[ANN] BitMixList.org - Bitcoin Mixer List [Unofficial Thread]

[examplens]

How the heck did they lose money, and why didn't they post any information about that?
I think they started this fake exchange with intention to scam people or they are just a bunch of amateurs who don't anything about exchanges.
Investor's financial difficulties sounds like a BS to me.

I got the impression that they started the whole project with a relatively small supply of working capital. Maybe they had promises from an investor that they would invest when they were operational, but considering that they had been developing the platform for months, many things could have changed in the meantime.

The reason why I think like this, at one point I tried to create an exchange order with them, and at that point, the maximum possible amount of Bitcoin was around 0.06. Which is quite a bit for this kind of business.

[Freemind]

Someone forked Wasabi wallet and created Ginger wallet, but there is no download links available yet:
https://gingerwallet.io/
https://github.com/GingerPrivacy

Here is a thread about Ginger Wallet, one of the developers is on the forum. Downloads have been available since yesterday: ✅ Ginger Wallet: Enjoy seamless Coinjoin integration.

How the heck did they lose money, and why didn't they post any information about that?
I think they started this fake exchange with intention to scam people or they are just a bunch of amateurs who don't anything about exchanges.
Investor's financial difficulties sounds like a BS to me.

I haven't had much time to read more information about ZeusMEX, and I don't understand how a business can fail before starting to offer services, at least to a large number of users. I rule out possible problems with the regulations based on what I have read in this thread, and the excuse of “financial losses” sounds to me like someone wants to run away and disappear. It seems they wanted to create a fake exchange, at least I don't see any other options considering how quickly everything has happened.

[examplens]

Here is a thread about Ginger Wallet, one of the developers is on the forum. Downloads have been available since yesterday: ✅ Ginger Wallet: Enjoy seamless Coinjoin integration.

Did you just open a thread for them or are you somehow involved in the whole project?

I haven't had much time to read more information about ZeusMEX, and I don't understand how a business can fail before starting to offer services, at least to a large number of users. I rule out possible problems with the regulations based on what I have read in this thread, and the excuse of “financial losses” sounds to me like someone wants to run away and disappear. It seems they wanted to create a fake exchange, at least I don't see any other options considering how quickly everything has happened.

There are countless businesses that ended before they started. It's one thing to have everything on paper and in production, and it's quite another when it needs to become operational.
I would still say that if someone wanted to "run away and disappear" they certainly wouldn't do it at the very beginning.

[Freemind]

Did you just open a thread for them or are you somehow involved in the whole project?

At the moment I have opened the thread so that Ginger Wallet has some kind of presence in the forum, then we will see how things go.

There are countless businesses that ended before they started. It's one thing to have everything on paper and in production, and it's quite another when it needs to become operational.
I would still say that if someone wanted to "run away and disappear" they certainly wouldn't do it at the very beginning.

What I don't understand is the short time it took to fail, although I don't know exactly what the problem was, beyond the financial losses that I have read. I would like to know more details, but I don't know if anyone will give more information or not.

[examplens]

What I don't understand is the short time it took to fail, although I don't know exactly what the problem was, beyond the financial losses that I have read. I would like to know more details, but I don't know if anyone will give more information or not.

From what I understood, the zeusimix.com domain was registered in November 2023, so at least 6 months of platform development. In June '24, they presented themselves publicly, understood the suggestions, and changed the domain from zeusmix to zeusmex. Everything is operational, but with very small reserves of funds, probably the funds were designated only for the purpose of testing.
The investor who promised to provide enough reserves has changed his mind compared to November (for whatever reasons). Developers and the team that participated in the creation of the platform do not want to be investors, so closing is the only choice.
This is probably the best solution and carries the least risk, than, for example, after 6 months of business.

[Freemind]

From what I understood, the zeusimix.com domain was registered in November 2023, so at least 6 months of platform development. In June '24, they presented themselves publicly, understood the suggestions, and changed the domain from zeusmix to zeusmex. Everything is operational, but with very small reserves of funds, probably the funds were designated only for the purpose of testing.
The investor who promised to provide enough reserves has changed his mind compared to November (for whatever reasons). Developers and the team that participated in the creation of the platform do not want to be investors, so closing is the only choice.
This is probably the best solution and carries the least risk, than, for example, after 6 months of business.

I can understand that at the last minute they changed the domain name from mix to mex, although the service they were going to offer had nothing to do with mixers, which unfortunately shows that the pressure and harassment that mixers are suffering is being effective. If they had looked for other investors, maybe they would have had more luck and the service could be working now, but from the outside the problems are always simpler, so I guess they did what was best for them without getting into any complications.

Thanks for the info.

