As I'm thinking more of it, perhaps the greatest weakness of the system is the requirement to have hundreds of thousands of DRKs online: If a network exploit is found at some point that allows the hacking of the master nodes, then every single node can be emptied of their money and a hacker will end up with something like half a million DRK... wallets and stuff are relatively safe due to the encryption, offline protection etc, but networks have a much weaker reputation: Exchanges, pools, even dice games -as reported above- are getting hacked.
Cryptoland and online money seem to be the hacker's paradise and the DRK master node network will be a multimillion dollar bounty for someone who finds a good exploit for the node daemons.
If I understand correctly, only one Masternode is operating at each period time. And at most that Masternode can only steal the collateral payments, not your signed inputs since you only sign them to the transaction you agreed to.
There are other concerns expressed on this page about the Masternodes that look worthy of discussion.
Transaction-wise I'm clueless to comment on the problems as I do not really have a deep understanding of coinjoin and darksend. You, Evan and perhaps 2-3 more on the thread are like ten levels above the "mortals" when discussing these.
I'm trying to see problems that may arise from things that my reasoning can grasp, whether it is related to market operation, network operation, hacking incentives etc and mainly on a general or peripheral basis since my "under-the-hood" understanding is minimal.
With that out of the way, what I meant is related to the requirement of a DarkSend node to have a proposed 1000 DRK wallet to operate and its online exposure 24/7, in parallel with all the wallets of all other DarkSend nodes. Could this be a massive security risk for the network to hackers if a daemon exploit is found?
this part is solved with the masternode cannot steal the collateral because only the next masternode can cash it for the 1 one
Unless I have a wrong understanding, the collateral is a transaction related fee, not the 1000 DRKs for running a node... correct? If so, I'm talking about the 1000, not the tx related fees.