Questions tagged [attack]

Reference to any attack, real or hypothetical of the Monero network, services or users

Filter by
Sorted by
Tagged with
1 vote
0 answers
56 views

How to compute the probability that a poisoned transaction has reached the exchange by random chance in EAE attack?

When there is an EAE attack, how to compute the probability that a poisoned transaction has reached the exchange by random chance? Additionally, how to compute the probability that n poisoned ...
Henry Gordon's user avatar
2 votes
1 answer
54 views

If enough sub-addresses under a single seed are known, can that seed be reverse-engineered?

I'm gonna be accepting XMR as payment for my business. Customers purchase a single item for each transaction, so for convenience on my end I'm planning to have each product paid for through one unique ...
rollercoaster234's user avatar
0 votes
0 answers
45 views

Can you derive anything from knowing multiple subaddresses from the same account/wallet?

If you can link a known ID to multiple/many (20+) publicly posted subaddresses, and you know those subaddresses are under the same account in a wallet, is there an attack surface here for reverse-...
waterbread4457's user avatar
1 vote
1 answer
42 views

Can a change output be sent to the same destination without them knowing it come from a transaction they received in the past?

If I send them the change output of a transaction they received from me, wouldn't they assume that it was that, a change output, and have good heuristic that tells them how much money the original ...
JamesLarger's user avatar
0 votes
1 answer
337 views

What are the risks of using a remote node through the Tor and a node hidden service?

How insecure is the use of remote nodes, but through the Tor and tor hidden services(remote node with .onion domain)? What are the possible attacks? How much damage can it do? Hope for your answer!
mooko's user avatar
  • 41
0 votes
1 answer
567 views

Solutions to the Monero EABE attack?

https://github.com/monero-project/monero/issues/1673#issuecomment-312968452 Were there solutions to this Monero EABE attack since this was posted in 2017 and it is now 2020? The EABE attack defined ...
Patoshi パトシ's user avatar
0 votes
1 answer
52 views

What sort of deanonimization attack could someone controlling the majority of nodes pull off?

In the era of Docker containers and how easy it is to spin up potentially thousands of nodes in a minute, what kind of attack could some malicious actor pull off if they performed this? Would ...
Dr-Bracket's user avatar
1 vote
1 answer
94 views

How was the official Monero website hacked to deliver malware at the end of 2019?

According to arstechnica, on November 18th 2019 the official Monero website was hacked to deliver compromised binaries. Is any information available on how this attack occurred? Was it the website ...
Dr-Bracket's user avatar
2 votes
2 answers
82 views

Can an ISP swap out Monero's default peers? Would this be detectable?

As I understand, P2P networks work by first connecting to a fixed set of peers and learning about other peers based on them. Since those peers are hardcoded into the Monero software, could a malicious ...
Dr-Bracket's user avatar
0 votes
1 answer
210 views

What is Monero's FloodXMR attack published in 2019 May and how can it be executed or defeated?

The research paper here: https://eprint.iacr.org/2019/455 says Monero is prone to the FloodXMR attack. What is it exactly and how can one execute it? And how can one defend against it? Abstract:...
Patoshi パトシ's user avatar
0 votes
1 answer
186 views

Could a blackballs list be used maliciously?

I do not see any way to trustlessly generate a blackballs database without running full nodes for malicious fork coins, which I do NOT want to do (and don't even have hardware resources to do). ...
rkmv6jph's user avatar
1 vote
1 answer
333 views

Is the connection over Tor between client and remote node safe?

I'm using torsocks to connect my CLI wallet to a remote node (geo.node.moneroworld.com:18089). I don't need a high level of anonymity, but I would like to understand what information is at risk. For ...
sw4shbuckl3r's user avatar
2 votes
1 answer
194 views

What is an airdrop attack?

I just came across this thread on Twitter discussing Zcash and Monero usage in Dark-Net Markets. This quote bothers me: too much risk that an "airdrop attack" deanonymizes a chain like ...
q9f's user avatar
  • 685
15 votes
2 answers
5k views

How can individuals safeguard themselves and the community against a key reusing fork?

Regardless of the true intention behind the MoneroV developers, it forking off the existing Monero blockchain poses danger to the privacy of Monero users. While the MoneroV forking date has been put ...
Link Ng's user avatar
  • 343
15 votes
2 answers
5k views

What is MoneroV, and how is it different than Monero?

I have heard of an upcoming airdrop called MoneroV. Can someone explain the relationship between Monero and MoneroV, and explain their differences?
sgp's user avatar
  • 8,806
4 votes
1 answer
269 views

How hard is it to find the originating IP of a monero transaction (pre Kovri)?

I can only theorize about how you would attempt to trace someone's IP. I want to know the opinions of people more knowledgable about the subject.
gdoober's user avatar
  • 685
2 votes
2 answers
161 views

Does the daemon that mines a block see the transactions in clear text?

I was thinking about a theoretical attack vulnerability. Suppose that if the daemon that mines the block is able to see transactions in clear text, then it would be able to log this information in a ...
dpzz's user avatar
  • 4,529
8 votes
1 answer
279 views

How can Monero defend against a "majority of view keys" attack?

My question is a follow-up on a recent thread on Reddit: In this talk! a question was asked how many of view keys are needed to see through the whole blockchain and deanonymize all the ...
dpzz's user avatar
  • 4,529
6 votes
1 answer
407 views

Monero wallet packet sniffing

I've been comparing the weaknesses of Monero and Bitcoin. Following from this about bitcoin packet sniffing. I'm just wondering what an attacker can do if he's on my LAN and can sniff packets on the ...
user153882's user avatar
5 votes
1 answer
231 views

What are the threats against I2P?

Threat modeling is a process by which potential threats can be identified, enumerated, and prioritized What are the considered attacks in I2P's threat model ?
Moroccan Engineer's user avatar
4 votes
1 answer
351 views

Does Monero protect against timing analysis?

Does Monero protect against timing analysis? As I understand it, Monero mixes the transactions so that you cannot definitively determine UserA sent money to UserB. Not 100%, but because the outputs ...
manontheinside's user avatar
22 votes
2 answers
2k views

What privacy issues did Monero have and still has?

Has there been any scientific research regarding the promised privacy and security of Monero? Have there been attacks on the Monero network in the past? If so, what has been done to combat those? ...
James Cameron's user avatar
8 votes
1 answer
214 views

Is transaction malleability an issue with Monero?

Is transaction malleability an issue with Monero, like it is in Bitcoin? If so, is there an identified possibility to solve it? If it isn't an issue, what makes the difference?
Marusha's user avatar
  • 333
4 votes
0 answers
156 views

With RingCT, could an adversary get into a bunch of ring signatures to decrease privacy? [duplicate]

Let's say I want to deanonymize Monero. What if I create a ton of RingCT outputs, such that, say, +99% of them are mine. Since amounts don't matter with RingCT, it can be very small amounts (like one ...
Christopher King's user avatar
6 votes
1 answer
2k views

Is it possible to trace an output in the Monero blockchain?

In MRL-0004, it's said: Bob wishes to send 0.75 XMR to Alice, and will pay 0.01 XMR in fees. The Monero that Alice receives, 0.75 XMR, will be delivered as two new unspent transaction outputs ...
mwdddgcs's user avatar
  • 195
6 votes
1 answer
174 views

Replay attacks and address differentiation after a hard fork?

Just in case there will be some time a XMR Classic fork ... Are there any technical solutions in the protocol to prevent replay-attacks after a hard fork? Is there any possibility to distinguish ...
Marusha's user avatar
  • 333