[ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented

[Crypt0knight23]

Hello @ChipMixer
I have just sent you guys an email regarding my session. So far I have more than 16 confirmation on blockchain,
but the mixer part of my session still shows 0.000BTC because your system has somehow not credited me the coins I sent yet.
Can you guys please fix this I need those coins urgently.

[1714231612]

1714231612

[1714231612]

1714231612

[1714231612]

1714231612

[ChipMixer]

.com is currently under DDOS.
.onion v2 is working.

it's not safe to keep using V2 addresses.  At this point it's safer to use clearnet with a VPN for IP masking. 

Using v2 address is better than using VPN.

v2 address has weaker cryptography but it does not mean it is not safe. They are as safe as year ago.
v2 addresses allowed to find all existing v2 addresses. ChipMixer v2 address is public - it does not make ChipMixer v3 address safer.
v2 addresses could be blocked. If ChipMixer v2 address is blocked it does not make it unsafe. Blocking .com address reachable with VPN is more common.

I believe it surely Chipmixer will migrate to v3 before Tor Browser not supporting the v2 address.

We will.

Maybe while he's at it he'll upgrade to SegWit addresses also. 

v3 address is not only change that is coming soon.

I have just sent you guys an email regarding my session. So far I have more than 16 confirmation on blockchain,
but the mixer part of my session still shows 0.000BTC because your system has somehow not credited me the coins I sent yet.
Can you guys please fix this I need those coins urgently.

If you sent us email with your deposit address - it should be solved already.

[bitblox]

.com is currently under DDOS.

Install cloud flare ??
Seems attack still going really sucks

[jackg]

.com is currently under DDOS.

Install cloud flare ??
Seems attack still going really sucks

Installing cloudflare would likely compromise anonymity of anyone who uses them after that (cloud flare would be able to see things like a session token, deposit address and a lot of other information - like the user's individual ip address).

They're a bit of a monopoly too so they likely already sell a lot of data/mine it themselves (CF).

[LoyceV]

Installing cloudflare would likely compromise anonymity of anyone who uses them

Theymos puts it like this:

Cloudflare is very probably an NSA honeypot

[Quickseller]

.com is currently under DDOS.

Install cloud flare ??
Seems attack still going really sucks

Installing cloudflare would likely compromise anonymity of anyone who uses them after that (cloud flare would be able to see things like a session token, deposit address and a lot of other information - like the user's individual ip address).

If I am not mistaken, CF could also see the private key given to the user when the user is ready to withdraw.

Probably not a good idea, IMO

[ranochigo]

Theymos puts it like this

Forum uses cloudflare as well.

It is in effect an MITM with Cloudflare so of course not a great idea. Most (all?) DDOS protection services requires the packets to be routed to them for scrubbing though. Just use the onion address with Tor and you wouldn't have a problem.

[LoyceV]

If I am not mistaken, CF could also see the private key given to the user when the user is ready to withdraw.

Correct. All the more reason not to use them.

Forum uses cloudflare as well.

That was announced in the topic I quoted theymos from. Allow me to quote some more:

With regret, I am (for now) admitting defeat on the DDoS front, and we will soon be using using Cloudflare to protect against DDoS attacks.

I really don't believe in willingly putting a man-in-the-middle in your HTTPS like this

I especially dislike Cloudflare, which I'm almost certain is basically owned by US intelligence agencies.

The Internet is seriously flawed if everyone needs to huddle behind these huge centralized anti-DDoS companies in order to survive...

The security implications are that Cloudflare can read everything you send to or receive from the server, including your cleartext password and any PMs you send or look at.

[BlackHatCoiner]

Excuse me from asking, but did ChipMixer operate without SSL certificate in v2 all that time? I hope we all know that more than half of the exit nodes aren't ran in good faith.

[ranochigo]

Excuse me from asking, but did ChipMixer operate without SSL certificate in v2 all that time? I hope we all know that more than half of the exit nodes aren't ran in good faith.

v2 onion service, or rather onion service in general doesn't pass through exit nodes it is contained within the onion network. The connection is encrypted end-to-end and there is no need for SSL in that case.

You have to use SSL for the clearnet website if you're running it through Tor though I would argue that just using the onion service is far safer.

[BlackHatCoiner]

The connection is encrypted end-to-end and there is no need for SSL in that case.

Oh, didn't know that. So, is ChipMixer's server essentially the exit node?

[LoyceV]

So, is ChipMixer's server essentially the exit node?

No.

[jackg]

The connection is encrypted end-to-end and there is no need for SSL in that case.

Oh, didn't know that. So, is ChipMixer's server essentially the exit node?

