7

I see here that it's possible to provide information to an auditor to prove the balance at a certain point in time (block height). Would this tell the auditor to where were the funds were sent? Based on my understanding, the answer should be no - is it because the addresses themselves don't appear anywhere on the blockchain and stealth addresses are used?

Consequentially, is it correct to assert that if I lose my wallet file, I also lose the history of destination addresses? If I would later recover my wallet from keys (or seed) and re-scan the blockchain, I would be able to see only that the input has been spent, and the related payment ID of the tx, but not the address of the recipient, as it's not recorded on the blockchain due to stealth addresses being used as destination.

Improve this question

3 Answers 3

Reset to default
9

If the auditor wanted to confirm you had sent funds to a specific address, they'll then need to have the view key of that address also. The only thing the view key of your address can determine which outputs were sent to its corresponding public key. The key images can confirm when a transaction took place, and how much was was moved from your address. It can't verify who you sent it to, or who you received it from.

Improve this answer
3
  • so having my view key and all key images and just knowing the destination address wouldn't be enough to assert that the funds were sent to it? Care to elaborate on why is that so?
    – JollyMort
    Commented Sep 9, 2016 at 12:46
  • 1
    You only need to reveal the key for that specific transaction, which both the sender and receiver have.
    – Christopher King
    Commented Sep 9, 2016 at 13:24
  • 1
    You'd still need some info from the receiver to fully verify the contents of the transaction, on your end you could prove when, your authorisation/receiving of funds and the amount, but you can't make a connection to the other party's address unless they provide the last bit of info, xmr.llcoins.net allows you to piece all this info together so it's easier to understand, but it's down right now.
    – ferretinjapan
    Commented Sep 9, 2016 at 17:52
5

It is impossible to calculate what the address is that corresponds to a given one-time address (there are actually multiple possibility). It is possible to check if a transaction corresponds to a given address.

An auditor would need both your outgoing tx keys, and an address book to figure out where the funds are going.

Improve this answer
4

In monero transactions every output is sent to a One-Time Public Key (stealth address), which is derived from the recipient Public Key, the position or index of the output in the transaction and a random number generated by the sender. As ferretinjapan explained, only the receiver may check if that One-Time Key is derived from his Public Key.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.