Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Security issues with the design or implementation of Monero and related crypto-currencies.

18
votes
2answers
4k views

How do I use cold transaction signing?

Cold transaction signing was recently merged into master. How would one go about using it? For those who don't know, this feature allows you to: Create and export an unsigned transaction on an ...
23
votes
3answers
6k views

What privacy or security trade offs are associated with not running your own full node?

If I choose to use a webwallet such as mymonero.com or connect to a Monero node run by someone else to make transactions, what are the unique privacy and security concerns I will face (compared to if ...
47
votes
1answer
2k views

Why was I2P chosen over Tor for native Monero integration?

Tor is currently much more popular than I2P. Why was I2P chosen (Kovri project) over Tor for native Monero integration?
13
votes
3answers
5k views

Is it safe to share a daemon with a roommate?

Are there any security concerns with sharing a Monero daemon with a roommate to send or receive transactions? If we each person has their own wallet, encrypted with a very strong password what are ...
15
votes
2answers
4k views

How can individuals safeguard themselves and the community against a key reusing fork?

Regardless of the true intention behind the MoneroV developers, it forking off the existing Monero blockchain poses danger to the privacy of Monero users. While the MoneroV forking date has been put ...
15
votes
2answers
2k views

What is Monero's mechanism for defending against a double-spend attack?

The title says it all, but I want to frame the issue two ways, in hopes of a slightly more in-depth answer. With Bitcoin, the blockchain is transparent. In the "ordinary course of business" in the ...
35
votes
1answer
2k views

How vulnerable is Monero to Quantum Computing?

Elliptic curve cryptography, which is used in Monero, is vulnerable to QC. Would Monero be more vulnerable than Bitcoin, because the addresses contain public keys, not hashes of public keys? What ...
15
votes
2answers
8k views

What is the safest method to create a Monero wallet for cold storage?

If I want to create a Monero wallet in the most secure manner possible, what are the best practices in doing so? Are there any written user guides or video demonstrations of this process?
70
votes
2answers
9k views

What advantages does Monero offer that are not provided by other cryptocurrencies?

What are the advantages provided by using Monero compared with other popular cryptocurrencies such as Bitcoin? Specifically, what unique features does Monero have relating to privacy, PoW security ...
59
votes
3answers
8k views

How does Monero privacy and security compare to Zcash?

How does Monero privacy compare to Zcash? What are the key security risks associated with each design? Since important Monero improvements are in active development and Zcash has yet to launch, ...
23
votes
3answers
8k views

Does Monero have any mobile wallets available?

Mobile usage is growing very fast worldwide. Monero transactions should be easy to conduct from any device Does Monero have any Android or iOS wallets available? If there are no mobile wallets today,...
15
votes
2answers
4k views

What is MoneroV, and how is it different than Monero?

I have heard of an upcoming airdrop called MoneroV. Can someone explain the relationship between Monero and MoneroV, and explain their differences?
12
votes
2answers
276 views

Number of Monero block explorers and their unique features

How many Monero block explorers are currently known to exist? What unique features separate one block explorer from another? What differences do they have in terms of privacy and security ...
7
votes
3answers
963 views

Can a One-Time public key be used for more than one payment?

If I understand correctly, every new payment will ideally have a different one-time public key for increased privacy. However, could a one-time public key receive Monero more than once (as in ...
6
votes
1answer
316 views

Monero wallet packet sniffing

I've been comparing the weaknesses of Monero and Bitcoin. Following from this about bitcoin packet sniffing. I'm just wondering what an attacker can do if he's on my LAN and can sniff packets on the ...
27
votes
3answers
6k views

What are the primary differences between Monero and Bitcoin?

Addressing each of the following factors, what are the major differences between Monero and Bitcoin? Privacy (including any limitations privacy may have on auditability) Scaling (including blockchain ...
6
votes
0answers
127 views

Can we use Coinshuffle++ insights to improve privacy in relaying Monero transactions? [closed]

Coinshuffle is a communication protocol that allows for a number of peers to privately collaborate in making a Bitcoin coinjoin transaction in such a way that they all provide their addresses for the ...
23
votes
3answers
737 views

Monero private key collision

Assuming a properly working RNG what are the chances of creating a Monero private key that is identical to one created by someone else (it corresponds and controls funds sent to the same XMR address)? ...
11
votes
2answers
377 views

What type of security audits has Monero received?

What type of security audits has Monero received? Since this question already addressed cryptographic review of the Monero protocol, I am primarily interested in Monero source code and ...
9
votes
1answer
2k views

How does Monero privacy and security compare to ZCoin?

How does Monero (XMR) privacy compare to ZCoin (XZC)? Can ZCoin protect the privacy of transaction amounts like Monero will do with RingCT, or are ZCoin transaction amounts visible similar to Monero ...
5
votes
3answers
762 views

Is making a key image public equal to giving the monero in that output away?

So I read about proving your balance to an auditor, and someone suggested that you can share your view key, exposing all outputs that you received on that address. If you then give out all key images ...
14
votes
1answer
76 views

What security risks are associated with accepting Instant Transactions?

If a merchant decides to accept a Monero payment the moment it appears in the memory pool (before confirmation) what risks are being assumed? Based on the probability of these risks being exploited, ...
9
votes
1answer
353 views

What cryptographic assumptions is Monero based on?

Most crypto systems security are based on assumptions that certain problems are difficult, or some mathematical conjecture is true. The only counterexamples I can think of are the one time pad and ...
5
votes
1answer
178 views

Hard Fork Replay Attacks? [duplicate]

When the Ethereum fork happened a few months ago, users were cautioned to protect against so called "replay attacks". A replay attack, as far as i understand it, is when a transaction occurs on one ...
4
votes
1answer
75 views

How was the generator H for the RingCT scheme chosen?

I'm reading the RingCT whitepaper by Shen Noether. The scheme requires a second random generator H such that its discrete logarithm w.r.t. G is not known. Paragraph 3.2 suggests two variants to ...
4
votes
1answer
275 views

Cold transaction signing with GUI

Is it possible to safely complete a cold transaction signing process with the official GUI instead of the CLI process described here?
4
votes
1answer
136 views

Do multisig addresses share the same space as regular addresses and produce the same types of keys?

Let me word it another way. Can a normal Monero seed produce the same address as a multisig wallet? And, if so, would that mean that the private spend key generated by that wallet would be able to ...
2
votes
1answer
200 views

Is it easily provable by a third party that the key image used in a transaction is associated with the spent output without revealing the (P,I) pair?

What I'm getting at is I'd like to know how the Monero network can know that a key image used in a transaction is not either forged (probably an easy answer) or created from a different output owned ...
2
votes
1answer
37 views

Migrating Monero Fork from Test to Production

When migrating from Test to Production of a Monero Fork, what needs to be considered? For example, launching the Seed Nodes in "--restricted-rpc" mode.
-4
votes
1answer
657 views

How can I make a coin using Monero? [closed]

I am developing a coin using the Monero git code, so I want to know what is the setup we need to follow to create our own coin using Monero. Coin development Coin Api development Coin explore Coin ...