Share this article

Bug Found in Decoy Algorithm for Privacy Coin Monero

"This does not reveal anything about addresses or transaction amounts ... This bug persists in the official wallet code today," Monero said.

Updated Sep 14, 2021, 1:31 p.m. Published Jul 27, 2021, 6:36 a.m.
jwp-player-placeholder

A "significant" bug, with the potential to expose users' transactions, has been spotted in monero, a cryptocurrency that's known for providing users privacy, according to a Twitter post on Tuesday.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

  • The bug was identified in Monero's decoy selection algorithm. It occurs when a user spends their funds received in a transaction before roughly 20 minutes has passed.
  • There is a "good probability" the output of the new transaction can be identified as the true transaction, according to the tweet.
  • XMR allows users to conceal their transactions by including worthless coins known as “mixins” along with the actual coins they spend in a given transaction.
  • "This does not reveal anything about addresses or transaction amounts ... This bug persists in the official wallet code today," Monero said.
  • Users may avoid the bug altogether by waiting one hour or more before spending their newly received monero until a fix is implemented in a future wallet software update.
  • A hard fork is not required to fix the bug, Monero said.
  • U.S. software developer Justin Berman first spotted the bug.

Read more: Monero-for-Bail Project Sees Increased Demand During Protests

More For You

Pudgy Penguins: A New Blueprint for Tokenized Culture

Pudgy Title Image

Pudgy Penguins is building a multi-vertical consumer IP platform — combining phygital products, games, NFTs and PENGU to monetize culture at scale.

What to know:

Pudgy Penguins is emerging as one of the strongest NFT-native brands of this cycle, shifting from speculative “digital luxury goods” into a multi-vertical consumer IP platform. Its strategy is to acquire users through mainstream channels first; toys, retail partnerships and viral media, then onboard them into Web3 through games, NFTs and the PENGU token.

The ecosystem now spans phygital products (> $13M retail sales and >1M units sold), games and experiences (Pudgy Party surpassed 500k downloads in two weeks), and a widely distributed token (airdropped to 6M+ wallets). While the market is currently pricing Pudgy at a premium relative to traditional IP peers, sustained success depends on execution across retail expansion, gaming adoption and deeper token utility.

More For You

Anthony Scaramucci-linked AVAX One tumbles 32% on uncertainty around shareholder sales

Consensus 2025: Anthony Scaramucci, Founder, SkyBridge Capital

The firm, which holds AVAX tokens and related Avalanche ecosystem assets, registered roughly 74 million shares held by insiders.

What to know:

  • Shares of AVAX One, a digital asset treasury firm advised by Anthony Scaramucci, fell more than 30% after the company filed to register up to nearly 74 million shares held by insiders as available for sale.
  • The registration, which enables early investors to resell previously restricted stock, stoked fears of dilution.
  • AVAX One's move reflects broader pressures on crypto-native public firms whose stocks trade at steep discounts to the value of their token holdings, though it remains unclear if or when the registered shares will be sold.