Chapter 4: A Wallet Under Watch – The Dusting Attack

The basement smelled like old carpet and thermal paste.

Juno’s operations center was not what Nico had expected. He had pictured something out of a spy movie—sterile white surfaces, holographic displays, maybe a wall of screens showing real-time blockchain data. Instead, he got a cramped room with low ceilings, a single bare bulb, and three computers that looked like they had been assembled from spare parts.

But the computers worked. And the whiteboards lining the walls were covered in something more valuable than expensive equipment: information.

Wallet addresses. Transaction hashes. Cluster diagrams. Notes in four different colors of dry-erase marker.

Nico stood in the doorway, taking it all in. Juno had blindfolded him for the last three blocks—not because she didn’t trust him, she said, but because she didn’t trust anyone. He had stumbled down a set of creaky stairs, and now here he was.

“Welcome to the resistance,” Juno said dryly. “Sorry about the smell. The landlord’s cat died in the walls last year.”

“That’s… not what I was expecting.”

“Reality rarely is.” She gestured to a folding chair. “Sit. We have work to do.”


The work was grim.

Juno had been scraping data for the past twelve hours, ever since their meeting at the library. Her scripts had identified every wallet that received dust from the ChainReveal address—12,847 in total. She had cross-referenced that list with public donation records, blockchain analysis tools, and her own private database of known activist wallets.

The numbers were worse than she had feared.

“Three thousand two hundred of these wallets belong to confirmed Collective supporters,” she said, pointing to a cluster of red dots on her main monitor. “The rest—about nine thousand six hundred—are collateral damage.”

Nico stared at the screen. “Collateral damage?”

“People who transacted with supporters. Coffee shops, grocery stores, utility companies. Anyone who ever received money from a dusted wallet is now in the blast radius.” She zoomed in on a single red dot. “This is a pizza place in Ohio. They have no idea they’ve been linked to an international activist network. But when ChainReveal publishes their graph, this pizza place will appear alongside journalists and whistleblowers and human rights defenders.”

“And their customers will stop ordering from them.”

“And their landlord might evict them. And their bank might close their accounts.” Juno turned away from the screen. “That’s how these attacks work. They don’t just target individuals. They target the networks around them.”

Nico thought about his mother again. She wasn’t on the list—not yet—but she would be. Anyone who transacted with him was now at risk.

“What’s the timeline?” he asked.

“ChainReveal is still gathering data. They want a critical mass before they publish—probably ten thousand wallets minimum. They’re at twelve thousand now, but they’re still dusting new targets every hour.” Juno pulled up a graph showing exponential growth. “If nothing changes, they’ll publish in forty-eight hours. Maybe seventy-two.”

“That’s not much time.”

“It’s enough.” Juno’s voice was steady, but Nico could see the tension in her shoulders. “We just need to rally enough people for the mass CoinJoin before ChainReveal drops their bomb.”

“And if we can’t?”

Juno didn’t answer. She didn’t have to.


At 4:00 PM, Juno’s encrypted chat exploded.

She had set up a private channel for Collective members—a small group of coordinators who had managed to stay out of custody. There were seven of them, scattered across four countries, all using pseudonyms and VPNs and every privacy tool Juno could recommend.

But privacy tools couldn’t stop fear.

Zara (Coordinator, Eastern Europe): They arrested Fatima. Two hours ago. Her whole family is being questioned.

Linus (Tech support, Southeast Asia): I heard. Three more distributors in South America got picked up overnight. Someone sold them out.

Zara: It’s the dust. It has to be. The Heuristic linked their wallets.

Juno: I know. I’m working on a solution. But I need everyone to stay calm.

Linus: Stay calm? Fatima has a six-year-old daughter. She’s been in a detention center for two hours and no one knows where her kid is.

Juno: I understand. But panicking will make it worse. Do NOT move your funds. Do NOT create new wallets. Do NOT spend anything from your existing wallets until I tell you.

Zara: How long?

Juno: Forty-eight hours. Maybe less. I need to coordinate a mass mixing event. Hundreds of participants.

Zara: That’s insane. No one is going to trust a random mixing service with their funds.

Juno: They’ll trust each other. That’s the point.

