risk.

Can Trezor or the coordinator freeze users’ funds?

No, neither Trezor nor the coordinator can freeze users’ funds, as the coinjoin is non-custodial and users always remain in full control of their coins. The worst thing that can happen is that certain coins might get refused by the coordinator from the coinjoin. If that happens, users can still use them to perform regular bitcoin transactions.

Can the coinjoin taint users’ coins?

Coinjoining through the zkSnacks coordinator should mitigate the risk of tainting one’s funds, as coins that could be deemed high-risk are refused from joining the coinjoin. That said, some exchanges may ask further questions when they encounter coins coming from a coinjoin, so we recommend learning about individual exchange policy before depositing coinjoined funds.

Is Trezor cooperating with a chain analytics company?

No, we are not cooperating directly with a chain analytics company. However, coinjoin in Trezor uses a coordinator run by zkSnacks which obtains risk scores of inputs entering the coinjoin from an analytics company. The company learns nothing new in the process, because the risk scores of these inputs have already been assigned by the analytics company earlier, when they were created.

We would like to state that we don’t agree with deplatforming or prosecuting people based on probabilistic analysis, which can often lead to false positives. We want to emphasize that the coordinator provides no new data that could add on to such analysis.

Is coinjoin only for Model T?

Initially yes, but we plan to roll out coinjoin functionality for the Trezor Model One soon.

Privacy is one of Trezor’s core drivers

Privacy, along with security and usability, has always been a driving motivation behind Trezor products. Bitcoin privacy technologies evolve rapidly and we are proud to remain a pioneering force in this space. We understand that coinjoin is a complex topic and welcome discussion of the pros and cons of its various implementations, as long as it is conducted in good faith.

We understand that some might consider using the zkSnacks coordinator as less than ideal for various reasons. However, we still believe that this is the first of many steps in the right direction toward the goal of improving on-chain bitcoin privacy for everyone. Once a reputable coordinator with similar liquidity as the zkSnacks coordinator appears, we will consider it for inclusion.

Coinjoin: common misconceptions was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.