Fungibility

What Is Fungibility?

Fungibility is the property of an asset whose individual units are mutually interchangeable and indistinguishable in value. A $100 bill is worth exactly the same as any other $100 bill, regardless of its serial number, who held it before, or where it has been. This interchangeability is what makes money work: if a merchant had to evaluate the history of every bill before accepting it, commerce would grind to a halt.

The term derives from Medieval Latin fungibilis, rooted in the Latin fungor ("to perform" or "to discharge a duty"). In Roman law, res fungibiles referred to replaceable goods: grain, oil, and currency where any unit could stand in for another. Classic examples of fungible goods include commodities like gold and oil, government-issued currencies, and standardized financial securities. Non-fungible goods, by contrast, have unique characteristics: real estate, artwork, and diamonds each differ in ways that affect their value.

For digital currencies, fungibility is both a technical and legal challenge. Unlike physical cash, which carries no inherent record of its past owners, most cryptocurrencies record every transfer on a public ledger. This transparency creates a tension: the very feature that makes blockchains auditable also threatens the interchangeability that money requires.

How It Works

In theory, every bitcoin should be worth exactly the same as any other bitcoin. One UTXO containing 0.5 BTC should be identical in value to any other 0.5 BTC UTXO. In practice, Bitcoin's transparent transaction graph undermines this assumption through several mechanisms.

The UTXO Traceability Problem

Bitcoin uses the UTXO (Unspent Transaction Output) model, where each "coin" is a discrete, traceable output on the blockchain. When you receive bitcoin, you receive a specific UTXO with a complete history stretching back to the coinbase transaction that created it. Every transfer, split, and merge is permanently recorded.

Chain analysis companies like Chainalysis and Elliptic exploit this transparency by applying heuristics to trace ownership across transactions. The common-input heuristic, for example, assumes that all inputs in a transaction belong to the same entity. These tools can assign risk scores to individual UTXOs based on their history.

Taint Analysis

Taint analysis assigns a contamination score to coins based on their association with flagged addresses. Two primary methods exist:

• Poison method: all coins spent from a wallet containing tainted coins are considered 100% tainted, regardless of which specific UTXO was spent
• Haircut method: coins are assigned a fractional taint percentage based on mixing ratios and how many hops separate them from the flagged source

Both approaches are probabilistic and subjective: different analysis firms apply different assumptions, and there is no industry standard for what constitutes "clean" bitcoin. The result is a two-tier market where some bitcoins are effectively worth less than others, directly violating the principle of fungibility.

Techniques That Improve Fungibility

Several privacy-preserving techniques aim to restore Bitcoin's fungibility by breaking the link between transaction history and individual coins:

• CoinJoin: combines inputs from multiple senders into a single transaction, making it difficult to determine which input corresponds to which output. Originally proposed by Gregory Maxwell in 2013, CoinJoin has been implemented in wallets like Wasabi (using the WabiSabi protocol) and JoinMarket
• PayJoin (BIP78): a two-party transaction where both sender and receiver contribute inputs, breaking the common-input-ownership heuristic. Unlike CoinJoin, PayJoin requires no coordinator and looks like a normal transaction on-chain
• Silent payments (BIP-352): allow a recipient to publish a single static address while each sender derives a unique on-chain address from it, preventing address linkage. BIP-352 reached "Final" status in January 2025, with sending and receiving support merged into Bitcoin Core 28.0+
• Confidential transactions: implemented on the Liquid Network sidechain, these use Pedersen commitments and range proofs to encrypt transaction amounts while still allowing verification of consensus rules. Only the transaction parties can see the actual values

Why It Matters

Fungibility is not an abstract property: it has direct consequences for how bitcoin functions as money and how users interact with the financial system.

When exchanges reject UTXOs associated with flagged addresses, users who received those coins innocently suffer real financial harm. A merchant who accepts bitcoin has no practical way to evaluate every UTXO's history before completing a sale. This creates uncertainty that undermines bitcoin's utility as a medium of exchange.

Layer 2 protocols offer a structural improvement. The Lightning Network uses onion routing (the Sphinx protocol) to ensure that routing nodes can see only their immediate predecessor and successor: they cannot determine the original sender, final recipient, or their position in the route. Thousands of payments occur off-chain within payment channels, with only opening and closing transactions visible on the blockchain. Combined with Taproot, cooperative channel closes are indistinguishable from ordinary single-signature transactions.

Spark takes this further by using FROST threshold signatures and statechain concepts. Transfers on Spark work by changing authorization rights rather than moving funds on-chain: the underlying bitcoin remains at the same address while the Spark operators generate a new key for the recipient. No transactions are broadcast to the blockchain, so transfers leave no on-chain footprint. This architecture preserves fungibility by design, since there is no transaction graph to analyze.

The Regulatory Tension

Fungibility and regulatory compliance pull in opposite directions. Sound money requires that every unit be treated identically. Anti-money laundering (AML) regulations require that financial institutions trace the origin and destination of funds. These goals are fundamentally at odds.

Regulators have increasingly targeted privacy-enhancing tools. In August 2022, the U.S. Treasury's Office of Foreign Assets Control (OFAC) sanctioned Tornado Cash, an Ethereum-based mixer that had processed over $7 billion in transactions. The Fifth Circuit Court of Appeals later ruled in November 2024 that OFAC exceeded its authority because immutable smart contracts are not "property" under the International Emergency Economic Powers Act. OFAC delisted Tornado Cash on March 21, 2025.

In April 2024, the founders of Samourai Wallet were arrested and charged with conspiracy to operate an unlicensed money transmitting business and conspiracy to commit money laundering. Both pleaded guilty. That same year, zkSNACKs shut down Wasabi Wallet's CoinJoin coordination service effective June 1, 2024, citing legal uncertainty.

FinCEN distinguishes between custodial mixers (classified as money services businesses) and non-custodial CoinJoin software, which receives a software exemption. However, the practical distinction remains uncertain, and enforcement actions have chilled development of privacy-focused tools across the ecosystem.

The emerging trend points toward "conditional privacy": systems that offer transaction privacy by default but allow selective disclosure for compliance purposes. For a deeper analysis of this landscape, see the Bitcoin privacy landscape research article.

Fungibility Across Asset Types

Not all digital assets face the same fungibility challenges. The table below compares how different systems handle interchangeability:

Risks and Considerations

Compliance Risk

Using privacy-enhancing techniques can itself trigger scrutiny. Some exchanges flag or reject UTXOs that have passed through CoinJoin transactions, even when the underlying funds are legitimate. Binance froze user funds for using CoinJoin via Wasabi Wallet, requiring users to promise not to use CoinJoin in order to recover their bitcoin. Users must weigh the privacy benefits against the practical risk of having funds flagged by their exchange or financial institution.

False Positives in Taint Analysis

Chain analysis tools produce probabilistic results, not certainties. Innocent users can receive tainted UTXOs through normal commerce and find their funds flagged without recourse. The lack of a standardized taint methodology means different platforms may reach different conclusions about the same UTXO, creating unpredictable outcomes for users.

Privacy-Usability Tradeoffs

Privacy techniques add complexity. CoinJoin requires coordination with other participants and incurs additional transaction fees. Silent payments require wallet software that supports BIP-352. Confidential transactions increase transaction size and verification time. Each technique improves fungibility at some cost to simplicity, speed, or cost.

Evolving Legal Landscape

The legal status of privacy tools remains in flux. Court rulings like the Fifth Circuit's Tornado Cash decision and legislative efforts like the GENIUS Act continue to reshape the boundary between legitimate privacy and illicit obfuscation. Developers and users operating in this space face uncertainty that may take years to resolve.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.