Bug found in Decoy algorithm for privacy coin Monero
|A “significant” bug, with the potential to expose users’ transaction details, has been spotted in the privacy-centric cryptocurrency Monero (XMR), according to a Twitter post on Tuesday.
-
The bug, identified in Monero's decoy selection algorithm, occurs when a user spends their funds received in a transaction before roughly 20 minutes has passed.
-
There is a "good probability" the output of the new transaction can be identified as the true transaction, according to the tweet.
-
XMR allows users to conceal their transactions by including worthless coins known as “mixins” along with the actual coins they spend in a given transaction.
-
"This does not reveal anything about addresses or transaction amounts ... This bug persists in the official wallet code today," said Monero.
-
Users may avoid the bug altogether by waiting one hour or more before spending their newly-received Monero until a fix is implemented in a future wallet software update.
-
A hard fork is not required to fix the bug, Monero said.
-
U.S. Software developer Justin Berman first spotted the bug.
Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers.