Jekyll2026-02-03T12:01:09+00:00https://www.getmonero.org/feed.xmlMoneroMonero is a digital currency that is secure, private, and untraceable.Monero 0.18.4.5 'Fluorine Fermi' released2026-01-11T00:00:00+00:002026-01-11T00:00:00+00:00https://www.getmonero.org/2026/01/11/monero-0.18.4.5-released

Overview

This is the v0.18.4.5 release of the Monero software. This release fixes a bug with Ledger hardware wallet.

Some highlights of this release are:

  • Ledger: fix Ledger Monero app crash (#10234)
  • Ledger: add support for Ledger Nano Gen5 (#10243)
  • Daemon: fix race condition causing dropped connections during sync (#10257)
  • Wallet: fix edge case where key images remain marked unspent (#10255)
  • Improve terminal color detection (#10268)
  • Minor bug fixes and improvements

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 7 people who worked to put out 16 commits containing 76 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • tobtoht
  • plowsof
  • nahuhh
  • selsta
  • laanwj
  • iamamyth
  • j-berman

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-win-x64-v0.18.4.5.zip, a58132eefdecf6bd5443ae52fc15c0c371499de17223667173e5c81d12bfc2c5
monero-win-x86-v0.18.4.5.zip, 6a0eff6b06fe9b1372a64744900bfe19b47a532b6678d6f7055c2de9999b58d1
monero-mac-x64-v0.18.4.5.tar.bz2, b92a2cebde86bf87ebcdfa9cab8e20ae4b3697798058c3de71945267f361a984
monero-mac-armv8-v0.18.4.5.tar.bz2, f6b91dd7cb06483941945e6a1dc455ed80360092c138a1d1af53dc31985bd8d8
monero-linux-x64-v0.18.4.5.tar.bz2, 423b49f3658e29f70a1d971667dec924c7ee7a107cfc93440456e28500b471a6
monero-linux-x86-v0.18.4.5.tar.bz2, 9960aba30ab2ffc3450a4865e707a60615661ae5c32f3b90da74f1c0a38e4bc0
monero-linux-armv8-v0.18.4.5.tar.bz2, a1667e15307f0dfce2f25f882238c432aee14884219ff0d0be07d7bee959a903
monero-linux-armv7-v0.18.4.5.tar.bz2, 42fbcbcf678794d6b104134bb7218093d6aa2764cc9cfa6fad404a4648a7c38a
monero-linux-riscv64-v0.18.4.5.tar.bz2 ed06d510dc53412362fa22a2149d709eb3b60f973583ebf33bbfbc9edc58f2ab
monero-android-armv8-v0.18.4.5.tar.bz2, 4d48830d0d6494b27bf1144b9546e5e7bccc7eef0f6991a16ae2bf6ac71a69d9
monero-android-armv7-v0.18.4.5.tar.bz2, 3cd6611c5c33ae4c10e52698826560bbb17e00cf2f8a2d7f61e79d28f0f36ef6
monero-freebsd-x64-v0.18.4.5.tar.bz2, a2e924a2293e1d0c192f6e50748dcbcbb58dd9d5ad2b6733ffccefad37c556cf

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaMonero GUI 0.18.4.5 'Fluorine Fermi' released2026-01-11T00:00:00+00:002026-01-11T00:00:00+00:00https://www.getmonero.org/2026/01/11/monero-GUI-0.18.4.5-released

Overview

This is the v0.18.4.5 release of the Monero GUI software. This release fixes a bug with Ledger hardware wallet.

The latest CLI release notes can be found on the precedent blog post

Some highlights of this release are:

  • Fix Ledger Monero app crash (#4534)
  • Add support for Ledger Nano Gen5 (#4539)
  • Update P2Pool to v4.13 (#4543)
  • Improve macOS dark mode support (#4537)
  • Minor bug fixes

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 5 people who worked, to put out 12 commits containing 25 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • tobtoht
  • SChernykh
  • plowsof
  • selsta
  • nabijaczleweli

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

A complete guide for the GUI wallet is included in the archives, but an online version is available.

Download Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-gui-win-x64-v0.18.4.5.zip, 9f3cf22fdb12cec1df6b1cb4cbe78d48457d68cbccdc46a82920a167885a988c
monero-gui-install-win-x64-v0.18.4.5.exe, 4d0cefe9d639bf2a31c02470c53d2f01c09d31165cedcc6eba184f1ccc7ed196
monero-gui-mac-x64-v0.18.4.5.dmg, aa1b818b7dea2a6315b7a25216e8661b5d4378d1823aa8747c8b39aac59232a0
monero-gui-mac-armv8-v0.18.4.5.dmg, 6b10e9336d9eb804f518a3815152e236ff5615fac3578a445500d92c572949c9
monero-gui-linux-x64-v0.18.4.5.tar.bz2, 6200d97615f23a3701c2cc51da3e9472ccd71561c259ca62f60030ef40ce785c

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaMonero 0.18.4.4 'Fluorine Fermi' released2025-11-14T00:00:00+00:002025-11-14T00:00:00+00:00https://www.getmonero.org/2025/11/14/monero-0.18.4.4-released

Overview

This is the v0.18.4.4 release of the Monero software. This is a recommended release that fixes a bug with Ledger hardware wallet when rejecting secret view key export.

Some highlights of this release are:

  • Ledger: make secret view key export mandatory (#10195)
  • Wallet: identify spends in pool when scanning (#10153)
  • Daemon: relay empty fluffy block on found block (#10206)
  • Daemon: correct txpool weight miscalculation in edge case (#10204)
  • Daemon: refine sync height selection logic (#10202)
  • Additional logging deadlock fixes (#10194)
  • Minor bug fixes and improvements

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 4 people who worked to put out 14 commits containing 286 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • tobtoht
  • 0xFFFC0000
  • selsta
  • j-berman

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-win-x64-v0.18.4.4.zip, 7eb3b87a105b3711361dd2b3e492ad14219d21ed8fd3dd726573a6cbd96e83a6
monero-win-x86-v0.18.4.4.zip, a148a2bd2b14183fb36e2cf917fce6f33fb687564db2ed53193b8432097ab398
monero-mac-x64-v0.18.4.4.tar.bz2, af3d98f09da94632db3e2f53c62cc612e70bf94aa5942d2a5200b4393cd9c842
monero-mac-armv8-v0.18.4.4.tar.bz2, 645e9bbae0275f555b2d72a9aa30d5f382df787ca9528d531521750ce2da9768
monero-linux-x64-v0.18.4.4.tar.bz2, 7fe45ee9aade429ccdcfcad93b905ba45da5d3b46d2dc8c6d5afc48bd9e7f108
monero-linux-x86-v0.18.4.4.tar.bz2, 8c174b756e104534f3d3a69fe68af66d6dc4d66afa97dfe31735f8d069d20570
monero-linux-armv8-v0.18.4.4.tar.bz2, b9daede195a24bdd05bba68cb5cb21e42c2e18b82d4d134850408078a44231c5
monero-linux-armv7-v0.18.4.4.tar.bz2, 2040dc22748ef39ed8a755324d2515261b65315c67b91f449fa1617c5978910b
monero-linux-riscv64-v0.18.4.4.tar.bz2 c939ea6e8002798f24a56ac03cbfc4ff586f70d7d9c3321b7794b3bcd1fa4c45
monero-android-armv8-v0.18.4.4.tar.bz2, eb81b71f029884ab5fec76597be583982c95fd7dc3fc5f5083a422669cee311e
monero-android-armv7-v0.18.4.4.tar.bz2, 7c2ad18ca3a1ad5bc603630ca935a753537a38a803e98d645edd6a3b94a5f036
monero-freebsd-x64-v0.18.4.4.tar.bz2, bc539178df23d1ae8b69569d9c328b5438ae585c0aacbebe12d8e7d387a745b0

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaMonero GUI 0.18.4.4 'Fluorine Fermi' released2025-11-14T00:00:00+00:002025-11-14T00:00:00+00:00https://www.getmonero.org/2025/11/14/monero-GUI-0.18.4.4-released

Overview

This is the v0.18.4.4 release of the Monero GUI software. This is a recommended release that fixes a bug with Ledger hardware wallet when rejecting secret view key export.

The latest CLI release notes can be found on the precedent blog post

Some highlights of this release are:

  • Fix Ledger hardware wallet bug when rejecting secret view key export
  • Update P2Pool to v4.12 (#4519)
  • Minor bug fixes

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 3 people who worked, to put out 6 commits containing 23 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • tobtoht
  • SChernykh
  • selsta

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

A complete guide for the GUI wallet is included in the archives, but an online version is available.

Download Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-gui-win-x64-v0.18.4.4.zip, b96faa56aa77cabed1f31f3fc9496e756a8da8c1124da2b9cb0b3730a8b6fbd9
monero-gui-install-win-x64-v0.18.4.4.exe, 4c81c8e97bd542daa453776d888557db1ceb2a718d43f6135ad68b12c8119948
monero-gui-mac-x64-v0.18.4.4.dmg, 811df70811a25f31289f24ebc0edc8f7648670384698d4c768bac5c2acbf2026
monero-gui-mac-armv8-v0.18.4.4.dmg, a6f071719c401df339dba2d43ec6fffe103fda3e1df46f354b2496f34bb61cc4
monero-gui-linux-x64-v0.18.4.4.tar.bz2, e45cb3fa9d972d67628cfed6463fb7604ae1414a11ba449f5e2f901c769ac788

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaMonero 0.18.4.3 'Fluorine Fermi' released2025-10-08T00:00:00+00:002025-10-08T00:00:00+00:00https://www.getmonero.org/2025/10/08/monero-0.18.4.3-released

Overview

This is the v0.18.4.3 release of the Monero software. This is a highly recommended release that enhances protection against spy nodes.

Some highlights of this release are:

  • Wallet: increase batch subaddress creation limit to match RPC (#10098)
  • Wallet: warn instead of throw when RingDB doesn't include spend (#10150)
  • Daemon: improved peer selection with /24 subnet deduplication to disadvantage 'spy nodes' (#10113)
  • Daemon: add max_block_count field to getblocks.bin RPC request (#9901)
  • Daemon: send ZMQ miner notifications after txpool additions (#10104)
  • Daemon: seed node maintenance (#10105, #10112, #10115)
  • Daemon: fix on_getblockhash error return on too high height (#10125)
  • RPC: allow creating more than 64 addresses at once (#10096)
  • Fix logging deadlock (#10066)
  • Minor bug fixes and improvements

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 13 people who worked to put out 36 commits containing 253 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • tobtoht
  • vtnerd
  • 0xFFFC0000
  • nahuhh
  • moneromooo
  • WeebDataHoarder
  • jeffro256
  • Gingeropolous
  • lalanza808
  • rbrunner7
  • hinto-janai
  • selsta
  • j-berman

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-win-x64-v0.18.4.3.zip, bd9f615657c35d2d7dd9a5168ad54f1547dbf9a335dee7f12fab115f6f394e36
monero-win-x86-v0.18.4.3.zip, e642ed7bbfa34c30b185387fa553aa9c3ea608db1f3fc0e9332afa9b522c9c1a
monero-mac-x64-v0.18.4.3.tar.bz2, a8d8273b14f31569f5b7aa3063fbd322e3caec3d63f9f51e287dfc539c7f7d61
monero-mac-armv8-v0.18.4.3.tar.bz2, bab9a6d3c2ca519386cff5ff0b5601642a495ed1a209736acaf354468cba1145
monero-linux-x64-v0.18.4.3.tar.bz2, 3a7b36ae4da831a4e9913e0a891728f4c43cd320f9b136cdb6686b1d0a33fafa
monero-linux-x86-v0.18.4.3.tar.bz2, e0b51ca71934c33cb83cfa8535ffffebf431a2fc9efe3acf2baad96fb6ce21ec
monero-linux-armv8-v0.18.4.3.tar.bz2, b1cc5f135de3ba8512d56deb4b536b38c41addde922b2a53bf443aeaf2a5a800
monero-linux-armv7-v0.18.4.3.tar.bz2, 3ac83049bc565fb5238501f0fa629cdd473bbe94d5fb815088af8e6ff1d761cd
monero-linux-riscv64-v0.18.4.3.tar.bz2 95baaa6e8957b92caeaed7fb19b5c2659373df8dd5f4de2601ed3dae7b17ce2f
monero-android-armv8-v0.18.4.3.tar.bz2, 1aebd24aaaec3d1e87a64163f2e30ab2cd45f3902a7a859413f6870944775c21
monero-android-armv7-v0.18.4.3.tar.bz2, 4e1481835824b9233f204553d4a19645274824f3f6185d8a4b50198470752f54
monero-freebsd-x64-v0.18.4.3.tar.bz2, ff7b9c5cf2cb3d602c3dff1902ac0bc3394768cefc260b6003a9ad4bcfb7c6a4

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaMonero GUI 0.18.4.3 'Fluorine Fermi' released2025-10-08T00:00:00+00:002025-10-08T00:00:00+00:00https://www.getmonero.org/2025/10/08/monero-GUI-0.18.4.3-released

Overview

This is the v0.18.4.3 release of the Monero GUI software. This is a highly recommended release that enhances protection against spy nodes when using a local node.

The latest CLI release notes can be found on the precedent blog post

Some highlights of this release are:

  • Add support for Ledger Flex (#4494)
  • Update Qt to 5.15.17 (#4498)
  • Update P2Pool to v4.11 (#4505)
  • Minor bug fixes

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 4 people who worked, to put out 18 commits containing 61 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • luigi1111
  • tobtoht
  • SChernykh
  • selsta

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

A complete guide for the GUI wallet is included in the archives, but an online version is available.

Download Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-gui-win-x64-v0.18.4.3.zip, dc9531cb4319b37b2c2dea4126e44a0fe6e7b6f34d278ccf5dd9ba693e3031e0
monero-gui-install-win-x64-v0.18.4.3.exe, 7b9255c696a462a00a810d9c8f94e60400a9e7d6438e8d6a8b693e9c13dca9ab
monero-gui-mac-x64-v0.18.4.3.dmg, 27243b01f030fdae68c59cae1daf21f530bbadeaf10579d2908db9a834191cee
monero-gui-mac-armv8-v0.18.4.3.dmg, 68ea30db32efb4a0671ec723297b6629d932fa188edf76edb38a37adaa3528e6
monero-gui-linux-x64-v0.18.4.3.tar.bz2, 0bd84de0a7c18b2a3ea8e8eff2194ae000cf1060045badfd4ab48674bc1b9325

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaFCMP++ Optimization Competition Results2025-08-27T00:00:00+00:002025-08-27T00:00:00+00:00https://www.getmonero.org/2025/08/27/fcmp++-contest-finalWe held a contest to optimize two libraries used in Monero's proposed upgrade to FCMP++: helioselene and ec-divisors. We have officially declared the winners of the contest!

EC Divisors (250 XMR prize)

Winner: @fabrizio-m

Fabrizio sped up the divisors library by over 95%. You can see the excellent submission here.

ec-divisors is a library implementing the calculation of divisors of elliptic curve points. These lead to efficient verification of scalar multiplications, as posited by Liam Eagen. FCMP++ uses EC Divisors to improve efficiency generally. This competition was focused on optimizing divisor construction, which affects transaction construction.

Managing slow divisors construction was a pain point for the FCMP++ integration. Fabrizio's 95%+ improvement effectively renders divisors construction negligible. Thanks to Fabrizio, we can now significantly simplify the final FCMP++ integration, and improve the user experience.

helioselene (100 XMR 1st place prize, 30 XMR 2nd place prize)

1st place: @lederstrumpf
2nd place: @rafael-xmr

Lederstrumpf's submission achieved a weighted speed-up of 22% on an AMD Ryzen 5600G, and improved the weighted WASM cycle count by 39%. The judges unanimously declared Lederstrumpf's submission the winner! Lederstrumpf's submission was the strongest foundation to build on. You can see the excellent submission here. As of this writing, @kayabaNerve has already improved on the submission here.

helioselene is a library implementing two curves, "Helios" and "Selene," which form a curve cycle towering Ed25519. Using a "tower cycle" over Ed25519 allows Monero to re-use the existing anonymity set while upgrading to FCMP++. This library is a critical component used in all aspects of FCMP++. Optimizing this library will therefore benefit all user-facing components of FCMP++ (daemon sync, wallet sync, and transaction construction).

Although not part of the official contest rules, we decided to award a 2nd place prize to Rafael, since we unanimously agreed Rafael's submission was 2nd best. Had we not received a submission from Lederstrumpf, we would have had an excellent submission to fall back on here. As such, we sought to reward Rafael's strong effort.

We received a number of quality submissions to this contest, and want to thank all contestants for participating! You can read more on our rationale for selecting the winner here.

What we learned

Form stricter bounds on exactly what code can be modified

Some code in a repo required for tests / benchmarks to run might not be in scope of the competition. Be as clear about which code is out of scope as possible. Explicitly tell contestants that modifiying certain code will be disqualifying.

Form stricter API requirements

Similar to the previous point, be crystal clear about the requirements the API of the code must take on and if it should even be allowed to be modified. Preferably provide downstream code that the API must compile and function correctly with.

Present concrete architectures and toolchains for which the code must run in constant-time

Code runs in constant-time or doesn't on specific architectures and toolchains. For example, LLVM to x86 generates variable-time code for u128 arithmetic in Rust, but constant-time code on x86_64. Give contestants examples of specific toolchains and architectures for which the code must compile to constant-time.

Allocate time for review and 2nd phase

No matter how well you think you define the competition rules, there may be scenarios which crop up where there was widespread confusion about the rules. There may be multiple submissions which have a lot of good work in them, but are in the gray area of validity. A review phase allows judges to clarify rules with contestants and refine submissions, and planning for this ahead of time helps to avoid misunderstandings.

Allocate time for deadline extensions

This one is pretty self-explanatory. Sometimes you need a deadline extension for unforseen circumstances, so allocate time for it.

Make a policy for non-1st place prizes

In a situation where anonymous submissions are allowed, 2nd place prizes can be gamed very easily. Also, game theory states that for a lot of competitions, the best incentive structure is winner-take-all. However, in the case where two submitters are certainly distinct competitors, and both submissions are close in quality, a 2nd place prize may be warranted. This is doubly true when parts of the code of the non-1st place are to be used in production code. Allocate funds for this scenario before the competition, but make sure to clarify that awarding such a prize is strictly up to the judgement of the judges.

Clarify rules for vendored dependencies

If you want to make rules about dependencies in the competition, make sure to specify rules about heavily modified and/or vendored dependencies before the start of the competition.

Spend more time marketing competition in specific circles where people do code competitions

There was a lot of good outreach for the FCMP++ competition, but some of the most fruitful outreach was to circles where there are already a lot of people doing coding/crypto competitions, who aren't necessarily involved in the Monero sphere.

Make sure that submitters always license their code under a permissive license

MIT, BSD, or even GPL, etc.

Setup an optional direct channel of communication for the contestants

Before the competiton starts, setup an offical, but optional, method of communication that lets judges push rule updates, feedback, announcements, etc to contestants. Otherwise, scrambling to find and message each contestant gets hectic very quickly.

]]>Justin Berman (j-berman) and jeffro256Monero 0.18.4.2 'Fluorine Fermi' released2025-08-26T00:00:00+00:002025-08-26T00:00:00+00:00https://www.getmonero.org/2025/08/26/monero-0.18.4.2-released

Overview

This is the v0.18.4.2 release of the Monero software. This is a recommended release that fixes a privacy leak when using a malicious remote node.

Some highlights of this release are:

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 7 people who worked to put out 12 commits containing 39 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • tobtoht
  • cho-m
  • vtnerd
  • woodser
  • jeffro256
  • selsta
  • j-berman

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-win-x64-v0.18.4.2.zip, 14dd5aa11308f106183dd7834aa200e74ce6f3497103973696b556e893a4fef2
monero-win-x86-v0.18.4.2.zip, 934d9dbeb06ff5610d2c96ebe34fa480e74f78eaeb3fa3e47d89b7961c9bc5e0
monero-mac-x64-v0.18.4.2.tar.bz2, b1b1b580320118d3b6eaa5575fdbd73cf4db90fcc025b7abf875c5e5b4e335c1
monero-mac-armv8-v0.18.4.2.tar.bz2, 9b98da6911b4769abef229c20e21f29d919b11db156965d6f139d2e1ad6625c2
monero-linux-x64-v0.18.4.2.tar.bz2, 41d023f2357244ea43ee0a74796f5705ce75ce7373a5865d4959fefa13ecab06
monero-linux-x86-v0.18.4.2.tar.bz2, 03e77a4836861a47430664fa703dd149a355b3b214bc400b04ed38eb064a3ef0
monero-linux-armv8-v0.18.4.2.tar.bz2, a39530054dac348b219f1048a24ca629da26990f72cf9c1f6b6853e3d8c39a79
monero-linux-armv7-v0.18.4.2.tar.bz2, ecb2577499a3b0901d731e11d462d3fadcd70095f3ab0def0c27ee64dc56b061
monero-linux-riscv64-v0.18.4.2.tar.bz2 18492ace80bf8ef2f44aa9a99b4f20adf00fd59c675a6a496211a720088d5d1a
monero-android-armv8-v0.18.4.2.tar.bz2, 3b248c3201f028205915403b4b2f173df0dd8bf47eeb268fd67a4661251469d3
monero-android-armv7-v0.18.4.2.tar.bz2, 6122f0bcaca12d5badd92002338847d16032f6d52d86155c203bcb67d4fe1518
monero-freebsd-x64-v0.18.4.2.tar.bz2, b4e2b7de80107a1b4613b878d8e2114244b3fb16397821d69baa72d9b0f8c8d5

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaMonero GUI 0.18.4.2 'Fluorine Fermi' released2025-08-26T00:00:00+00:002025-08-26T00:00:00+00:00https://www.getmonero.org/2025/08/26/monero-GUI-0.18.4.2-released

Overview

This is the v0.18.4.2 release of the Monero GUI software. This is a recommended release that fixes a privacy leak when using a malicious remote node.

