Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Security issues with the design or implementation of Monero and related crypto-currencies.

70
votes
2answers
9k views

What advantages does Monero offer that are not provided by other cryptocurrencies?

What are the advantages provided by using Monero compared with other popular cryptocurrencies such as Bitcoin? Specifically, what unique features does Monero have relating to privacy, PoW security ...
59
votes
3answers
8k views

How does Monero privacy and security compare to Zcash?

How does Monero privacy compare to Zcash? What are the key security risks associated with each design? Since important Monero improvements are in active development and Zcash has yet to launch, ...
47
votes
1answer
2k views

Why was I2P chosen over Tor for native Monero integration?

Tor is currently much more popular than I2P. Why was I2P chosen (Kovri project) over Tor for native Monero integration?
35
votes
1answer
2k views

How vulnerable is Monero to Quantum Computing?

Elliptic curve cryptography, which is used in Monero, is vulnerable to QC. Would Monero be more vulnerable than Bitcoin, because the addresses contain public keys, not hashes of public keys? What ...
27
votes
3answers
6k views

What are the primary differences between Monero and Bitcoin?

Addressing each of the following factors, what are the major differences between Monero and Bitcoin? Privacy (including any limitations privacy may have on auditability) Scaling (including blockchain ...
27
votes
1answer
310 views

How would Monero verify transactions on a 2-way pegged sidechain?

From my understanding, in order to retrieve tokens on a side-chain, you would have to send your XMR to some address that would then be unlocked when you burn the side-chain tokens. How could Monero ...
23
votes
3answers
8k views

Does Monero have any mobile wallets available?

Mobile usage is growing very fast worldwide. Monero transactions should be easy to conduct from any device Does Monero have any Android or iOS wallets available? If there are no mobile wallets today,...
23
votes
3answers
6k views

What privacy or security trade offs are associated with not running your own full node?

If I choose to use a webwallet such as mymonero.com or connect to a Monero node run by someone else to make transactions, what are the unique privacy and security concerns I will face (compared to if ...
23
votes
3answers
732 views

Monero private key collision

Assuming a properly working RNG what are the chances of creating a Monero private key that is identical to one created by someone else (it corresponds and controls funds sent to the same XMR address)? ...
18
votes
2answers
4k views

How do I use cold transaction signing?

Cold transaction signing was recently merged into master. How would one go about using it? For those who don't know, this feature allows you to: Create and export an unsigned transaction on an ...
17
votes
1answer
353 views

Can Kovri be blocked in e.g. China?

And if so, is there a way around it with something like the meek pluggable transport from the Tor project?
15
votes
2answers
4k views

How can individuals safeguard themselves and the community against a key reusing fork?

Regardless of the true intention behind the MoneroV developers, it forking off the existing Monero blockchain poses danger to the privacy of Monero users. While the MoneroV forking date has been put ...
15
votes
2answers
4k views

What is MoneroV, and how is it different than Monero?

I have heard of an upcoming airdrop called MoneroV. Can someone explain the relationship between Monero and MoneroV, and explain their differences?
15
votes
2answers
8k views

What is the safest method to create a Monero wallet for cold storage?

If I want to create a Monero wallet in the most secure manner possible, what are the best practices in doing so? Are there any written user guides or video demonstrations of this process?
15
votes
2answers
2k views

What is Monero's mechanism for defending against a double-spend attack?

The title says it all, but I want to frame the issue two ways, in hopes of a slightly more in-depth answer. With Bitcoin, the blockchain is transparent. In the "ordinary course of business" in the ...
14
votes
1answer
76 views

What security risks are associated with accepting Instant Transactions?

If a merchant decides to accept a Monero payment the moment it appears in the memory pool (before confirmation) what risks are being assumed? Based on the probability of these risks being exploited, ...
13
votes
3answers
5k views

Is it safe to share a daemon with a roommate?

