Consolidation Patterns
Consolidation occurs when multiple UTXOs are combined into fewer outputs. This is one of the most damaging patterns for Bitcoin privacy because it publicly links all input addresses via the Common Input Ownership Heuristic.
Types of Consolidation
Fan-In (Consolidation)
A transaction with 3 or more inputs and exactly 1 output. This reveals the entire UTXO set being consolidated, linking all input addresses via CIOH.
Severity scales with input count: - 3-5 inputs: Moderate exposure - 6-9 inputs: High exposure - 10+ inputs: Critical exposure
Cross-Type Consolidation
A fan-in transaction combining UTXOs from different script types (e.g., P2PKH + P2WPKH). This links addresses from different wallet generations, revealing a long history of address ownership.
This is especially harmful because it links addresses that might otherwise appear unrelated due to different script types.
Fan-Out (Batching)
A transaction with 1 input and 5 or more outputs. Common in exchange batch withdrawals where multiple customer withdrawals are combined. This is an informational signal.
I/O Ratio Anomaly
A transaction with 5 or more inputs and exactly 2 outputs. Reveals consolidation behavior merged with a payment, exposing more of the wallet's UTXO set than necessary.
Why Consolidation Is Damaging
Consolidation transactions are among the most damaging patterns for privacy. A single consolidation links every input address to the same entity with certainty, giving adversaries a complete view of the wallet's UTXO history.
Cross-type consolidation is especially harmful because it links addresses that might otherwise appear unrelated due to different script types.
How to Defend Against Consolidation
Consolidate During High-Fee Periods
When the cost of linking is offset by fee savings, consolidation becomes more economically rational.
Use CoinJoin-Based Consolidation
Whirlpool or WabiSabi can consolidate UTXOs while breaking the CIOH link.
Consolidate Only Already-Linked UTXOs
If UTXOs are already linked (from the same source), consolidating them does not create new links.
Avoid Cross-Type Consolidation Entirely
Never combine UTXOs from different script types in a single transaction.
Post-Mix Consolidation
The Single Most Damaging Mistake
Spending 2 or more outputs from different CoinJoin transactions in a single non-CoinJoin transaction. This re-links UTXOs via CIOH, completely destroying the anonymity set gained from mixing.
Post-mix consolidation is the single most damaging mistake a CoinJoin user can make. The entire purpose of CoinJoin is to break deterministic links between inputs and outputs. When a user takes outputs from separate CoinJoin rounds and spends them together, CIOH re-links those outputs to the same entity, undoing the mixing entirely.
An adversary can then trace backward through each CoinJoin to the pre-mix inputs, collapsing the anonymity set to 1.
How to defend: Never spend outputs from different CoinJoin rounds in the same transaction. Use each post-mix UTXO independently.
References
- Meiklejohn et al. - "A Fistful of Bitcoins: Characterizing Payments Among Men with No Names" (2013)
- OXT Research - "Understanding Bitcoin Privacy with OXT" (Parts 1-4, 2021)