The latest CLI release notes can be found on the precedent blog post

Some highlights of this release are:

  • Fix privacy leak with malicious remote node. For a detailed report, read Post mortem of find_and_save_rings() bug
  • Add background sync when locked functionality (#4050)
  • Update P2Pool to v4.9.1, fix Linux permission bug (#4490)
  • Add P2Pool nano sidechain (#4482)
  • Minor bug fixes

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 7 people who worked, to put out 12 commits containing 290 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • luigi1111
  • tobtoht
  • nahuhh
  • j-berman
  • SChernykh
  • selsta
  • xihuwenhua

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

A complete guide for the GUI wallet is included in the archives, but an online version is available.

Download Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-gui-win-x64-v0.18.4.2.zip, 4daff8850280173d46464ba9a9de7f712228ad1ef76a1c4954531e4fd2b86d86
monero-gui-install-win-x64-v0.18.4.2.exe, 9d6e87add7e3ac006ee34c13c4f629252595395f54421db768f72dc233e94ea8
monero-gui-mac-x64-v0.18.4.2.dmg, 16abadcbd608d4f7ba20d17a297f2aa2c9066d33f6f22bf3fcdca679ab603990
monero-gui-mac-armv8-v0.18.4.2.dmg, 3dfee5c5d8e000c72eb3755bf0eb03ca7c5928b69c3a241e147ad22d144e00a7
monero-gui-linux-x64-v0.18.4.2.tar.bz2, e4fcdea3f0ff27c3616a8a75545f42a4e4866ea374fa2eeaa9c87027573358ea

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaPost-Mortem of find_and_save_rings() bug2025-08-26T00:00:00+00:002025-08-26T00:00:00+00:00https://www.getmonero.org/2025/08/26/post-mortem-of-find-and-save-rings-bugQuick Facts
  • Severity: HIGH if using untrusted remote daemon, MEDIUM otherwise
  • Affected versions: GUI/CLI wallet versions v0.12.0.0 to v0.18.4.1
  • Impact: Sends TXIDs of outgoing transactions to daemon after first time loading wallet from file, reducing sender anonymity
  • Fix: Update Monero CLI / GUI to v0.18.4.2
  • Workaround: TBD

Introduction

In 2018, a persistent "ring database" was added to wallet2 to solve a sender privacy problem with forks of Monero. If an enote was received before a fork occurs, and a wallet tries spending that enote after the fork occurs on both forks, the same key image will appear in the input to both of those transactions on the different forks. By necessity, one of the ring members must be the same between those two forks (the "true spend"). If no other ring members are shared between those two inputs, but both ring signatures verify correctly, then an external observer can pin which ring member is the "true spend". This destroys sender anonymity. To combat this, a ring database is populated in a user directory which maps spent key images to their ring signatures. Then, if a forked wallet tries to spend an enote already spent on another chain, it will lookup up ring signature data from the local ring database, and try to re-use as many decoys from that ring as possible. This reduces the sender anonymity risk for spending enotes across different forks.

There are basically three ways that the ring database can be populated: the ring indices from transactions can be added from 1) scanned outgoing transactions during a normal chain refresh 2) transactions submitted to the network from that wallet and 3) already-known outgoing transactions after explicitly fetching them from the daemon. The method tools::wallet2::find_and_save_rings() implemented the latter of the three schemes. Its purpose was to populate the ring database for already-existing wallets created before the v0.12.0.0 release after which rings were added during refresh, without having to rescan the whole blockchain. However, as it turns out, tools::wallet2::find_and_save_rings() was called more often than it should have given its niche purpose.

Reproducing

Here are steps to reproduce the privacy leak using the CLI wallet (assumes working daemon connection):

  1. Create wallet (same-device keys, hardware wallet keys, multisig, etc), remember seed phrase if applicable
  2. Receive an enote, spend said enote, wait 10 blocks
  3. Delete (or move) wallet files, both keys and cache
  4. Restore wallet and refresh before saving
  5. Close wallet
  6. (Optional) Open packet inspection software (e.g. Wireshark) and begin logging RPC traffic (using --daemon-ssl disabled helps here)
  7. Re-open wallet
  8. Daemon now has list of confirmed outgoing transactions ☹️
  9. (Optional) If using packet inspection software, filter using the string gettransactions
  10. To repeat, go to step 3

Technical explanation

tools::wallet2::find_and_save_rings() was called unconditionally when loading a wallet from file, inside wallet2::load(). However, it would return early if the member field m_ring_history_saved was equal to true. At the end of the call to tools::wallet2::find_and_save_rings(), m_ring_history_saved is set to true. However, initializing a wallet2 object sets m_ring_history_saved to false. This field, m_ring_history_saved, is also serialized into the wallet cache file. So, after a wallet's first load, if there are scanned outgoing transactions in the cache during the first save, m_ring_history_saved is set to false so tools::wallet2::find_and_save_rings() proceeds. It grabs all TXIDs from outgoing transactions (stored in field member m_confirmed_txs), and performs a /gettransactions RPC call with that list of TXIDs to the daemon, leaking its outgoing transaction history. The RPC call is made without discriminating whether the daemon is marked as trusted or not.

Let's say that you delete the cache file and keep keys file. Note that while tools::wallet2::find_and_save_rings() is still called on load, the /gettransactions RPC call is skipped since a missing cache file causes m_confirmed_txs to be empty. m_ring_history_saved is still set to true at the end of the call, and so the RPC call will never be made henceforth. So merely deleting the cache file won't trigger the vulnerability, the keys file also needs to not be present.

  • Vulnerability introduction commit (master branch): 5f146873
  • Vulnerability fix commit (master branch): dc350f35

Privacy implications with ring signatures

When the aforementioned RPC call is triggered, the daemon receives a list of TXIDs of your wallets outgoing transactions. If a malicious operator of said daemon knows the receiver of the outputs in the outgoing transactions, then the operator can tie that wallet as sending funds to a certain receiver. Furthermore, because of the current ring size and size of the the blockchain, the probability of selecting your own owned outputs as a decoy in your own ring signatures is small. As such, a smart malicous operator, with a list of your outgoing TXIDs, can inspect the ring members of your going transactions and cross-reference if any of the members are outputs of transactions in the TXID list. If so, the operator can guess with high accuracy that a certain change output was spent in a certain ring in a later outgoing transaction. This allows the operator to construct a probabilistic transaction graph, without amount information, for a wallet's funds after entering possession.

]]>Jeffro256Monero 0.18.4.1 'Fluorine Fermi' released2025-07-25T00:00:00+00:002025-07-25T00:00:00+00:00https://www.getmonero.org/2025/07/25/monero-0.18.4.1-released

Overview

This is the v0.18.4.1 release of the Monero software. This release contains bug fixes.

