cipher trace and chipmixer/wasabi question

[iamnothere12]

I came across this article many of you may have already read:
https://ciphertrace.com/twitter-hack-update-blockchain-analysis-helps-identify-twitter-hackers/

It states at the bottom that "Through proprietary clustering algorithms, Cipher Trace is easily able to identify these mixing services", where it is talking about the hackers using various mixing services (chipmixer and wasabi).  Cipher Trace shows various diagrams, which are not clear to me but are these diagrams showing the flow of funds through the mixing service or is Cipher Trace merely saying they lost the funds after they hit the mixing service?

[ChipMixer]

is Cipher Trace merely saying they lost the funds after they hit the mixing service?

Yes.

ChipMixer chip creation and Wasabi CoinJoin are distinct and easy to recognize.
If you spot Wasabi CoinJoin - you know that [simplified] owner of one of inputs is owner of one of outputs.
If you spot ChipMixer chip creation - you know that owner of one of inputs is owner of some of chips - created in the past or in the future.

[iamnothere12]

Yes.

ChipMixer chip creation and Wasabi CoinJoin are distinct and easy to recognize.
If you spot Wasabi CoinJoin - you know that [simplified] owner of one of inputs is owner of one of outputs.
If you spot ChipMixer chip creation - you know that owner of one of inputs is owner of some of chips - created in the past or in the future.

Guess it does not get any better then hearing from the big man himself.

Thanks

[pooya87]

AFAIK the twitter hackers weren't using any fork of mixing services at all, they were simply receiving the coins in their wallets which then they sent some to their already verified and linked to their identity Coinbase accounts which is why they were easily caught in only 15 days! They even used the same exact Email address for both their exchange accounts and other places they were using! Their IP addresses were also their own without any kind of obfuscation.