Are there any security concerns with sharing a Monero daemon with a roommate to send or receive transactions? If we each person has their own wallet, encrypted with a very strong password what are ...
13
votes
2answers
155 views

Security concerns with OpenAlias

As I understand it if someone is able to hack my DNS server and edit my TXT DNS record on a FQDN (fully qualified domain name) they could alter the Monero address that the associated with my OpenAlias ...
13
votes
3answers
631 views

Is there any way of changing the password of an existing wallet?

Let's assume that my wallet's password was compromised. Is there any way of changing the password or do i have to create a new wallet and transfer all the funds there?
13
votes
1answer
456 views

Could Monero help me to implement a safe election for a small group of students?

The problem I am in charge of implementing a secure, secret election for a small group of students on my school. I have a list linking valid student IDs to emails, and I want each one of them to vote ...
12
votes
2answers
273 views

Number of Monero block explorers and their unique features

How many Monero block explorers are currently known to exist? What unique features separate one block explorer from another? What differences do they have in terms of privacy and security ...
11
votes
5answers
1k views

Can we practically compensate full nodes

Is it practical to compensate full nodes in the Monero network? The nodes that aren't mining The primary issue with non-Proof of Stake methods is the sybil attack, but requiring full nodes to already ...
11
votes
2answers
376 views

What type of security audits has Monero received?

What type of security audits has Monero received? Since this question already addressed cryptographic review of the Monero protocol, I am primarily interested in Monero source code and ...
10
votes
6answers
1k views

What are some ways I can disguise my mnemonic seed?

I'm thinking of storing my mnemonic seed on a few pieces of paper in secure locations, but I'm worried other people might find one of them and steal my funds. What are assume ways I can disguise this ...
10
votes
4answers
780 views

Is a Monero key backdoor possible?

Recently an article was published stating the possibility of the NSA or some other malicious organization creating backdoor undetectable Diffie-Hellman keys (source) to allow snooping. Is Monero at ...
10
votes
1answer
354 views

How does TumbleBit privacy and security compare with Monero?

How would a Bitcoin implementation of a TumbleBit payment hub compare with Monero? What are the important differences between the two in the areas of privacy and security?
10
votes
1answer
54 views

Has Monero published a definitive, concise threat model?

I2P's threat model consolidates various aspects of garlic/onion threat modeling into one document. Does Monero have a similar document and, if so, where can this document be found?
9
votes
1answer
353 views

What cryptographic assumptions is Monero based on?

Most crypto systems security are based on assumptions that certain problems are difficult, or some mathematical conjecture is true. The only counterexamples I can think of are the one time pad and ...
9
votes
1answer
2k views

How does Monero privacy and security compare to ZCoin?

How does Monero (XMR) privacy compare to ZCoin (XZC)? Can ZCoin protect the privacy of transaction amounts like Monero will do with RingCT, or are ZCoin transaction amounts visible similar to Monero ...
9
votes
1answer
509 views

Are Confidential Transactions in Monero perfectly binding or hiding?

Bitcoin contributor Pieter Wuille recently commented on Reddit: Bulletproofs and the Pedersen commitments they operate on are perfectly hiding, but not perfectly binding. This roughly means that ...
9
votes
1answer
147 views

What are specific security threats to a Monero GUI?

As the release of the official Monero GUI approaches, I would like to ask the best ways to secure our systems against possible theft. Apart from keyloggers catching your mnemonic seed or password, I ...
9
votes
1answer
470 views

Is it possible for an adversary to shut Monero down?

Imagine a government wants to ban XMR. Is it possible for them to do so? Only possible options, nothing like turning off the internet. And if it is possible, what could be done against that? Thank ...
9
votes
1answer
139 views

How is code reliability improved?

It seems that blockchain code written in C++ is prone to obscure but serious bugs such as recently seen in Zcoin. I know that rewriting Monero in a safer language is not practical in the short-term, ...
8
votes
3answers
3k views

Is the GUI Safe for storing thousands of monero?

How safe is it to store 5,000 monero on the GUI? I know it's beta though others have stated that it is safe to store there.
8
votes
2answers
976 views

How can we be sure that monero wallet addresses are unique?