It makes them a server pointing to tor.

I'd add onto what ranochingo said because as well as end to end encryption, there's encryption at each hop. Tor used to tell you the number of hops it did (and it used to be 6) each of these would be encrypted and the transit nodes are only able to see the last hop and next hop locations, the encrypted data and nothing else.

The basis of tor imo is Firefox so there's a chance different algorithms might be used.

simple example of encryption
If you can't think of a way this can work, I'd explain it this way:
You transport the number 20, node 2 said their key was 5216 and node one said theirs was 5789 with the end server securely sending the code 562163
You could then transport your 20 in the following steps:
Send the sum of all keys to node 1: 573188
Node 1 subtracts 5789: 567,399
Node 1 sends this new number to node 2
Node 2 then does the same step and gets: 562,183
Node 2 then forwards to the service and the service finally gets: 20

Keys are much more securely sent than this, this is just an easy to explain example.

[Incain Titil]

Hello. Made payment according to the specified details, but did not receive his keys. There are already more than 6 confirmations, but there are still no keys. I have unsubscribed to support from this e-mail AlecksManfliest8241@protonmail.com. Please check my request

[ChipMixer]

Chipmixer . com is under DDOS attack and phishing attack. Do not use .com right now. .onion is still safe.
We will provide more details soon.

[ChipMixer]

Chipmixer . com is under DDOS attack and phishing attack. Do not use .com right now. .onion is still safe.
We will provide more details soon.

DDOS is now constant for many days and it will not stop. Google noticed that our service is offline and removed it from their results. If you search for "chipmixer" you will see only phishing links. If you send Bitcoins into their deposit addressess - your money is used to continue DDOS attack.

We can give up and use Cloudflare to protect from DDOS. This will make some of our traffic visible to entity that watches 20% of internet traffic. Or we can use it to announce we have moved into Tor permanent. Either way there will be changes and we do not like them.

Tor access is working normal. We are testing new v3 address. Some of you have received beta test link. Onion v3 will be public soon.

[LoyceV]

DDOS is now constant for many days and it will not stop. Google noticed that our service is offline and removed it from their results. If you search for "chipmixer" you will see only phishing links.

I've reported two of the phishing sites to Google (again), but based on past experiences I don't expect them to act any time soon. Google offers a great service for phishing sites

We can give up and use Cloudflare to protect from DDOS. This will make some of our traffic visible to entity that watches 20% of internet traffic. Or we can use it to announce we have moved into Tor permanent. Either way there will be changes and we do not like them.

For privacy, it would be best to ask all ChipMixer users to install Tor Browser. I have no idea what percentage of users uses it already, but for whoever doesn't use it yet: it's amazingly easy! If you haven't tried it yet, I recommend to at least download and try Tor browser.

Allow me to quote theymos on Cloudflare:

The Internet is seriously flawed if everyone needs to huddle behind these huge centralized anti-DDoS companies in order to survive...

Cloudflare is very probably an NSA honeypot

[dkbit98]

DDOS is now constant for many days and it will not stop. Google noticed that our service is offline and removed it from their results. If you search for "chipmixer" you will see only phishing links. If you send Bitcoins into their deposit addressess - your money is used to continue DDOS attack.

It looks like that we entered Cyber Attack pandemic like it was announced earlier, and I see constant attacks on everything Bitcoin related, including Chipmixer and Bitcoin.org website.

I think that better strategy is to totally close clearnet version and switch to TOR version or add some other alternative way to access Chipmixer service, maybe directly with some wallet or extension.

I've reported two of the phishing sites to Google (again), but based on past experiences I don't expect them to act any time soon. Google offers a great service for phishing sites

I reported phishing websites many times to google and I also didn't saw them react properly and that also applies to their service youtube, not to mention heavy censorship they are doing right now.

[mocacinno]

I personally think that putting chipmixer behind cloudflare wouldn't be good for chipmixer's reputation... However, putting a landing page behind cloudflare might actually work...
I mean, by keeping chipmixer.com online behind cloudflare, you give less opportunity to fake phising sites... But you can't put the actual mixer behind cloudflare... So the "best case" sollution would be to use chipmixer.com as cloudflare-protected anti-DDos portal to educate people on how to visit chipmixer on tor v3.

I'm actually kind of sad to see the current state of DDos'ing... I use my company's laptop 90% of the time, and i'm not allowed to install the tor browser (blacklisted due to company policy). I did beta test using my cellphone, it works great tough... Good job

[BlackHatCoiner]

Can someone give me an article, or explain, why the Tor's website can't be DDoS-ed same like clearnet's is?