I'm struggling to understand how ring signatures protect against blockchain analysis.

Each time a transaction is made on the Monero blockchain some outputs already present on the blockchain are used to make a ring signature so that there is no way of knowing which output in the ring is spent.

But as the ring signature is built with old outputs found in the blockchain is it not obvious that the first time an output appears in the blockchain is when this output was really spent?

1 Answer 1


Remember that other users (those that are not the "owner" of an output) also use this output in their rings as soon as it appears in the blockchain.
So an output might (and most likely will) appear many times in many different rings prior to be actually spent by its owner.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.