A little bit of expansion on this that I came across today:
US government spooks have cracked ‘anonymous’ Bitcoin wallet WasabiSeems like if you have any coins in a Wasabi wallet right now then not only do you need to withdraw them before Wasabi decide to start blacklisting them, you'll also need to re-mix them (and do so thoroughly) using a different mixing method.
Here is an interesting video --
How Wasabi was "demixed" by Chainalysis 
I'd be interested if anyone can point to any similar flaws or vulnerabilities in Samourai wallet?
How about
this?
Unless you're connecting to Whirlpool via RoninDojo, Samourai Wallet devs can deanonymize you because they will know your main wallet xpub, your pre-mix xpub, your post-mix xpub and toxic change xpub.