1

The Coinomi mobile wallet now has Monero integration. When making a transaction, does the wallet send the private view key to Coinomi servers to perform the transaction?

2

Coinomi monero dev here!

The server maintains a copy of the private view key to scan the chain on behalf of the wallet. However, this view key is not stored persistently, it is only kept in memory. The server only stores the hash of the address/private view key and uses that for maintaining the account inputs and outputs. This works exactly the same way as MyMonero/openmonero.

Creating and signing a transaction happens strictly on the wallet, except for the output selection part that is done using monerod.

  • A private view key only see's incoming transactions. How are you viewing outgoing transactions if you do not have the private spend key on your end to update the balance? – Patoshi パトシ Mar 9 at 18:41
  • Once we find that a tx has an output for an address, we are sending the tx to the wallet. The wallet re-processes the tx from scratch and sends the output key images (one for each related output) back to the server. The server can then use the key images to detect spending tx inputs. – tazmanos Mar 10 at 19:43
1

Given this is a "lightweight" wallet, with a closed-source server, I can say with some degree of certainty they have your private view key on their server (whether stored there or sent between client and server when making transactions or updating the wallet's balance).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.