A rather significant bug has been spotted in Monero's decoy selection algorithm that may impact your transaction's privacy. Please read this whole thread carefully. Thanks @justinberman95 for investigating this bug.
1/6
1/6
@justinberman95 If users spend funds immediately following the lock time in the first 2 blocks allowable by consensus rules (~20 minutes after receiving funds), then there is a good probability that the output can be identified as the true spend.
2/6
2/6
This does not reveal anything about addresses or transaction amounts. Funds are never at risk of being stolen. This bug persists in the official wallet code today.
3/6
3/6
Users can substantially mitigate the risk to their privacy by waiting 1 hour or longer before spending their newly-received Monero, until a fix can be added in a future wallet software update. A full network upgrade (hard fork) is not required to address this bug.
4/6
4/6
The Monero Research Lab and Monero developers take this matter very seriously. We will provide an update when wallet fixes are available.
5/6
5/6
GitHub issue: github.com/monero-project…
Discussion: forum.monero.space/d/94-privacy-b…
Reddit: reddit.com/r/Monero/comme…
6/6
Discussion: forum.monero.space/d/94-privacy-b…
Reddit: reddit.com/r/Monero/comme…
6/6
• • •
Missing some Tweet in this thread? You can try to
force a refresh
