What You Need To Know About Monero’s Decoy Selection Bug

Taasavaldanud Platon

järgijaid: 0

The developers of privacy-centric cryptocurrency, Monero have identified a “rather significant” bug in the algorithm that could allow for transaction destinations to be identified.

Twitteri teatel niit poolt Arendajad:

“If users spend funds immediately following the lock time in the first 2 blocks allowable by consensus rules (~20 minutes after receiving funds), then there is a good probability that the output can be identified as the true spend. “

The developers also stated on Twitter that:

This does not reveal anything about addresses or transaction amounts. Funds are never at risk of being stolen. This bug persists in the official wallet code today.

Developer Justin Berman investigated the bug initially and the team informed that the bug in the decoy selection algorithm led to “next to 0 chance of selecting extremely recent outputs as decoys.” This simply meant that if the users spend their Monero [XMR] tokens within roughly 20 minutes of receiving them, there was a high chance of their transaction being identified as the real one among the several fake transactions.

As per Berman’s ülevaade of the decoy selection algorithm:

"Kui kasutaja kulutab täna väljundi otse blokis, mille ta avab, ja väljund loodi algselt plokis, milles on kokku vähem kui 100 väljundit, oleks tema tegelik väljund ringis selgelt tuvastatav."

Monero currently has a yearly average of 63 outputs per block and according to Berman, “outputs that are spent immediately when they unlock are likey identifiable in rings today.”

Monero developers noted that they were working towards a fix. Berman informed that the fix will certainly require a change in decoy selection and that would have some impact on transaction uniformity. However, it was worth märkides that the funds were safe, but the bug persists in the official wallet code today.

Meanwhile, XMR has been noting a straight week of growth. The digital asset reported a 27.61% surge in the past six days and was currently trading at $221.94.