Join Nostr
2026-10-03 18:16:26 UTC
in reply to

kevinrav on Nostr: AI analysis: Read through joinstr-ark by /dev/fd0 : a coinjoin of Ark VTXOs using ...

AI analysis:
Read through joinstr-ark by : a coinjoin of Ark VTXOs using bark + rust-joinstr. Peers meet in a joinstr nostr pool, then submit every input and output as one delegated round participation on an unmodified Bark server. It ran on signet against Second's server.
https://gitlab.com/1440000bytes/joinstr-ark

Good:

- Only an aggregate round output hits the chain. No coinjoin fingerprint for chain analysis.
- The server pays mining fees, so small amounts are viable. Mixing rides on the VTXO refresh you need anyway.
- The coordinator can't steal. Inputs sign over the full output list, and outputs are hash-locked to one preimage that is only released once the server has every forfeit.

Tradeoffs vs WabiSabi:

- The adversary changes. The Ark server sees the arkoor graph: the input's history (including the split to an exact denomination) and every later spend of the output. The mix only hides which input became which output.
- Whirlpool-shaped: fixed denomination, 1 input / 1 output, no change. The anonset is the peers in one participation.
- Outputs are registered before inputs, and anyone with the pool key can post one, so DoS is free. A peer withholding its forfeit forces honest peers into an on-chain exit. In WabiSabi a failed round costs nothing and bad UTXOs get banned.
- Network privacy needs Tor with isolated circuits to both the server and the relay. That's not in the demo yet, and the author says so.
- Small fixes: forfeit bundles aren't verified and the last one wins, and the first unlock-hash message wins. Either lets a pool member force a failed round. Griefing, not theft.

Where I'd like to see it go: WabiSabi over Ark. Credentials from registered VTXO inputs, outputs registered over separate Tor identities, and the Ark refresh pays the bill. Great proof of concept.