[NotATether]

I can understand that at the last minute they changed the domain name from mix to mex, although the service they were going to offer had nothing to do with mixers, which unfortunately shows that the pressure and harassment that mixers are suffering is being effective. If they had looked for other investors, maybe they would have had more luck and the service could be working now, but from the outside the problems are always simpler, so I guess they did what was best for them without getting into any complications.

Wouldn't have really bothered me if they kept the old name to be honest. I have seen websites without anything looking like "mix" in the name get banned for being mixers. I think people are just attaching too much importance  to the naming and stuff.

Still feel kind of gutted that the site crashed and burned right after I listed them though

[Freemind]

Wouldn't have really bothered me if they kept the old name to be honest. I have seen websites without anything looking like "mix" in the name get banned for being mixers. I think people are just attaching too much importance  to the naming and stuff.

Still feel kind of gutted that the site crashed and burned right after I listed them though

I agree that it is possible that people are giving too much importance to that, but "the fear" that has been created by the authorities of some country makes people think about it a lot, that is why they prefer not have anything related to "mix" in the domain name. It is a shame what has happened, but maybe it is better to do it now than to regret it in a few months with more economic losses and possible customers dissatisfied with the service. It has always been said that sometimes going backwards is a victory.

[dkbit98]

Wouldn't have really bothered me if they kept the old name to be honest. I have seen websites without anything looking like "mix" in the name get banned for being mixers. I think people are just attaching too much importance  to the naming and stuff.

Don't your website also has word a MIX in domain name?
You have a mix of exchanges, wallets, services and mixers listed there, but you are not actually a mixer service.
And your topic is allowed without a problem in bitcointalk forum.
People can be silly sometimes.

I found another suspicious MIX item 

[NotATether]

New update pushed!

I was requested to add Wasabi coordinators in addition to the list of mixers and exchanges, so I am proud to announce that there is now a list of Wasabi coordinators too.

These listings are powered by Wabisator, and the coordinator configurations redirect to their website because they display it better than any way I can think of at the moment.

I have also added some extra information about the mixing process.

[dkbit98]

I was requested to add Wasabi coordinators in addition to the list of mixers and exchanges, so I am proud to announce that there is now a list of Wasabi coordinators too.

I am not sure if you can do that, but I think you should add more information about this coordinators related with censorship of transactions.
I heard some of them removed all restrictions and some of them kept original model from Wasabi wallet zkSNACKs that didn't allow coinjoin for coins connected with blacklisted addresses.

[NotATether]

(posting here as Bitcointalk does not allow linking to mixers)

After doing some investigation, I was able to independently verify these claims.

I am not sure whether these are allowed to be posted in this section of the forum or if they should go into investigations, but given that there is no sensitive data being shared beyond what was already posted on this thread (ages ago), I think this will be all right. But anyway:

Among other things, user grozdniyandy reported that the YoMix domain was on the same IP address with some other mixer domains, including digital ones (from which we can conclude that they belong to the same person). A little more than 2 weeks later, the same user reported that YoMix had changed the server.

https://bitcointalk.org/index.php?topic=5477452.msg63892572#msg63892572 <--- on bitcointalk

Proof: Go here -

Code: [Select]

https://search.censys.io/hosts/79.124.40.25/data/table?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=yomix.io&at_time=2024-07-04T06%3A50%3A29.175Z#8081-TCP-HTTP
Scroll up and on the top right click Raw Data > JSON

or go directly to

Code: [Select]

https://search.censys.io/hosts/79.124.40.25/data/json?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=yomix.io&at_time=2024-07-04T06%3A50%3A29.175Z
Interestingly when you search for the YoMix domain in Censys, it shows this IP address, the one for DDoS-Guard (their CDN), and a third IP address that is for a blog website that will be relevant for later.

In Censys you can find the port number allegedly used here just by Ctrl-F Find in your browser and searching for the domain name. Here you can also find all of the other shady sites running on this server, but only one of them looks exactly like the YoMix website.

At first, it may not look like they are identical. When you go to both the website on that weird-looking server and the official website and you make an order on both of them like this:

http://79.124.40.25:8081/order/view/2BZ2-L2XN-VSFC-E67T
https://yomix.io/en/order/view/9rVW-2PqB-pCDo-6541

Now try to switch the order IDs. It will say the order doesn't exist. So the order software appears to have been replicated by this other server.

...but the YoMix API software is not publicly available, it is not even on hacker forums like XSS (otherwise people like icopress who can access the forum would know about it).

