20 votes
Accepted

Can I fake a balance by giving the view key to an auditor but omitting some transactions and key images?

The auditor will see that you have omitted part of the key images. The auditor can see all the outputs received by your account. Without the spend key, the auditor cannot generate the key images ...
user avatar
  • 34.6k
17 votes
Accepted

Why are rich lists impossible to create for Monero?

Using a combination of ring signatures (collections of cryptographic signatures with at least one real participant in each group) and stealth addresses (requiring the sender to create one-time ...
user avatar
16 votes
Accepted

How do I, as a recipient, verify that my transaction actually arrived?

First, theoretical background can be found here: Selective transparency in Monero vs Zcash Why is the viewkey able to track incoming transactions, but not outgoing transactions? Is there any way to ...
user avatar
  • 14.9k
15 votes
Accepted

Why is the viewkey able to track incoming transactions, but not outgoing transactions?

To answer this question, we first have to explain how Monero works. The letters used in this answer correspond to the letters used for the math in the CryptoNote whitepaper. Note that scalars (private ...
user avatar
  • 14.9k
11 votes
Accepted

How can a business or charity publish proof of XMR reserves?

Currently, this is not possible. There is however a patch that allows just this ready to be merged: https://github.com/moneromooo-monero/bitmonero/tree/signed-key-images This is possible: Two new ...
user avatar
  • 34.6k
10 votes

Why are rich lists impossible to create for Monero?

A richlist requires the ability to aggregate and accumulate outputs per account/address/owner/etc. This is not possible with Monero since every single output has its own one time address, which an ...
user avatar
  • 34.6k
9 votes
Accepted

Does publishing view key and key images give the auditor the information on where I sent the funds?

If the auditor wanted to confirm you had sent funds to a specific address, they'll then need to have the view key of that address also. The only thing the view key of your address can determine which ...
user avatar
7 votes
Accepted

Can view keys differentiate between payments and change?

If you think about it, change comes back in the same transaction as the money you sent. If you receive X monero as change, you will have sent Y monero in the same transaction, with Y > X. The answer ...
user avatar
  • 34.6k
6 votes
Accepted

Is making a key image public equal to giving the monero in that output away?

No, they cannot. An "output" is actually a one-time key-pair. It consists of a one-time public key, which resides on the blockchain, can be seen by everyone (but it can be matched to a ...
user avatar
  • 19.8k
5 votes
Accepted

How does Monero protect users from inflation bugs if the blockchain can't be audited?

The daemon command print_coinbase_tx_sum is useful for auditing the supply (sum of all coinbase transactions). help print_coinbase_tx_sum Command usage: print_coinbase_tx_sum <start_height>...
user avatar
  • 17.5k
5 votes

Does publishing view key and key images give the auditor the information on where I sent the funds?

It is impossible to calculate what the address is that corresponds to a given one-time address (there are actually multiple possibility). It is possible to check if a transaction corresponds to a ...
user avatar
  • 3,120
5 votes
Accepted

How do I, as a sender, verify that my transaction actually arrived?

First, theoretical background can be found here: Selective transparency in Monero vs Zcash Why is the viewkey able to track incoming transactions, but not outgoing transactions? What is the TX key? ...
user avatar
  • 14.9k
4 votes

Is making a key image public equal to giving the monero in that output away?

The key image is not the same as the actual key, so they should not be able to sign a transaction without the actual key. The key image prevents double spends, but it is not sufficient in of itself ...
user avatar
4 votes

Does publishing view key and key images give the auditor the information on where I sent the funds?

In monero transactions every output is sent to a One-Time Public Key (stealth address), which is derived from the recipient Public Key, the position or index of the output in the transaction and a ...
user avatar
3 votes

Why are rich lists impossible to create for Monero?

The business or charity can publish their public viewkeys. Monero is private by default and public by choice.
user avatar
3 votes

Is making a key image public equal to giving the monero in that output away?

Another explanation: there is a one-to-one mapping between an output public key P and its key image I as I=x*H_p(P) where x is the private key of P and H_p() is a hash-to-pubkey function. What's ...
user avatar
  • 2,475
3 votes
Accepted

How does the get_reserve_proof command work?

Yes. It is supposed to be a more privacy-preserving alternative to the previous method of proving the wallet balance to an auditor by giving out the view key and signed key images. (In my opinion, the ...
user avatar
  • 694
3 votes
Accepted

Is it easily provable by a third party that the key image used in a transaction is associated with the spent output without revealing the (P,I) pair?

The signature verification algorithm will only return a "correct signature" result if P is equal to x·G (i.e. the real spent output's public key is derived from the output's secret spend key x) and if ...
user avatar
  • 3,304
2 votes
Accepted

Auditing outgoing transactions in Monero

Yes, this is called a SpendProofV1 and is implemented by the official Monero wallet. See this answer: What is the "SpendProofV1..." or "OutProofV1..." in the details of a sent ...
user avatar
  • 8,398
2 votes
Accepted

Auditing incoming transactions in Monero

Yes, the view key proves that outputs were destined for a particular wallet address. It cannot be proven whether these outputs were subsequently spent, but it can be guessed that they have been spent ...
user avatar
  • 8,398
2 votes
Accepted

Can auditor restore transaction dates/times/amounts?

Viewkey only shows in which TX you received something so time, date and the amount you received. It can't possibly reveal source address because it's never actually written inside the TX. Spendkey ...
user avatar
  • 19.8k
2 votes
Accepted

Viewkey for outgoing transactions

Recently there was a post on Reddit asking almost the same question which generated quite some additional discussion (although without much positive outlook). Here's a comment by me giving an answer ...
user avatar
  • 2,475

Only top scored, non community-wiki answers of a minimum length are eligible