this post was submitted on 03 Nov 2023
12 points (80.0% liked)

Monero

1667 readers
15 users here now

This is the lemmy community of Monero (XMR), a secure, private, untraceable currency that is open-source and freely available to all.

GitHub

StackExchange

Twitter

Wallets

Desktop (CLI, GUI)

Desktop (Feather)

Mac & Linux (Cake Wallet)

Web (MyMonero)

Android (Monerujo)

Android (MyMonero)

Android (Cake Wallet) / (Monero.com)

Android (Stack Wallet)

iOS (MyMonero)

iOS (Cake Wallet) / (Monero.com)

iOS (Stack Wallet)

iOS (Edge Wallet)

Instance tags for discoverability:

Monero, XMR, crypto, cryptocurrency

founded 1 year ago
MODERATORS
top 11 comments
sorted by: hot top controversial new old
[–] [email protected] 6 points 1 year ago* (last edited 1 year ago) (2 children)

I’d avoid anything related to Cake Wallet (e.g. its remote nodes), seeing that the OP sgp = SamsungGalaxyPlayer is doing this side business—chain analysis, offering suspicious activity reports for CEXes, ready to collaborate with law enforcement if paid.

In 2022, it was noticed that someone from Team Cymru, a company trading net flow data, was a board member of the Tor Project, providing bandwidth, hardware, bridges (entry points to the Tor network). There was a fix: Remove Team Cymru hard-coded bridges.

Now “Moonstone Research” is proudly saying they can trace things that other companies can’t, and they’re related to Cake Wallet directly or at least indirectly, or so it seems.

This possible suspicion aside, the analysis itself is interesting. While it might be good news if we can identify the attacker, that would be actually very bad news for Monero!

[–] [email protected] 3 points 1 year ago (1 children)

if we can identify the attacker, that would be actually very bad news for Monero!

Yes and no - Monero is well on the way to transitioning to the (nearly) full chain Decoy Selection range WIP

[–] [email protected] 1 points 1 year ago

True. And no one even knows (yet) what was the problem to begin with.

[–] [email protected] 3 points 1 year ago (1 children)

I'm thankful that this research organization is making these publications public. If the data is there, and it can be analyzed, it's good that we're aware of it. Our threat model should be based on capabilities, and demonstrating a capability is valuable.

I want to thank SGP for posting this.

[–] [email protected] 2 points 1 year ago

My thought exactly, when I first read it. Still, just in case, I’d avoid using remote nodes related to Cake Wallet. It might be “honey pot flavored” cake, haha, although I’d like to believe that’s not true. Come to think of it, the monero.com domain must have been really expensive.

[–] [email protected] 2 points 1 year ago

Moonstone Research Study Etches Doubts on Monero’s Privacy; Crypto Community Reacts

Moonstone’s investigation demonstrates, under certain circumstances, XMR transactions can sometimes be partially traced despite their privacy features. […] “Wow… not as private as everyone thinks,” one person remarked.

Simmons shared his perspective about Moonstone’s study as well and stressed that the specific tracing scenario doesn’t apply to the typical Monero user. […] He explained that the ability to trace resulted from unusual circumstances: private keys were shared with a chain surveillance company.

[–] [email protected] 1 points 1 year ago (1 children)

Identifying the pocket change transaction is really interesting.

One big talking point in monero, is fungible coins. No tainted coins. But it is interesting that this research firm has a tainted transaction, that they're encouraging exchanges to look for.

[–] [email protected] 4 points 1 year ago (1 children)

Right? On one hand it's awful the CCS fund was stolen and I hope they catch whoever did it. However, if they're caught using huristics of their transactions then it's a bow against the fungiablity of Monero.

[–] [email protected] 4 points 1 year ago (1 children)

Luckily there are contributors out there still helping to iterate monero instead of forking to make a new version and claiming they are the creator.

[–] [email protected] 2 points 1 year ago (1 children)

Is that a dig at signals mobile coin?

[–] [email protected] 2 points 1 year ago