The chat went silent for a long moment. Then a new voice appeared—someone Juno hadn’t seen before.

Sam (New member, age 15): My mom’s blog got shut down. They came to our apartment this morning. I ran out the back. I don’t know where she is.

Nico read the message over Juno’s shoulder. His stomach clenched.

Juno: Sam, are you somewhere safe?

Sam: I’m in a bus station. I have my phone and about twenty dollars. I don’t know what to do.

Juno: Don’t move. I’m sending someone to get you.

Nico looked at Juno. “You don’t have anyone to send.”

“I know.” She typed quickly. Sam, what city are you in?

Sam: Portland. The Greyhound station.

Juno closed her eyes. Portland was six hundred miles away.

Zara: Juno, I can’t ask my people to shelter a fugitive. We’re already under too much pressure.

Linus: Same here. We’re barely holding on.

Juno: I understand. I’ll figure something out.

She closed the chat and turned to Nico.

“How much cash do you have?”


They didn’t send anyone to Portland. There was no one to send. Instead, Juno spent two hours on encrypted calls, begging contacts to help. Most said no. A few said maybe. One said yes—a privacy activist in Seattle who agreed to drive down and pick up Sam.

But that would take six hours. And Sam was alone in a bus station, terrified, watching every person who walked past.

Nico watched Juno work. She was good at this—better than he would have expected for a sixteen-year-old. She stayed calm when people yelled at her. She explained technical concepts without condescension. She made promises she wasn’t sure she could keep.

But he could see the cracks.

Her hands trembled slightly when she reached for her coffee mug. Her voice cracked when she left voicemails. And every few minutes, she would glance at a notification on her phone—a countdown timer she had set for the ChainReveal publication date.

Forty-seven hours. Forty-six hours. Forty-five.

“Your timer isn’t helping,” Nico said quietly.

“It’s helping me stay focused.” Juno set her phone down. “I need to run an education session. The Collective members don’t understand why they can’t just move their funds to new wallets. They think I’m trying to trap them.”

“Can I help?”

Juno looked at him for a long moment. “You used to work for the agency. They might not trust you.”

“They might not trust anyone. But at least I can explain the heuristic from the inside.”

Juno nodded slowly. “Okay. But let me introduce you. And if anyone asks, you’re a whistleblower, not a spy.”

“I am a whistleblower.”

“Then act like one.”


The education session was held in a private voice chat—seventeen Collective members and coordinators, plus Juno and Nico. No video. No real names. Just voices, strained and fearful, coming through encrypted connections.

Juno started.

“Thank you all for joining. I know things are scary right now. People you care about are being detained. Your networks are under attack. And you’re being told not to do the one thing that feels safe—moving your funds to new wallets.”

“Because it’s not safe,” a voice said. Zara. “You’re asking us to leave our money in wallets that are already compromised.”

“I’m asking you to leave your money in wallets that are tagged—not compromised. There’s a difference.” Juno pulled up a diagram on her screen, even though no one could see it. “A tagged wallet is one that the Heuristic has linked to a cluster. But that link is based on probability, not certainty. As long as you don’t spend the dust, the link remains weak.”

“But if I move my funds—”

“You have to spend the dust to move anything. The dust is part of your wallet’s UTXO set. You can’t send funds without including the dust, unless you know exactly how to select only clean UTXOs—and most wallet software doesn’t let you do that.”

Nico leaned toward his microphone. “This is where I come in.”

The chat went quiet.

“Who is that?” Linus asked.

“My name is Nico. I used to work for the agency that runs the Heuristic.”

A chorus of angry voices erupted. “You brought a spy into our chat?” “Are you insane?” “I’m leaving—”

“Wait,” Juno said firmly. “He’s not a spy. He’s a target. His personal wallet was dusted. His mother’s wallet was dusted. The Heuristic has him flagged as a person of interest.”

“That doesn’t mean we can trust him.”

“No,” Nico agreed. “It doesn’t. But I can explain how the Heuristic works—from the inside. And if you understand how it works, you’ll understand why moving your funds is the worst thing you can do.”

Silence. Then, reluctantly: “Explain.”


Nico explained for twenty minutes.

