I'm struggling to understand how ring signatures protect against blockchain analysis.

Each time a transaction is made on the Monero blockchain some outputs already present on the blockchain are used to make a ring signature so that there is no way of knowing which output in the ring is spent.

But as the ring signature is built with old outputs found in the blockchain is it not obvious that the first time an output appears in the blockchain is when this output was really spent?

1 Answer 1


Remember that other users (those that are not the "owner" of an output) also use this output in their rings as soon as it appears in the blockchain.
So an output might (and most likely will) appear many times in many different rings prior to be actually spent by its owner.

  • How can we verify that? How long does it take for an output to have been used many times? Jan 31, 2023 at 3:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.