Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [security]

Security issues with the design or implementation of Monero and related crypto-currencies.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

reducing input mixing and churning monero (feather wallet)

I have heard that it is best to not send transactions from outputs that have multiple origins (input mixing). For me to take this risk away, will I be able to create new unused outputs on feather ...
Ohiomonero27's user avatar
0 votes
1 answer
27 views

Accidently pasted CLI wallet password in another field

I use the Monero CLI wallet but I made a bit of a mistake. I had the password copied from my password manager and was going to type it in to make the transfer as normal. The problem was that I pasted ...
Cromulent's user avatar
  • 115
0 votes
0 answers
23 views

Can other people who have full access to my local network see my node/traffic that my node causes on the network

I want to try running a full node on my schools network but if its too visible I would rather not
Deranged highschooler's user avatar
0 votes
0 answers
15 views

I am not receiving whole amount

The person I bought from had to send me 75, it say it did but only 38 dollars are in my wallet, how so?
Galaxy Goat's user avatar
0 votes
0 answers
49 views

Assuming Q* Qualia from OpenAi has achieved AGI and it's able to break AES encryption. How does this affect Monero?

Rumors have that OpenAI has achieved AGI. Assuming its true, and having that Q* Qualia is confirmed real as of today. The leaked documents a few weeks ago states they were able to break AES encryption....
Patoshi パトシ's user avatar
0 votes
1 answer
236 views

Keep getting W Invalid DNSEC TXT record signature error in CLI

So basically, everytime i sync in monderoD cli i get this as the first message after synchronization completes: 2023-08-28 ?? W Invalid DNSSEC TXT record signature for checkpoints.moneropulse.se: ...
emptymicdrop's user avatar
0 votes
0 answers
312 views

Windows defender quarantined files, Win32/Uwamson.A!ml and now I have issues. Can I restore my GUI wallet without downloading entire blockchain?

I am trying and failing to restore my GUI wallet from mnemonic seed... I have not accessed my wallet for over a year, I recently sent some funds to it. When I tried to view the current balance the ...
sydlexic's user avatar
2 votes
1 answer
60 views

If enough sub-addresses under a single seed are known, can that seed be reverse-engineered?

I'm gonna be accepting XMR as payment for my business. Customers purchase a single item for each transaction, so for convenience on my end I'm planning to have each product paid for through one unique ...
rollercoaster234's user avatar
1 vote
1 answer
71 views

Simulating a double spend transaction on Monero (Creating an intentionally invalid tx)

I want to create an end-to-end test in order to validate that an application doesn't let you spend before an incoming transaction confirms. I'm trying to broadcast an invalid tx to the Monero network ...
Alice's user avatar
  • 111
1 vote
1 answer
51 views

Does mining in a pool help the network?

So basically, if you solo mine you create decentralization, but your chance to get reward is almost nonexistent. When you mine with a pool, you don't validate anything. You just hash blocks produced ...
Bogdan Mart's user avatar
0 votes
2 answers
321 views

Let`s say that i sent monero from kucoin to my monero wallet. Is this transaction anonymous?

The kucoin account is registered to my official e-mail addres. Do i need to use monero mixer? Which monero mixers accept small amounts of this coin (eg $10). What are the anonymous ways to transfer ...
wever's user avatar
  • 1
0 votes
1 answer
248 views

Quantum-safe stealth addressing

Many of you will know that the stealth addressing system used in Monero is vulnerable to quantum attacks, due to it being based on quantum-weak cryptography. Although not all payments would be ...
Neatness2253's user avatar
0 votes
1 answer
47 views

Corrupted HDD. Restored it with TestDisk. Cant open restored keys in GUI?

Last week my HDD corrupted. I was able to restore it and save most files with TestDisk. However all files are named such as "F26689223" instead of their original file-names. With a keyword-...
CorruptedHDD's user avatar
0 votes
1 answer
162 views

Potentional Monero future vulnerabilities

What happens if Monero has vulnerabilities in the future? Would it be possible that it could expose old transactions information such as addresses and amounts? How likely would this be? I am running ...
user14216's user avatar
1 vote
1 answer
47 views

Can a change output be sent to the same destination without them knowing it come from a transaction they received in the past?

If I send them the change output of a transaction they received from me, wouldn't they assume that it was that, a change output, and have good heuristic that tells them how much money the original ...
JamesLarger's user avatar
0 votes
1 answer
101 views

How do you store seed phrases for multiple wallets?

Let's say you have not just a hardware wallet but multiple software wallets. How do you store your seed phrases? Steel plates are a good solution but often a headache to stamp and store. Has anyone ...
Piconeros's user avatar
0 votes
1 answer
358 views

What are the risks of using a remote node through the Tor and a node hidden service?