He walked them through the Heuristic’s logic step by step. He showed them how common-input-ownership clustering worked. He explained why the Heuristic couldn’t tell the difference between intentional spending (donating to the Collective) and accidental spending (buying coffee with dust). He described the confidence thresholds the AI used, and how those thresholds could be manipulated.

And then he explained why moving funds to a new wallet was a trap.

“When you create a new wallet and send funds from your old wallet,” he said, “you’re creating a transaction. That transaction has inputs—your old wallet addresses—and outputs—your new wallet address. The Heuristic sees those inputs and outputs. It assumes that whoever controlled the old wallet also controls the new wallet. It links them.”

“But that’s true,” Zara said. “I do control both wallets.”

“Exactly. The Heuristic is correct in that case. And once it links your new wallet to your old wallet, your new wallet inherits all the associations of the old wallet. You haven’t escaped the cluster. You’ve just expanded it.”

“So what do we do?”

“The only way to break the link is to make the dust impossible to trace. That means mixing it with so many other UTXOs that no heuristic can follow it.”

Linus’s voice came through, skeptical. “You’re talking about CoinJoin.”

“Yes.”

“CoinJoin requires trust. Someone has to coordinate the mixing. How do we know that coordinator won’t steal our funds?”

Juno answered. “Because the coordinator is me. And I’ve been running a mixing service for two years. I’ve never lost a single satoshi.”

“No offense, Juno, but two years isn’t that long. And we’re talking about hundreds of thousands of dollars.”

“I know.” Juno’s voice was calm. “That’s why we’re not doing a traditional CoinJoin. We’re doing a decentralized, trustless protocol—no single coordinator controls the funds. Everyone participates equally.”

“That’s never been done at scale.”

“It’s never been necessary at scale. But the technology exists. I’ve been working on it for months.”

The chat fell silent. Nico could imagine the Collective members thinking, weighing their options. Stay tagged and hope for the best. Move funds and make things worse. Or trust a sixteen-year-old and a former agency analyst with everything they had.

Zara spoke first. “What do you need from us?”

“Patience,” Juno said. “And when the time comes, participation. I’ll send instructions in the next twenty-four hours. In the meantime, do nothing. Don’t spend. Don’t move. Don’t even check your wallets from a device you’ve used before.”

“And if someone gets arrested again?”

Juno closed her eyes. “Then we try to help them. But we can’t help anyone if we’re all in custody.”

The chat ended. The voice channel went silent.


At 11:00 PM, Nico heard a knock on the basement door.

He froze. Juno froze. They looked at each other.

“Were you expecting someone?” Nico whispered.

“No.”

The knock came again. Three quick raps. Then a pause. Then two more.

Juno crept up the stairs, motioning for Nico to stay back. She pressed her eye to the peephole.

Her whole body went rigid.

“Juno?” Nico whispered. “Who is it?”

She didn’t answer. She just stood there, staring through the peephole, her hand hovering over the deadbolt.

Then she unlocked the door.

Three people stood on the stoop. A woman in her thirties with a swollen eye and a bloody lip. A man about the same age, holding a crying toddler. And a teenage girl, no older than Nico, clutching a backpack like it was the last thing she owned.

Their clothes were rumpled. Their eyes were wild.

“Juno,” the woman said. “We need a place to hide. The police came to our apartment. They asked about the Collective. I think someone gave them our names.”

Juno looked past them, scanning the street. It was dark. Quiet. No headlights. No footsteps.

But that didn’t mean they weren’t being followed.

“Get inside,” she said. “Now.”

The three strangers stumbled down the stairs. Juno locked the door behind them—deadbolt, chain, and a metal bar she slid into place.

Then she turned to face Nico.

His expression asked the question: Who are they?

Juno answered out loud.

“This is the Collective.”

Table of contents:
Introduction
Chapter 1: A Tiny Transaction
Chapter 2: The Taint
Chapter 3: The Heuristic Hunt
Chapter 4: A Wallet Under Watch
Chapter 5: The Cluster Bomb <<<<<< NEXT
Chapter 6: Breaking Anonymity
Chapter 7: The Chainalysis Firm
Chapter 8: A Tumbler’s Last Stand
Chapter 9: The CoinJoin Uprising
Chapter 10: Privacy as a Collective

Loading