Hi everyone, <br /><br />Sometimes we are curious and want to know about UTXOs in other wallets. Payjoin allows you to do this and the recipient would never doubt it because it's a privacy tool. It's possible to find UTXO in recipient's wallet without sending any bitcoin. It's called UTXO probing attack and described in BIP 77-78.<br /><br />I have shared a demo with all the details in this [post][0]. I have used bullbitcoin wallet for testing this because it was the only [wallet][1] which supports payjoin v2 (send, receive) and testnet3.<br /><br />I think users should be aware of this tradeoff and the information they share with the sender in payjoin. Payjoin should only be used with trusted senders.<br /><br />[0]: <a href="https://uncensoredtech.substack.com/p/utxo-probing-attack-using-payjoin">https://uncensoredtech.substack.com/p/utxo-probing-attack-using-payjoin</a><br />[1]: <a href="https://en.bitcoin.it/wiki/PayJoin_adoption">https://en.bitcoin.it/wiki/PayJoin_adoption</a><br /><br />/dev/fd0<br />floppy disk guy

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &quot;Bitcoin Development Mailing List&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="mailto:bitcoindev+unsubscribe@googlegroups.com">bitcoindev+unsubscribe@googlegroups.com</a>.<br />
To view this discussion visit <a href="https://groups.google.com/d/msgid/bitcoindev/450755f1-84c5-4f32-abe0-67087ae884d6n%40googlegroups.com?utm_medium=email&utm_source=footer">https://groups.google.com/d/msgid/bitcoindev/450755f1-84c5-4f32-abe0-67087ae884d6n%40googlegroups.com</a>.<br />