Some highlights of this release are:

  • Wallet: fix stale multisig data after failed refresh (#9911)
  • Wallet: fix a bug when changing password (#9945)
  • Wallet: apply subaddress lookahead changes immediately (#9954)
  • Wallet respect do-not-relay in sweep_single (#9978)
  • Daemon: improve logic when connecting to a peer (#9949)
  • Daemon: add new dynamic fees to ZMQ (#9958)
  • RPC: fix edge case causing unresponsive wallet (#9950)
  • RPC: add set_subaddresss_lookahead endpoint (#9954)
  • Add safeguard for rare exception in TCP accept handler (#9956)
  • Minor bug fixes and improvements

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 14 people who worked to put out 46 commits containing 459 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • 0xFFFC0000
  • Tzadiko
  • jeffro256
  • j-berman
  • vtnerd
  • tobtoht
  • benevanoff
  • hinto-janai
  • luigi1111
  • nahuhh
  • selsta
  • MrCyjaneK
  • SNeedlewoods
  • rudolfschmidt

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-win-x64-v0.18.4.1.zip, c9612c399a957f4e6b9564cfec95ebf4f8b8864fef249b9edffd243fb05e45a0
monero-win-x86-v0.18.4.1.zip, bfebf4c0bcfd01cf8642457c7e27fd1c51058e38e8a439565d93340f40da6505
monero-mac-x64-v0.18.4.1.tar.bz2, dba3cd24f6d846f9df2221ddbfc26a503c1759dd908ad0af931ae62224d7a557
monero-mac-armv8-v0.18.4.1.tar.bz2, 6e6ae89a436ca02a033ce06e4389c810350f8f0a23292b95ae10ff4a30154817
monero-linux-x64-v0.18.4.1.tar.bz2, 702ccb799c24160c0c76676d7a5b21a7e3432be47294d20e0a75451592f591b2
monero-linux-x86-v0.18.4.1.tar.bz2, a36f57f7eeee15513cd51716a2f727fd84c7c1e5a8f48b30d69dd0b31aab4ee2
monero-linux-armv8-v0.18.4.1.tar.bz2, 948379e60e1b65e36bdfcc20481f2e381c49be057deb9fb5a2d030100f14d1e1
monero-linux-armv7-v0.18.4.1.tar.bz2, a080b9f703c9b09cb3713376d7679cda089e6772794bd0bfa994cb256b6f3535
monero-linux-riscv64-v0.18.4.1.tar.bz2 9120062277e37bb8b6dcf816fdcf4fb34a8f4c4c530ba1162bba7d7fc3c10e0a
monero-android-armv8-v0.18.4.1.tar.bz2, 918c10de18a125de407e8b984bd84000da354e994a13a18ee8d0af11c0870c22
monero-android-armv7-v0.18.4.1.tar.bz2, 02442c33b1a130da915b7901615c402d43c0b41be555197d8cec9bfcc78ea1c4
monero-freebsd-x64-v0.18.4.1.tar.bz2, e290c78c7989559ba4a6964ed83f574ecc81b9bc9640dad306ed576a6f812f30

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaMonero GUI 0.18.4.1 'Fluorine Fermi' released2025-07-25T00:00:00+00:002025-07-25T00:00:00+00:00https://www.getmonero.org/2025/07/25/monero-GUI-0.18.4.1-released

Overview

This is the v0.18.4.1 release of the Monero GUI software. This release contains bug fixes.

The latest CLI release notes can be found on the precedent blog post

Some highlights of this release are:

  • Update P2Pool to v4.8.1 (#4462)
  • Minor bug fixes

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 8 people who worked, to put out 22 commits containing 35 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • luigi1111
  • tobtoht
  • SChernykh
  • b4n6-b4n6
  • BaksiLi
  • spetterman66
  • CollinBartlam
  • selsta

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

A complete guide for the GUI wallet is included in the archives, but an online version is available.

Download Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-gui-win-x64-v0.18.4.1.zip, ab28f83f416ff21286bc2da88c6ba865d93397605f1ce51053435892b1342e89
monero-gui-install-win-x64-v0.18.4.1.exe, 29615bfbd10b4c46042c474b749f6e07836be30dd9bac6c32965064fcaf00d9b
monero-gui-mac-x64-v0.18.4.1.dmg, 4fd421b66af66a63be05bb289f5bb463d4bf763ad04722ec6794755498e65167
monero-gui-mac-armv8-v0.18.4.1.dmg, 9f0b5ae3732c7fc33dde5f662a78d0360f9b1e8dee47180e5b23cf9f0ce2a7d1
monero-gui-linux-x64-v0.18.4.1.tar.bz2, 60cbd662ccf1fdaf8732a21b6e505b806c6a4f62492c975fb1a13fd820dc8495

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaFCMP++ Optimization Competition2025-04-05T00:00:00+00:002025-04-05T00:00:00+00:00https://www.getmonero.org/2025/04/05/fcmp++-contestOfficially announcing a contest to optimize two libraries used in Monero's proposed upgrade to FCMP++: helioselene and ec-divisors. Read all contest rules and details here.

The winner for helioselene will receive 100 XMR, and the winner for ec-divisors will receive 250 XMR. This Monero will be paid out from the Monero General Fund.

The contest will open for submissions Monday, April 28th and will stop accepting submissions Monday, June 30th.

Why

helioselene is a library implementing two curves, "Helios" and "Selene," which form a curve cycle towering Ed25519. Using a "tower cycle" over Ed25519 allows Monero to re-use the existing anonymity set while upgrading to FCMP++. This library is a critical component used in all aspects of FCMP++. Optimizing this library will therefore benefit all user-facing components of FCMP++ (daemon sync, wallet sync, and transaction construction).

ec-divisors is a library implementing the calculation of divisors of elliptic curve points. These lead to efficient verification of scalar multiplications, as posited by Liam Eagen. FCMP++ uses EC Divisors to improve efficiency generally. This competition is focused on optimizing divisor construction, which affects transaction construction.

Who can participate

We will accept submissions from anyone (including anonymous users) provided that the submission meets all competition rules. If you have experience optimizing cryptographic libraries and/or are interested in contributing to Monero, here is as good of a chance as any!

Where

Please visit this link to read all the details on the contest, including rules, how to get started, and how to make a submission.

]]>Justin Berman (j-berman)Monero 0.18.4.0 'Fluorine Fermi' released2025-04-05T00:00:00+00:002025-04-05T00:00:00+00:00https://www.getmonero.org/2025/04/05/monero-0.18.4.0-released

Overview

This is the v0.18.4.0 release of the Monero software. This is a recommended release that fixes multiple daemon-related network vulnerabilities.

