For the last several years (maybe always) there has been an excess of transactions with N=11 outputs relative to the surrounding sizes (much more than N=10 outputs or N=12 outputs). I mentioned this a year or two ago and somebody was like "oh yea, that's <something> software that batches by 11 outputs." (I think it was related to mining?) Does anybody happen to know or remember the source?

monero-project/monero #7935 really interesting - erebus-attack.comp.nus.edu.sg/erebus-attack.pdf

Interesting choice of wordds in the account name there

utxobr[m]: Monero isn't listed in their Appendix A table 1, but afaict the table is just a list of Bitcoin forks. They may not have looked deeply at other networks.