We could do it in such a way that receiving and sending in and out of Nostr is harder if that is the problem. So, once in, the money stays rotating between nostr keys in an identifiable way like what zaps do. Then in the end, it leaves via a mixing service for instance. Anyway, lots to work yet.

Replies (1)

Yes you probably can and if it's possibly it should be done right from the beginning. The current proposal (or implementation) is basically powerful metadata leakage and deterministic address derivation removes the user’s ability to compartmentalise identities. It may be a convenient approach UX-wise, but from an OPSEC perspective it’s pretty aggressive. Some users may not even realise they are creating a permanent public financial endpoint just by existing on the network. And this is before we even dive down the UTXO and consolidation rabbit hole. With the current approach Every public interaction potentially becomes chain-analysis metadata Every zap can help cluster identities Anyone can monitor balances, flows, spending timing, consolidation patterns Counterparties become graphable Future spending can leak wallet structure and habits Then, once the UTXO's get consolidated or moved it all turns into potential correlation points and if someone receives enough on-chain zaps and if fees evolve the entire thing becomes economically unsustainable.