The Shielded CSV paper says:[0]
Given the 64-byte space requirement on the blockchain, the current Bitcoin block size limit supports approximately 100 Shielded CSV transactions per second (irrespective of the number of coins spent and created in each transaction).
Could those be coin-joins? By having lots of (patient) users combine their inputs and outputs, the on-chain footprint per user would be miniscule.
I guess the trade-offs here are having to be online for a while, and a reduction of privacy with respect to other participants and the coordinator (if any)?
Or is it completely impractical to build collaborative Shielded CSV transactions?
[0]: https://eprint.iacr.org/2025/068