Some highlights of this release are:

  • Wallet: add background sync with just the view key (#8617)
  • Wallet: fix a potential sync issue during restore (#9601)
  • Wallet: flush confirm prompt before user input (#9657)
  • Daemon: reduce disk writes from 2 to 1 per transaction (#9740)
  • Daemon: fix a remote P2P crash vulnerability [reported by Kevin McSheehan]
  • Daemon: add configuration options to HTTP server, fix a remote RPC crash (#9775)
  • Daemon: fix temp fails causing alt blocks to be permanently invalid (#9400)
  • Daemon: allow comments in ban list file (#9616)
  • Daemon: fix daemon connection speed throttling incorrectly (#9460)
  • Daemon: fix --anonymous-inbound data leak (#9633)
  • Daemon: check for Windows NTFS compression (#9702)
  • Daemon: fix database size detection on Windows (#9705)
  • Daemon: update seed nodes (#9793)
  • RPC: add daemon-specific proxy support in set_daemon RPC call (#9590)
  • RPC: fix an issue where the wallet state does not save on close (#9615)
  • RPC: validate IP parameter in set_bans RPC call (#9703)
  • RPC: add RPC call to get default fee priority (#9788)
  • Minor bug fixes and improvements

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 17 people who worked to put out 124 commits containing 5607 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • nahuhh
  • 0xFFFC0000
  • Tzadiko
  • jeffro256
  • j-berman
  • vtnerd
  • tobtoht
  • luigi1111
  • eversinc33
  • jaredmo
  • iamamyth
  • woodser
  • bgermann
  • plowsof
  • tankf33der
  • selsta
  • nsec1

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-win-x64-v0.18.4.0.zip, 00151a96e96ef69eedf117c4900e6d0717ca074a61918cd94a55ed587544406b
monero-win-x86-v0.18.4.0.zip, 249a4247688c30ce95e8fb04ff656e97a4f8de83c31c58e7debb28dbcc2d2867
monero-mac-x64-v0.18.4.0.tar.bz2, c35a4065147f8eeaa130a219e12e450fb55561efe79ded7d935fbfe5f7ba324c
monero-mac-armv8-v0.18.4.0.tar.bz2, 9d36ec8a1da1f31d654a8fd8527f4cae03545d8292bb1a2fe434ca454b3c0976
monero-linux-x64-v0.18.4.0.tar.bz2, 16cb74c899922887827845a41d37c7f3121462792a540843f2fcabcc1603993f
monero-linux-x86-v0.18.4.0.tar.bz2, e00863e81b8b7473c46c461a3a45d09f09347c1a048da093ae0bf86db0f44355
monero-linux-armv8-v0.18.4.0.tar.bz2, f252b6a24e801535bf36fbaaa7b2d6ae44b1efc5d427803d483e3c3a17d6f2cd
monero-linux-armv7-v0.18.4.0.tar.bz2, b35b5e8d27d799cea6cf3ff539a672125292784739db41181b92a9c73e1c325b
monero-linux-riscv64-v0.18.4.0.tar.bz2 a0c0a807b90af1dd71faafbe2e66e4fda43210c2f11f8aa3514ccaedd268a0b3
monero-android-armv8-v0.18.4.0.tar.bz2, 0b976b241c45a75a9c428a531e8259e0e67c237f980ac46e19a3180b5c1dbf91
monero-android-armv7-v0.18.4.0.tar.bz2, 70ded1197db3fffa150e9f5c4eee0129026be8ea24190bad43a42f4748b5e5bd
monero-freebsd-x64-v0.18.4.0.tar.bz2, 55b1ae7d6622b3da4f81f56ab8da1854caa36150b91b3639c1485b73f42208e8

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaMonero GUI 0.18.4.0 'Fluorine Fermi' released2025-04-05T00:00:00+00:002025-04-05T00:00:00+00:00https://www.getmonero.org/2025/04/05/monero-GUI-0.18.4.0-released

Overview

This is the v0.18.4.0 release of the Monero GUI software. This is a recommended release that fixes multiple daemon-related network vulnerabilities.

The latest CLI release notes can be found on the precedent blog post

Some highlights of this release are:

  • Fix "Create Wallet" button getting stuck in some cases (#4351)
  • Fix testnet wallet detection (#4411)
  • Update P2Pool to v4.4 (#4417)
  • Update Qt to 5.15.16 (#4377)

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 7 people who worked, to put out 40 commits containing 106 new lines of code. We'd like to thank them very much for their time and effort. In no particular order, they are:

  • luigi1111
  • tobtoht
  • SChernykh
  • plowsof
  • Malinero
  • preland
  • selsta

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

A complete guide for the GUI wallet is included in the archives, but an online version is available.

Download Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-gui-win-x64-v0.18.4.0.zip, 38a0066fb2f1bea788cbb54377a6921c168a04c2e8fdf83e9245bf4f84dbc502
monero-gui-install-win-x64-v0.18.4.0.exe, 57cd67da191c02590a4f011b8c659db6603f53d8497237f6d737fc7053361bf6
monero-gui-mac-x64-v0.18.4.0.dmg, ae5cf12ba8c608e32ea8d59181f032666840e034031a95406b6771d7709984b8
monero-gui-mac-armv8-v0.18.4.0.dmg, d10e4c150180c6c241f7a76a573ee296b50682722c124a50de01403eea462b5b
monero-gui-linux-x64-v0.18.4.0.tar.bz2, e276f9e67396515f671a08c5438fb1db4358c9d8946ec7ef79b9dda552092ad7

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaOSPEAD - Optimal Ring Signature Research2025-04-05T00:00:00+00:002025-04-05T00:00:00+00:00https://www.getmonero.org/2025/04/05/ospead-optimal-ring-signature-researchTL;DR

New research reveals the timing of Monero spending patterns in probabilistic form. The research could be used to improve Monero user privacy in the future. In the meantime, Monero users with extreme threat models should be aware that anti-privacy adversaries can leverage timing information to increase the probability of guessing the real spend in a ring signature to approximately 1-in-4.2 instead of 1-in-16.

Introduction

Four technologies protect the privacy of Monero users. Dandelion++ protects users' IP addresses from being linked to their transactions. Confidential transactions hide the amount of value that is transferred between users. Monero's stealth address technique produces one-time-use addresses on the blockchain that cannot be linked to specific wallets without voluntary disclosure of view keys. Ring signatures obfuscate which stock of coins was spent in a transaction by combining the real spend with 15 decoy spends. This blog post discusses improvements and threats to Monero's ring signature privacy model.

As the name implies, a "decoy" serves its purpose well if it looks like the real thing. Decoys that do not match the spending patterns of real users will fail to draw the attention of an anti-privacy adversary. One of the most important spending patterns to match is the timing. The age of a stock of coins that a user spends, like units of physical paper currency circulating between consumers and merchants, forms a random probability distribution.

Monero's current decoy selection algorithm is based on research by Möser et al. (2018)1, which used de-anonymized transactions in the first three years of Monero's history whose real spend was known due to inadequate safeguards in the protocol. In 2017, the protocol safeguards were strengthened to thwart the techniques used by Möser et al. (2018)1. As a result, de-anonymized transactions could no longer be used to update the decoy selection distribution to align it with the real spend distribution. Another way forward was needed.

The research

Several peer-reviewed research articles suggested that near-optimal privacy for a given ring size could be provided by using a decoy distribution that closely mimics the real spend distribution (Aeeneh et al. 2021 2; Kumar et al. 2017 3; Möser et al. 2018 1; Ronge et al. 2021 4). However, some of the same papers doubted that the real spend distribution could be estimated reliably when only anonymized data was available. Rucknium, a researcher with the Monero Research Lab, proposed a method to directly estimate the real spend distribution using the ring signature data on the Monero blockchain. Members of the Monero community generously donated to fund the research plan, known as Optimal Static Parametric Estimation of Arbitrary Distributions (OSPEAD).

OSPEAD works by chaining together two statistical techniques. First, the Bonhomme-Jochmans-Robin estimator separates the distribution of rings that use the "standard" decoy selection algorithm from the distributions of rings that use decoy selection algorithms of "third-party" wallet software (Bonhomme, Jochmans, & Robin 2016).5 Next, the Patra-Sen inversion estimator is used to separate the decoy distribution from the real spend distribution (Patra & Sen 2016).6 Note that the OSPEAD research has not yet been formally peer-reviewed.

