How is my XMR opsec? : Monero | Torhoo darknet markets
I buy BTC from Cashapp. I transfer BTC to Cake Wallet in BTC. I convert the BTC to XMR into my 2nd Cake Wallet.
I've seen people go through more hoops. As long as I convert my BTC to XMR and shop exclusively with XMR would that be okay? I thought XMR was anonymous and untraceable. If so why are people converting XMR to XMR and stuff using Feather Wallet, etc.?
Why go through multiple hops that are PROVEN TO BE TRACKABLE, when instead you could go through two hops that have NEVER been proven to track a single transaction so far, but multiple hops would almost certainly increase the difficulty by orders of magnitude? You on drugs?
There's a (rare) Monero weakness called an "Eve-Alice-Eve" attack, where your transactions can be somewhat de-anonymized if the source of your XMR colludes with the destination of the same coins, i.e. if you use Trocador exchange in Cake to swap BTC for Monero, and then you send that Monero from your wallet to a DNM who happens to be compromised by LE and working with Trocador.
As you can imagine, it's pretty unlikely. But it's easily avoided by simply adding one extra XMR hop: when your receive Monero from the swap service, send that monero from your first address to a second wallet address that you own. Then send it to the final destination. Problem solved. (Also, an upcoming Monero upgrade called Full Chain Membership Proofs should nullify the E-A-E attack if I understand correctly).
More of an issue is that the original bitcoin is tied to your identity. If someone happened to be "keeping an eye on you" then you're being tied to a bitcoin transaction that gets swapped for XMR. On principle, we all [should] have the right to transact privately, and LE should go fuck themselves instead of targeting Monero users. The stigma around using privacy tools is bullshit, but nevertheless, the stigma is real. So, personally, I don't ever want my identity tied to the bitcoin that I swap for Monero. KYC has all sort of negative side effects, besides just opsec for illegal transactions. KYC exchanges will always get hacked, and the names/residences/bitcoin addresses of the users will be compiled and sold on the darknet, for some asshole here to buy.
With your contact info, they will try to scam you. "Your CashApp account has an issue, please send your coins to this address" etc etc... With your residential address, someone can show up for a wrench attack. (Look into the *recent* story of someone in NYC being tortured in a SoHo condo, or hotel or something, because it was known that he held bitcoin). Buy your bitcoin on Hodl Hodl, Bisque, RoboSats, or Peach. Then swap those coins for XMR. Send XMR to your second monero wallet. Spend coins. Problem (a much more common problem) solved.