The low transaction volume of the private/fungible coins means that time-of-transaction analysis like this should probably always be a concern. The weird was-i

The low transaction volume of the private/fungible coins means that time-of-transaction analysis like this should probably always be a concern. The weird was-it-or-wasn't-it-surveillance during The Ceremony [1] is terribly odd IMO. But none of it could have ever occurred if ZCash were designed to be trustless. I seriously wonder whether the algorithms used for ZCash or Monero or your-favorite-altcoin-with-a-new-signing-alg have enough runtime/experience to be trusted with their market cap. I'm optimistic about Monero at least, but TBH I don't have much research or evidence on my side. [1] http://www.radiolab.org/story/ceremony/ http://www.radiolab.org/story/ceremony/