How insecure is the use of remote nodes, but through the Tor and tor hidden services(remote node with .onion domain)? What are the possible attacks? How much damage can it do? Hope for your answer!
mooko's user avatar
  • 41
0 votes
1 answer
634 views

Was my XMR lost or stolen? [duplicate]

I installed GUI wallet on windows 10 about 18 months ago and daemon wouldn’t start on its own. After restarting it manually every time, it synchronized and wallet was working somehow OK. I received ...
Jerry's user avatar
  • 1
1 vote
1 answer
95 views

Hash as encryption used by Monero

Monero uses a Pedersen commitment yG + bH to obfuscate the value of a transaction, where b is the value and y is the blinding factor. For the receiver to know both variables, it uses a Diffie-Hellman ...
Fiono's user avatar
  • 113
1 vote
1 answer
54 views

RingCT missing output indices

I'm currently studying about security about Monero, and I found something weird. I know that the ouputs of Monero transactions are identified by amount and indices (amount 0 for RingCT), and the ...
Ilak's user avatar
  • 13
0 votes
1 answer
181 views

I upgraded to a new My Monero App now I lost my coins?

I download the update 0.17.0.1-afc2e84(QT 5.9.9) and now it's taken me back to the original options (language, mode selection, open a wallet etc. Where do I find my old wallet key on my PC? I don't ...
WS455's user avatar
  • 1
0 votes
0 answers
378 views

Problem verifying PGP for Monero GUI wallet

I'm working in Windows and trying to verify the hash and binary of the Monero GUI wallet. I followed the directions here: https://www.getmonero.org/resources/user-guides/verification-windows-beginner....
Number9's user avatar
  • 21
2 votes
1 answer
461 views

Estimating anonymity set size?

Is there any way to at least estimate what kind of anonymity set a user would have after churning Monero X times assuming the anonymity set of each individual transaction is the ringsize (i.e. there ...
The_Ringsize_Ring's user avatar
3 votes
1 answer
91 views

Security model for new auto update feature in GUI v0.16.0.2 'Nitrogen Nebula'

What steps are taken to verify the binaries via the new GUI auto update feature? How does it compare to downloading the them and manually verifying the hash as GPG key as was required for previous ...
user10857's user avatar
0 votes
1 answer
128 views

I sent a transaction and it gave me an error then went through

I was sending some XMR using XMR.to XMR.to gave me the address to send to in my monero wallet. The monero wallet went white and started thinking. It took along time. Then I'm not real clear on what ...
Number9's user avatar
  • 21
1 vote
1 answer
570 views

Is there any evidence of Bitcoin being "Tainted"?

Monero claims to be fungible, meaning every XMR is worth the same as another XMR. But I've also people say this isn't true about Bitcoin - and that Bitcoin can be tainted. Is there any evidence of ...
Dr-Bracket's user avatar
0 votes
1 answer
52 views

What sort of deanonimization attack could someone controlling the majority of nodes pull off?

In the era of Docker containers and how easy it is to spin up potentially thousands of nodes in a minute, what kind of attack could some malicious actor pull off if they performed this? Would ...
Dr-Bracket's user avatar
1 vote
1 answer
94 views

How was the official Monero website hacked to deliver malware at the end of 2019?

According to arstechnica, on November 18th 2019 the official Monero website was hacked to deliver compromised binaries. Is any information available on how this attack occurred? Was it the website ...
Dr-Bracket's user avatar
0 votes
0 answers
95 views

Understanding a security proof of RingCT 3.0

I am reading the paper "RingCT 3.0 for Blockchain Confidential Transaction: Shorter Size and Stronger Security" (https://eprint.iacr.org/2019/508.pdf), an improvement to Ring Confidential Transactions....
Fiono's user avatar
  • 113
2 votes
1 answer
777 views

Does using a remote node compromise the whole wallet?

If I'm using Tails and I use a remote node, does that compromise the whole wallet at some point in the future? For example, can the node determine my Monero wallet address or identify my wallet ...
greg's user avatar
  • 31
0 votes
1 answer
169 views

Monero transfer privacy

If I want a transaction to be private, is it safe to follow a path like: Coinbase > MorphToken (using Windows) > Official Monero (using Tails) > destination
bionic's user avatar
  • 21
0 votes
1 answer
55 views

Would an attacker knowing the block-heights of my wallet's transactions weaken my privacy/security?

Let's say I'd go through all the transactions in my wallet, write down their block-heights and store this list somewhere insecure. Could my privacy or security be compromised by this in any way (...
Edward Lucas's user avatar
1 vote
1 answer
103 views

Does the Monero executable for Windows not have a code signing certificate?