Another thing that at first glance might indicate they are unrelated are the letters of guarantee:

Code: [Select]

-----BEGIN BITCOIN SIGNED MESSAGE----- We (YoMix.IO) have generated the bitcoin deposit address bc1qlqj80vzxntreuzr4zjhcx65jn7rzq8zdnpllcl at 2024-07-04 11:04:30.597031 for the mixing order with id 2BZ2-L2XN-VSFC-E67T. The output address(es) are the following: 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa. Our fee is 2.386% and 3150 BTC mining fee per output address. This mixing order is valid from 2024-07-04 11:04:30.597031 until 2024-05-28 16:22:40.923084 (if will not be extended) for amounts above or equal 0.001 BTC. -----BEGIN SIGNATURE----- HGvHlBLsEGD072ktbo2Yz+n13VChrHKUJ46OmBqdbHMiBP13h4fz5NyuQ0XkU9/H+4fkwryaD+nZnJaOU9S2ojc= -----END BITCOIN SIGNED MESSAGE-----

Code: [Select]

-----BEGIN BITCOIN SIGNED MESSAGE-----
We (YoMix.IO) have generated the bitcoin deposit address bc1qxr3fqywxes9t6ejmaqnkdftllzageqahr5wt0f at 2024-07-04T11:04:24+00:00 for the mixing order with id 9rVW-2PqB-pCDo-6541. The output address(es) are the following: 100% of deposit amount to 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa after 70 h. 53 m.. Our fee is 4.405% and 0.0000744 BTC mining fee per output address. This mixing order is valid from 2024-07-04T11:04:24+00:00 until 2024-07-07T11:04:24+00:00 (if will not be extended) for amounts above or equal 0.001 BTC.
-----BEGIN SIGNATURE-----
HFil1mK7g5tGF7dcKSsjqoFneqM/vk1vj1/msY+1PZbZGrE+oYcNwZNC0sdQidxNAUMSFcBvnbMFmX4Nc/uZz5Q=
-----END BITCOIN SIGNED MESSAGE-----
But when you verify them at https://brainwalletx.github.io or with any sign/verify message tool:




So all the signs maybe point to these sites being operated by different people, right? Wrong.

Remember that third IP address that came in the Censys results? Well it turns out that it is the IP address for this blog:

Code: [Select]

https://rainorshinepdx.com/
I do not trust the contents of this blog, so I put it in code tags.

But inside the blog, there are a bunch of articles, one of which is about using Bitcoin mixers. Quite surprisingly, they all link to YoMix.

The kicker here is that this website appears to have been either hacked or using a second-hand domain, because up until 2023, it was showing a website for a coffee house: https://web.archive.org/web/20220314182228/https://www.rainorshinepdx.com/

Interestingly, that seems to align with when YoMix was first started which was around January 2023. It seems far more likely that this website was hacked, because you know, why would someone buy a random domain to write a vaporware blog with?

Remember, these sites were all linked together by Censys with a search of the yomix domain name.

So why would someone use keyword stuffing to link only to the YoMix website, in a bitcoin mixer article that doesn't mention any by name, on a hacked website?

Why would YoMix run a counterfeit site of their own mixer to scam people with?

To be honest, I don't know the answers to these questions. But I do know that the other sites like Blender, Sinbad, etc are run by the same people who have access to the YoMix.io website (but not tornado cash - let's remind ourselves that tornado cash was an open source project with real faces, so these yomix people must have ripped them off).

Please, stay safe, and do not use mixers that are obviously ran by criminals in violation of sanctions. You will lose your money, and other bad things might happen to you.

[NotATether]

Please, stay safe, and do not use mixers that are obviously ran by criminals in violation of sanctions. You will lose your money, and other bad things might happen to you.

Follow up to this - I was motivated to publish on the website, among other things, a letter of guarantee verification tool.

Important to note that this works completely locally and does not send any data to my servers, for privacy purposes.

All major mixers are supported, but RoyalMix has a bug in the letter generation so I wasn't able to implement it yet, however once they address this I will eagerly implement this.

Whirto has no letter system.

Also there is a dark mode, new logo, et al.

Stay safe everyone!

[dkbit98]

Follow up to this - I was motivated to publish on the website, among other things, a letter of guarantee verification tool.

Nice and useful tool, but is there no way to make it work without Javascript?
And can we use it for any custom mixer that is not listed on website?

Important to note that this works completely locally and does not send any data to my servers, for privacy purposes.

So that means that we can in theory check letter of guarantee even offline, without connecting to the internet?

[NotATether]

Important to note that this works completely locally and does not send any data to my servers, for privacy purposes.

So that means that we can in theory check letter of guarantee even offline, without connecting to the internet?

Yes, you can!

No theory here, it's all practical. As long as you have opened the page, or downloaded it (as a complete .htm file or with wget or something like that), then you are able to use the verification tool at any time.