Producing a reliable estimate of the real spend age distribution is a double-edged sword. It provides great privacy when implemented in a decoy selection algorithm, yet it also enables an anti-privacy adversary to more easily guess the real spend when the actual decoy selection algorithm used by users is very different from the real spend distribution.

Privacy risk

As stated above, Monero's current decoy selection algorithm is based on data from the first three years of Monero's history when the number of transactions per day was less than 10 percent of current (2025) transaction volume. Real spending patterns have changed since 2017, yet the decoy selection algorithm has changed little.

The Maximum A Posteriori (MAP) Decoder attack, first described in hypothetical form by Aeeneh et al. (2021)5, leverages the difference between Monero's real spend distribution and its decoy distribution. Using the MAP Decoder attack and the real spend distribution estimated in the OSPEAD research, an anti-privacy adversary has a 1-in-4.2 probability of correctly guessing the real spend at current ring size of 16.

Users should consider the following metaphor to understand the mechanics of the attack. There are 16 horses scheduled for a race. The horses are not equally fast. According to the betting markets, one of the horses has a 1-in-4.2 probability of winning. The MAP Decoder attack does not remove 12 out of the 16 horses from the race, and then randomly pick among the remaining 4 with equal probability. Instead, it always bets on the one horse that is most likely to win. It wins the bet (guesses correctly) in 1 out of 4.2 races.

Let's continue the analogy of the horse race bettor. Did they pick the winning horse (the real spend)? Unlike a normal race, we usually don't learn the outcome (if the guess was correct). This limits the impact of the attack in practice, especially since the best guess is incorrect the majority of the time, on average.

Put another way, if you guess the real spend in 4 Monero rings, you will have guessed 1 of those correctly (on average), but you don't know which of those guesses is correct. Is that useful information? That depends on the standard of evidence of the adversary.

Probabilistic guessing can create elevated privacy risk to users with extreme threat models such as those targeted by blockchain surveillance firms, especially when combined with other de-anonymizing attacks. Interested users are encouraged to read the OSPEAD GitHub repository, where code and documents are released under open source licenses.

Developments to come

The OSPEAD-derived decoy selection distribution could be deployed to mitigate the risk of the MAP Decoder attack. However, a Monero network upgrade (hard fork) would be required for safest deployment. A network upgrade, though necessary for major improvement to Monero, is disruptive to the Monero ecosystem. The costs may outweigh the benefits.

Currently, the next expected hard fork is set to deploy Full-Chain Membership Proofs, which eliminate the weaknesses of the ring signature privacy model.

References

  1. Möser, M., Soska, K., Heilman, E., Lee, K., Heffan, H., & Srivastava, S., et al. (2018). An Empirical Analysis of Traceability in the Monero Blockchain, Proceedings on Privacy Enhancing Technologies, 2018(3), 143–163. ↩ ↩2 ↩3

  2. Aeeneh, S., Chervinski, J. O., Yu, J., & Zlatanov, N. (2021), New Attacks on the Untraceability of Transactions in CryptoNote-Style Blockchains. Paper presented at 2021 IEEE International Conference on Blockchain and Cryptocurrency (ICBC). ↩

  3. Kumar, A., Fischer, C., Tople, S., & Saxena, P. (2017), A Traceability Analysis of Monero’s Blockchain. Paper presented at European Symposium on Research in Computer Security (ESORICS). ↩

  4. Ronge, V., Egger, C., Lai, R. W. F., Schröder, D., & Yin, H. H. F. (2021). Foundations of Ring Sampling, Proceedings on Privacy Enhancing Technologies, 2021(3), 265–288. ↩

  5. Bonhomme, S., Jochmans, K., & Robin, J.-M. (2016). Non-parametric estimation of finite mixtures from repeated measurements, Journal of the Royal Statistical Society. Series B (Statistical Methodology), 78(1), 211–229. ↩ ↩2

  6. Patra, R. K., & Sen, B. (2016). Estimation of a two-component mixture model with applications to multiple testing, Journal of the Royal Statistical Society. Series B (Statistical Methodology), 78(4), 869–893. ↩

]]>RuckniumMonero 0.18.3.4 'Fluorine Fermi' released2024-08-20T00:00:00+00:002024-08-20T00:00:00+00:00https://www.getmonero.org/2024/08/20/monero-0.18.3.4-released

Overview

This is the v0.18.3.4 release of the Monero software. This release removes support for locked transfers.

Some highlights of this release are:

  • Remove support for locked transfers (#9311)
  • Daemon: skip privacy networks that don't have outgoing connections (#9267)
  • Daemon: prevent duplicate txs in fluff queue, fix unintended disconnections (#9355)
  • Daemon: ZMQ DaemonInfo bug fixes (#9385)
  • Wallet: fix stagenet wallet restore height estimate (#9309)
  • Wallet: add Ledger Flex support (#9430)
  • Fix a bug with log rotation mechanism (#9396)

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 8 people who worked, largely unpaid and altruistically, to put out 39 commits containing 535 new lines of code. We'd like to thank them very much for their time and effort. In no particular order they are:

  • 0xFFFC0000
  • j-berman
  • vtnerd
  • tobtoht
  • Boog900
  • luigi1111
  • selsta
  • jeffro256

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-win-x64-v0.18.3.4.zip, 54a66db6c892b2a0999754841f4ca68511741b88ea3ab20c7cd504a027f465f5
monero-win-x86-v0.18.3.4.zip, 1a9824742aa1587023c3bddea788c115940cfd49371c78a8dd62c40113132d01
monero-mac-x64-v0.18.3.4.tar.bz2, 32c449f562216d3d83154e708471236d07db7477d6b67f1936a0a85a5005f2b8
monero-mac-armv8-v0.18.3.4.tar.bz2, 44520cb3a05c2518ca9aeae1b2e3080fe2bba1e3596d014ceff1090dfcba8ab4
monero-linux-x64-v0.18.3.4.tar.bz2, 51ba03928d189c1c11b5379cab17dd9ae8d2230056dc05c872d0f8dba4a87f1d
monero-linux-x86-v0.18.3.4.tar.bz2, d7ca0878abff2919a0104d7ed29d9c35df9ca0ea1b6fb4ebf6c8f7607ffb9e41
monero-linux-armv8-v0.18.3.4.tar.bz2, 33ca2f0055529d225b61314c56370e35606b40edad61c91c859f873ed67a1ea7
monero-linux-armv7-v0.18.3.4.tar.bz2, 354603c56446fb0551cdd6933bce5a13590b7881e05979b7ec25d89e7e59a0e2
monero-linux-riscv64-v0.18.3.4.tar.bz2 88739a1521b9fda3154540268e416c7af016ed7857041c76ab8ed7d7674c71ca
monero-android-armv8-v0.18.3.4.tar.bz2, d9c9249d1408822ce36b346c6b9fb6b896cda16714d62117fb1c588a5201763c
monero-android-armv7-v0.18.3.4.tar.bz2, 15e4d7dfc2f9261a0a452b0f8fd157c33cdbc8a896e23d883ddd13e2480a3800
monero-freebsd-x64-v0.18.3.4.tar.bz2, 360a551388922c8991a9ba4abaa88676b0fc7ec1fa4d0f4b5c0500847e0b946c

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaMonero GUI 0.18.3.4 'Fluorine Fermi' released2024-08-20T00:00:00+00:002024-08-20T00:00:00+00:00https://www.getmonero.org/2024/08/20/monero-GUI-0.18.3.4-released

Overview

This is the v0.18.3.4 release of the Monero GUI software. This release adds support for Trezor Safe 5.