This question is probably not necessarily limited to monero wallets, but I have been playing around with the Monero Offline Wallet Generator and wanted to know how anyone could ever be sure that a ...
8
votes
1answer
89 views

A SHA-1 collision has been found. Does that mean the Monero repositories on Github can be compromised?

Git (and thus Github) relies on the SHA-1 hash function to guarantee that files can't be secretly changed. Now a collision has been found: two different files that produce the same hash. The ...
8
votes
1answer
144 views

Issue with unforgeability proof of ASNL in RingCT paper

In the RingCT paper, proof of theorem 5.1 (The Aggregate Schnorr Non-linkable ring signature is unforgeable under the discrete logarithm assumption), it is assumed by contradiction that there exists ...
8
votes
1answer
195 views

Connecting Kovri through a VPN vs using Kovri directly

In terms of privacy and security what are the differences between to connecting Kovri through a VPN compared running Kovri directly? Would home, business or VPS IP addresses be better protected if a ...
7
votes
7answers
640 views

What are the most secure options for backing up your mnemonic seed?

You can gpg encrypt a text file or write it down on a piece of paper, but what are other good options to secure your mnemonic seed? I want to hear your ideas :)
7
votes
5answers
440 views

Does having a separated daemon add security risks to Monero?

For example, what if someone created malware to get in between the two programs (wallet and daemon), pretending to be the daemon and logging all the info before sending it along to the real daemon? I ...
7
votes
2answers
678 views

How do full nodes vs miners secure the network differently?

If I run a full node I am supposedly contributing to network security by keeping a copy of the blockchain If I mine (via pool or solo) I contribute to the network through verification of blocks How ...
7
votes
3answers
1k views

How to change password on a wallet created with simplewallet?

I have created a wallet using simplewallet, but I am not satisfied with the password. How do I go about changing the password on the wallet? (I am running monero.linux.x64.v0-9-4-0)
7
votes
3answers
944 views

Can a One-Time public key be used for more than one payment?

If I understand correctly, every new payment will ideally have a different one-time public key for increased privacy. However, could a one-time public key receive Monero more than once (as in ...
7
votes
1answer
344 views

How can I spend coins if other people can't see my balance?

So I have 5 monero, but if nobody else can see my balance, how can I prove that these coins are in my posession, and that they have not been spent yet. I just fail to see how Monero can ensure that ...
7
votes
1answer
291 views

Can I avoid Javascript poisoning when using MyMonero.com?

I read this from fluffyponyza regarding safety of his site MyMonero.com: There's simply no way I can control and guarantee the JavaScript delivery from the server to your computer, so you can be ...
7
votes
1answer
66 views

What is to stop an adversary from inserting malicious code through Monero's compiling software?

I know Monero typically uses things like the make command to compile its software, and I assume that these compilers are software themselves. What is to stop this compiling software from getting ...
7
votes
1answer
349 views

How to Connect a a Monero Wallet to a Monero-Based Website and How to Keep it Safe?

I'm hoping to create a Monero-based website based on the work by 'TheKoziTwo' (https://github.com/TheKoziTwo/xmr-integration). I'm nearing the end of the project and I'm now hoping to connect the ...
7
votes
2answers
366 views

Why does Monero use a 256 bit seed?

Apparently, ECC 256 bit keys have a bit strength of 128 bits. See https://crypto.stackexchange.com/questions/26791/how-many-bits-of-entropy-does-an-elliptic-curve-key-of-length-n-provide And ...
6
votes
3answers
125 views

Is it possible to integrate anti-keylogger in monero wallet?

Is it possible and make sense to integrate anti-keylogger directly into monero wallet, so keyloggers can't read and steal seed/password?
6
votes
3answers
164 views

After major coin issuance, what must the minimum XMR price be to incentivize network security?

I'm curious about the tail emission and transaction fees after major coin issuance. What is the minimum value that 1 XMR must sustain as an incentive for miners to continue maintaining network ...