EDIT: after re-reading my post, i realise i sound a bit harsh... But the way i see it: you payed me a couple bucks to get a review you can actually use to improve your service... Sure i could have said: "everything looks find, your mixer is perfect", but if i did such a thing, you would have payed me to kiss your *ss . Instead, i decided to give a review focussing on the things you NEED to fix, so that the couple bucks you spend on my review will allow you to improve your system... There are many positive points about your mixer, but since everybody can see those, i didn't feel a need to repeat them once again...On friday, i received some test funds, but since i payed a suboptimal fee (slightly less than the recommanded fee), it took the transaction a while to confirm. Today (monday), i noticed i had received the mixed coins...
I have discussed my security concerns in a previous post, especially the MITM by using cloudflare's ssl certificates and the includes of google tracking codes worried me...
That being said, i found the testuse of your mixer pretty straightforeward, i could easily navigate your menu's and i was pleasantly supprised by getting a letter of guarantee signed by you (and not [banned mixer]).
The one thing i noticed:
Including fees, i have spent 0.001962 to make a 0.0015 BTC transaction.
Your exact value and fee calculator told me that a 0.0015 BTC deposit would result in a 0.00128 withdrawal.
When i combine the output values of the two transactions funding my withdrawal address, i get 0.0012795... I know, it's only 0.0000005 BTC (50 satoshi's) less than you promised, but since you already take quite a hefty fee, i think that you should make sure the calculated output value matches the actual output value.... On top of this, splitting the output into two unspent outputs increases the fee i'll have to use to spend both by about 0.0001 BTC compared to spending a single unspent output (at current feerate).
This means that, after spending 0.001962, i'll get the equivalent of 0.0011795
BTC in clean, spendable funds... Thats ~40% less... Offcourse, the main reason for this fee is the fact that you use a percentage based AND fixed fee, and the mining fee is currently pretty high compared to a low input value (and i used 3 inputs for my deposit tx, to it was a tiny bit larger than a "default" tx)... I'm sure the fee is a lot less if you mix bigger values at a time the network fees are more reasonable... But still, ~40%...
I know why you don't allow people to chose the output timeframe, nor the number of outputs, nor the size of the outputs, nor the exact fee... However, i like to feel in controll... Personally i'd like to have some kind of "expert - i know what i'm doing" menu that allowed to to chose the size and number of outputs, the feesize and the delay.
Ending on a (very) positive note: i traced the outputs funding my withdrawal addresses and ended up on a poloniex wallet for one of the outputs, and an unknown wallet holding ~80 BTC after +1000 transactions... This means that your system is telling the truth and the funds are coming from a clean source.
This being said, it does look like you get a big unspent output from a "clean" source, and you keep re-using this unspent output to fund all mixing sessions...
It's like:
unspent output of 3 BTC from a clean source funding your address
unspent output of 3 BTC used to pay first client => 3 BTC in, 2.9 BTC to your change address, 0.1 BTC to your first client
unspent output of 2.9 BTC used to pay second client => 2.9 BTC in, 2.7 BTC to your change address, 0.2 BTC to your second client
unspent output of 2.7 BTC used to pay thirth client => 2.7 BTC in, 2.6 BTC to your change address, 0.1 BTC to your thirth client
unspent output of 2.6 BTC used to pay fourth client => 2.6 BTC in, 2.3 BTC to your change address, 0.3 BTC to your fourth client
The thing is: it will allow me to find other people that used your mixer, since i only have to follow the trace after my own mixing session. This is not a problem, as a matter of fact, it's pretty common to see this kind of behaviour amongst mixers, as a matter of fact, it's the same with chipmixer (if i initiate a mixing session and get my chips, i can now follow other people that used chipmixer).
As for now, i will not use [banned mixer] untill the security flaws have been fixed and you think about the exact fee calculation, but all in all, i'm impressed
Good luck!