• DeWhirlpooler - Whirlpool Privacy Visualizer
  • What it does
  • Key findings
  • Technical details
  • How to use
  • Why this matters

§DeWhirlpooler - Whirlpool Privacy Visualizer

I built a tool that visualizes how Whirlpool coinjoin transactions leak your privacy.

§What it does

Enter any Bitcoin address or transaction ID. The tool will:

1. Fetch transaction data from mempool.space API
2. Detect Whirlpool tx0, coinjoin, or regular spend patterns
3. Identify change outputs that link back to your identity
4. Generate a flow diagram showing input-output relationships
5. Calculate a privacy score (0-100)
6. List all linked addresses

§Key findings

• Whirlpool tx0 ALWAYS reveals common input ownership
• Every change output is traceable back to the original user
• The coordinator knows your xpub (all your addresses)
• CoinJoin does NOT provide privacy against the coordinator

§Technical details

• Single HTML file, zero dependencies
• Uses mempool.space public API (no Bitcoin node required)
• No backend, no tracking
• Works in any modern browser

§How to use

1. Save the tool as index.html
2. Open in a browser
3. Enter any Bitcoin transaction ID or address
4. See the privacy leaks visualized

§Why this matters

Whirlpool is dead (Samourai Wallet shut down by feds), but Ashigaru continues the same flawed design. Users deserve to see how their privacy is being leaked.

The tool was submitted for the 500K sats bounty on Stacker News.

Lightning address: solauditor@stacker.news