According to arstechnica, on November 18th 2019 the official Monero website was hacked to deliver compromised binaries. Is any information available on how this attack occurred? Was it the website that was compromised (as the link suggests), or was it the Monero build server?

  • 2
    This is still unknown until a post mortem is released.
    – selsta
    Commented Apr 27, 2020 at 19:46

1 Answer 1


It was the server hosting the binaries that was compromised during this attack. Luckily signed files with the genuine binary hashes were available on other sources and servers, so the attack was noticed fairly quickly. Here is the announcement on r/monero relating to the compromise: https://www.reddit.com/r/Monero/comments/dyfozs/security_warning_cli_binaries_available_on/ .

Additionally security researcher SerHack published a postmortem on the binaries and the hack itself that goes into some more detail: https://serhack.me/articles/cli-binaries-compromised-monero-analysis/ .

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.