Wasabi Wallet - Open Source, Noncustodial Coinjoin Software

[BlackHatCoiner]

That's probably the malicious coordinator: https://bitcointalk.org/index.php?topic=5499439.msg64308723#msg64308723.

Why can't the client, by default, not allow joining a coordinator with these ridiculous settings?

[dkbit98]

Why can't the client, by default, not allow joining a coordinator with these ridiculous settings?

One Wasabi developer Lucas posted that one Wasabi release was replaced with fake installer and they are investigating issue.
I would recommend everyone to STOP using Wasabi wallet and all coordinators asap or you could lose your coins.
https://x.com/lontivero/status/1810835747324448989

BinaryWatch also confirmed that Wasabi Wasabi-2.0.8.1 had checksum changed!
This is a good reminder why we need to always verify release when we download latest version of software.

🚨💣🚨 1720569731: Wasabi-2.0.8.1.msi -> Checksum changed! e10c4bc3ed4306cc6e499e64eca4fadb051f335710e3c6e40ce1354061e1768f (calculated) 1d112fa7db1f17a2bbb39bbf8bb30aa758baa425ad7e4248e71c2bd13fec6797 (stored)

https://x.com/BinaryWatchBot/status/1810826829940326846

And STOP using Kruw centralized coordinator hypocrite who is doing money laundering scam!

Kruw centralized coordinator crap appears to be directly connected with scammer who hacked several exchanges MEXC, Gate, Binance, Kraken, OKX, HTX, HitBTC, etc.
This is direct money laundering and now we can say that Kruw is also a scammer and criminal, and that is much worse than all his unproved scam accusations against bitcointalk members.
We also found out that many of wasabi centralized coordinators are just another way of attack on bitcoin users.

wabisabi coinjoin tx:
https://mempool.space/tx/538a97650fc877efcaf55fd36d8e06a675873284a160efbaf59c60f7880ae750

kruw coordinator used:
https://wasabist.io/8/95e809d3c00fd3beaddef141b021ddaab64dbf23f3a74035a5b983f8894cf77c

Source:
https://x.com/1440000bytes/status/1810923857584242755

[examplens]

One Wasabi developer Lucas posted that one Wasabi release was replaced with fake installer and they are investigating issue.
I would recommend everyone to STOP using Wasabi wallet and all coordinators asap or you could lose your coins.

Well, this escalated quickly.
Wasabi has just announced a new release 2.1.0, with an indication that everyone using coordinators should do a mandatory update.

- Advanced send workflow with coin control
- Coordinator Connection String
- Security improvements
- New look for the website

Full release notes & Download: https://github.com/WalletWasabi/WalletWasabi/releases/tag/v2.1.0.0

https://x.com/wasabiwallet/status/1811035230947402177

[Kruw]

That's probably the malicious coordinator: https://bitcointalk.org/index.php?topic=5499439.msg64308723#msg64308723.

Why can't the client, by default, not allow joining a coordinator with these ridiculous settings?

The new version now sets a default minimum input count of 21.

If a coordinator is running many rounds in parallel with low minimum input counts/fast input registration timeouts, you should already be avoiding them altogether since their config isn't making good use of scarce block space.

I suppose I should take the opportunity to repeat this advice as well.

[JollyGood]

Regardless of what any of us might think about WasabiWallet and their use of blockchain analysis, they were very fast of the mark with this update almost as soon as they discovered the exploit. I suppose that shows the determination on their part to not let unscrupulous co-ordinators steal from clients that opted to use their wallet rather than an alternative.

 

Well, this escalated quickly.Wasabi has just announced a new release 2.1.0, with an indication that everyone using coordinators should do a mandatory update.