About 14 minutes with practice. You only need something to take notes with. No real wallet details or payments are part of this lesson.
Course contents · Lesson 7 of 21
- Threat model before tools · Marked complete
- Design a custody architecture · Marked complete
- Entropy, mnemonics and passphrase tradeoffs · Marked complete
- Hardware signing and trusted displays · Marked complete
- Multisig and independent control · Marked complete
- Recovery and continuity across people · Marked complete
- Coin control and privacy tradeoffs · Marked complete
- Lightning operations and recovery · Marked complete
- Payment operations and reconciliation · Marked complete
- Native bitcoin and wrapped claims · Marked complete
- USDC, reserves and redemption · Marked complete
- Identify a Morpho market precisely · Marked complete
- Oracles, prices and measurement risk · Marked complete
- LTV, liquidation and nonlinear losses · Marked complete
- Variable rates and growing debt · Marked complete
- Vaults, allocation and exit liquidity · Marked complete
- Arc, Base and cross-chain dependencies · Marked complete
- Allowances, signing and simulation · Marked complete
- Treasury accounting and restricted funds · Marked complete
- Incident response with clear human authority · Marked complete
- Capstone: a defensible treasury design · Marked complete
What you will learn
- Explain a privacy cost of combining inputs.
- Compare fee efficiency with data minimization.
Inputs tell a story
When a wallet combines outputs from different sources in one transaction, observers may infer relationships among them. Such heuristics are not perfect, but they can reveal more than a user intended. Address reuse, published receipts and third-party balance queries can add further links. Privacy is a system property involving both chain data and surrounding information.
Coin control exposes a choice
Some wallets let an operator choose which outputs to spend. That can support accounting separation or privacy goals, but introduces decisions about fees, change and operational complexity. Avoid universal rules such as always consolidate or never combine. The right analysis begins with the purpose, threat model and constraints of a specific situation.
Keep accounting separate from unnecessary publication
A community can preserve internal source-of-funds records without publishing every donor-to-expense relationship. A researcher should receive the minimum data needed for reconciliation. Exporting an xpub to a convenient service can expose a much wider history than one address lookup. This lesson does not provide a privacy guarantee or ask you to reorganize real funds; use labeled fictional outputs to reason about what a transaction reveals.
Practice on paper
A mock wallet has one output publicly tied to a fundraiser and one from a private artist sale. What new inference might arise if they are spent together?
Reveal the worked answer
An observer may associate the sources with a common spending controller. The inference is not absolute proof of identity, but the transaction can reduce separation between previously distinct contexts.
Check your understanding
Choose an answer in your head or on paper, then reveal the explanation. Retry whenever you like. Answers are not submitted or scored; completion marks are your own learning notes.
1. Does a new receiving address alone guarantee privacy?
- Yes
- No
Reveal answer 1
No. Later transactions and external disclosures can connect activity.
2. Can a watch-only export expose broad history?
- Yes
- No
Reveal answer 2
Yes. Its scope may include many derived addresses.
Take this with you
Evaluate what construction and disclosure reveal together.
Your learning, at your pace
Read every lesson freely. Optional progress tracking needs JavaScript and browser storage; it does not require an account or wallet.
Remove the saved completion marks for this course on this browser? Other courses will stay unchanged.
Saved only in this browser for this website address. Clearing storage, changing device or using a different gateway may lose these marks. No sync, grading or credential; nothing is sent to us. The export is a record for you, not a file this site can import.