I was getting really nervous about using the Monero wallet. It seemed like the download page was ww.getmonero.org/downloads, which I thought was weird. Additionally, the executable for Windows wasn't ...
monerous's user avatar
6 votes
1 answer
185 views

How was the generator H for the RingCT scheme chosen?

I'm reading the RingCT whitepaper by Shen Noether. The scheme requires a second random generator H such that its discrete logarithm w.r.t. G is not known. Paragraph 3.2 suggests two variants to ...
Crypto Gloegg's user avatar
1 vote
1 answer
148 views

Should I use a hardware wallet?

I hear a lot about hardware wallets and I would like to know if, in terms of security and functionality, it makes sense to switch to one of them. Thanks in advance for answers.
cialu's user avatar
  • 1,631
1 vote
1 answer
78 views

Will the Multisig Messaging System improve Monero security and performance?

I'm trying to understand the incoming MMS (Multisig Messaging System) in Monero. Reading the MMS User Manual, I am thinking that MMS could improve both the security and performance in the next Monero ...
cialu's user avatar
  • 1,631
1 vote
0 answers
308 views

Why did I get an 'using an untrusted daemon' warning?

I'm running a full node and I followed every security step to set up the node on my computer. Everything was going great until today when I realized that a view-only wallet created the day before was ...
qxr1111's user avatar
  • 11
2 votes
1 answer
3k views

Is it safe to use a remote node?

I started using Monero from now and my laptop takes a lot of time to download the blockchain. Also, my SSD is small and nearly full. I was reading about the use of a remote node to sync my wallet, ...
Tilli's user avatar
  • 242
3 votes
1 answer
3k views

Does Monero (XMR) or Pirate (ARRR) offer better privacy and security?

I have read several comparisons between Monero and Pirate. Can someone please explain to me the objective pros and cons about their privacy offerings? Is one more secure than the other? What are the ...
sgp's user avatar
  • 8,806
1 vote
1 answer
80 views

Is it okay to host a node that connects on the clearnet?

There is some concern in regulatory bodies about governing Monero in the future. Does this have implications for people hosting nodes at home on personal computers and connecting on the clearnet, ...
listenlight's user avatar
1 vote
1 answer
63 views

Suspicious connections - Having issues with the GUI under Debian by connection to a public remote node - PC hangs

Having a Windows client with local node - works perfect. When trying to connect with the Debian client to a remote node (eu.node.moneroworld.com at port 18089) the pc hangs immediately and cinnamon ...
JiltedGen's user avatar
3 votes
1 answer
5k views

Can I run monero desktop wallet over Tor?

Can I use desktop version of monero wallet https://getmonero.org/downloads/ over Tor ? I read Web version mymonero.com is rejecting Tor connections. Does desktop wallet work over Tor ?
user8939's user avatar
1 vote
1 answer
69 views

Backup and Disaster Recovery for Monero Fork

For a clone of Monero in a production environment, what files/directories to be backed up and and what intervals?
James's user avatar
  • 301
2 votes
1 answer
79 views

Migrating Monero Fork from Test to Production

When migrating from Test to Production of a Monero Fork, what needs to be considered? For example, launching the Seed Nodes in "--restricted-rpc" mode.
Spencer's user avatar
  • 185
1 vote
1 answer
105 views

Mitigating Risks of Forking Monero

When Forking Monero on GitHub, the code base becomes a public repository. The benefit of Forking as opposed to cloning into a private repository is that the link to the original code base is ...
James's user avatar
  • 301
0 votes
1 answer
195 views

lost my phone with 2FA code

I lost my phone, so I lost my 2FA code too. Now I have new phone and I cant to login to the my wallet in step 2. where I need to get 2FA code from Authenticator. I am using Monero app on iphone. I ...
Dome's user avatar
  • 1
2 votes
1 answer
199 views

What is an airdrop attack?

I just came across this thread on Twitter discussing Zcash and Monero usage in Dark-Net Markets. This quote bothers me: too much risk that an "airdrop attack" deanonymizes a chain like ...
q9f's user avatar
  • 685
0 votes
2 answers
183 views

SSL usage in Sumokoin/Monero

There is this merge: https://github.com/sumoprojects/sumokoin/pull/63 that enables SSL for Sumokoin (can be used also for Monero). What is it used for? I guess For SSL communication between RPC-...
Salda's user avatar
  • 117
0 votes
1 answer
1k views

monerov windows wallet gui.exe showing up as Trojan

Why is moneorv windows wallet gui.exe being quarantined as Trojan.BitCoinMiner by malwarebytes ?
zoozball's user avatar
1 vote
0 answers
75 views

Improvements on generating monero wallets securely?

My current process of generating monero wallets: Use an air-gapped RaspberryPi Use monero-wallet-cli to generate a wallet Record mnemonic on paper only Record partial address for reference on paper (...
farinspace's user avatar