Thx for sharing that. I wonder if this was the source of the DoS attacks on the Monero blockchain a few years ago. Either way seems those wrinkles have been ironed out, so not sure if this old stack exchange answer still applies.

this is the general theme, bitcoin has more considerations than just privacy, while monero has it as their marketing and can focus on it at the expense of everything else for one, syncing a monero node takes ages, and requires fast storage for the entire block chain instead of only a UTXO database,...

Notably, Monero has much simpler transactions and mempool policies than Bitcoin. So implementing Dandelion correctly is quite a bit easier.

Thanks for the explanation, Sjors! I was wondering: why don’t you join my show to explain why Bitcoin doesn’t have better privacy to provide fungibility to the monetary asset? Or better yet, explain why nothing out there (including Zcash’s Halo2 and MWEB) is good enough for Bitcoin. So that n...