The latest CLI release notes can be found on the precedent blog post

Some highlights of this release are:

  • Add support for Trezor Safe 5 (#4332)
  • Enable pruning by default (#4320)
  • Allow @ in OpenAlias domain (#4308)
  • Fix stagenet restore height estimation (#4310)
  • Fix an edge case with desktop entry (#4300)
  • Update P2Pool to v4.1 (#4334)
  • Update Qt to 5.15.14 (#4321)

The complete list of changes is available on GitHub, along with the source code.

Contributors for this Release

This release was the direct result of 4 people who worked, largely unpaid and altruistically, to put out 22 commits containing 28 new lines of code. We'd like to thank them very much for their time and effort. In no particular order they are:

  • luigi1111
  • tobtoht
  • SChernykh
  • selsta

Download

The new binaries can be downloaded from the Downloads page or from the direct links below.

A complete guide for the GUI wallet is included in the archives, but an online version is available.

Download Hashes

If you would like to verify that you have downloaded the correct file, please use the following SHA256 hashes:

monero-gui-win-x64-v0.18.3.4.zip, b5d42dddd722e728e480337f89038c8ea606c6507bf0c88ddf2af25050c9b751
monero-gui-install-win-x64-v0.18.3.4.exe, 63349d5a7637cd0c5d1693a1a2e910a92cbb123903d57667077a36454845d7bf
monero-gui-mac-x64-v0.18.3.4.dmg, 54eb151d7511a9f26130864e2c02f258344803b2b68311c8be29850d7faef359
monero-gui-mac-armv8-v0.18.3.4.dmg, eedbf827513607a3ef579077dacd573e65892b199102effef97dff9d73138ca6
monero-gui-linux-x64-v0.18.3.4.tar.bz2, 2866f3a2be30e4c4113e6274cad1d6698f81c37ceebc6e8f084c57230a0f70a6

A GPG-signed list of the hashes is at https://www.getmonero.org/downloads/hashes.txt and should be treated as canonical, with the signature checked against the appropriate GPG key in the source code (in /utils/gpg_keys). To ensure that the files you download are those originally posted by the maintainers, you should both check that the hashes of your files match those on the signed list, and that the signature on the list is valid.

Two guides are available to guide you through the verification process: Verify binaries on Windows (beginner) and Verify binaries on Linux, Mac, or Windows command line (advanced).

]]>selstaPrivacy Advocates and Hackers to Gather for Annual Monero Conference & Hackathon in Prague2024-05-23T00:00:00+00:002024-05-23T00:00:00+00:00https://www.getmonero.org/2024/05/23/mk4Monero Konferenco (also known as "MoneroKon") brings together global privacy advocates, cypherpunks, and leading scientists to discuss advancements in privacy and financial technology. The conference and hackathon is to take place at the renowned Paralelní Polis in Prague, Czech Republic from 7th-9th June 2024.

The conference will include presentations and workshops on:

  • Human Rights and the Blockchain
  • Cryptocurrency Laws and Regulations
  • Unique privacy-preserving cryptographic methods
  • Novel implementations of zero-knowledge cryptographic schemes
  • Social and economic philosophies that promote the ideals of liberty and decentralisation

For the full published schedule, see: schedule.monerokon.org

Tickets can be purchased at: tickets.monerokon.org

The first ever Monero hackathon encourages hackers to build any app, or improve upon code, related directly, or indirectly, to Monero core codebase, or the greater Monero ecosystem for a chance to win prizes and bounties.

Apply to hack here: hack.monerokon.org

Press passes are available for members of the media who intend to cover the conference; please contact conference organisers to obtain one.

For additional information, contact the MoneroKon Organizing Team at orga@monerokon.org

OFTC/Libera.Chat IRC

  • #monerokon

Related Links

]]>ajsFull-Chain Membership Proofs Development2024-04-27T00:00:00+00:002024-04-27T00:00:00+00:00https://www.getmonero.org/2024/04/27/fcmpsFull-Chain Membership Proofs, as a concept, is a replacement for rings within the Monero protocol. While rings have offered sender privacy to Monero since it launched, they're vulnerable to attacks such as the EAE attack, have difficulties upon chain reorganizations, and in general enable statistical analysis (mitigated by distribution of the decoy selection algorithm). Full-Chain Membership Proofs prove the output spent is one of any output on the chain, effectively removing all of these risks. This means every input goes from an immediate anonymity set of 16 to 100,000,000.

Two proposals have been made for Monero offering such privacy, both under the "Full-Chain Membership Proofs" moniker (further mentions acronymed to "FCMPs"). The first was announced at MoneroKon in 2023, and was intended to be deployed with/after Seraphis. Seraphis distinguished between "membership", the output spent is one of some outputs, and "spend authorization", the output being spent is authorized by the private key holder. With that, much more efficient proofs for membership became possible, including the "Grootle" proofs it was originally proposed with (effectively a ring of 128). FCMPs further improved upon this, requiring Seraphis's new key/transaction format to do so.

The second proposal was made in March of 2024 in response to the spam attacks ongoing at the time. "FCMPs+SA+L", later shortened to simply "FCMP++s", independently adds "Spend Authorization + Linkability", removing the dependency of Seraphis. With further research and development, it was found to add several new features to the Monero protocol, without requiring the migration to Seraphis. These features include,

  • Transaction Chaining

Transaction chaining allows signing a transaction spending another transaction, before the spent transaction is published and mined on-chain. This enables certain layer-two designs for Monero (such as some payment channel protocols).

  • Outgoing View Keys

Outgoing view keys allow anyone with the outgoing view key to detect when received outputs are spent. Currently, Monero only offers incoming view keys, which do allow detecting spends with extremely high likelihood over the current protocol, yet don't provide 100% certainty. This certainty will make cold wallet setups and multisignature wallets much more efficient, having to bring the private key online far less often. It also allows defining a single "view key", without delineation of "incoming" or "outgoing", simplifying wallet UX.

  • Forward Secrecy

Forward secrecy means an adversary with a discrete log oracle, such as an adversary with a quantum computer, cannot break the privacy of the protocol.

While Seraphis also introduces all of these features, it does so with a migration to a new anonymity set and a new address format (invalidating all prior addresses). The FCMP++ proposal not only aims to be faster to deploy yet to do so without the migration. This is enabled by the trade-off of not actually offering any of this functionality at launch however.

The deployed protocol would support all of these features. The wallet code to take advantage of it would be delayed, ensuring that we keep our scope small and achieve the largest goal, full sender privacy, as soon as possible. Wallets could then start taking advantage of these features on their own timeline, without further hard forks nor privacy issues. This would likely be done by merging the Seraphis codebase into Monero, taking advantage of its years of development and improved design. With that, the migration to the new key structures would be optional, and if so, the work done for FCMP++s would provide most of the necessary work for FCMPs with Seraphis.

FCMP++s are based off Curve Trees, and to make the overall proof much more efficient, Eagen's work with elliptic curve divisors. The overall composition has been largely specified, and is currently being reviewed and further detailed as appropriate. The development of the composition was funded, and an earmarked fund for academic review and auditing is still raising. If you are a member of the academic community and are interested in contributing, please feel free to reach out within the Monero Research Lab on IRC or Matrix.

]]>Luke "Kayaba" Parker