WIKINDX Resources

Shi, R., Ge, Y., Lan, L., Peng, Z., Lin, S., & Li, L. 2024, Deanonymizing transactions originating from monero tor hidden service nodes. Paper presented at Companion Proceedings of the ACM on Web Conference 2024. 
Added by: Rucknium (5/22/24, 9:26 PM)   
Resource type: Proceedings Article
DOI: 10.1145/3589335.3651487
ID no. (ISBN etc.): 9798400701726
BibTeX citation key: Shi2024
View all bibliographic details
Categories: Monero-focused
Keywords: cryptocurrency, Monero, tor network, transaction deanonymization
Creators: Ge, Lan, Li, Lin, Peng, Shi
Collection: Companion Proceedings of the ACM on Web Conference 2024
Views: 137/198
Attachments   3589335.3651487.pdf [33/49] URLs
Monero is a privacy-focused cryptocurrency that incorporates anonymity networks (such as Tor and I2P) and deploys the Dandelion++ protocol to prevent malicious attackers from linking transactions with their source IPs. However, this paper highlights a vulnerability in Monero's integration of the Tor network, which allows an attacker to successfully deanonymize transactions originating from Monero Tor hidden service nodes at the network-layer level. Our approach involves injecting malicious Monero Tor hidden service nodes into the Monero P2P network to correlate the onion addresses of incoming Monero Tor hidden service peers with their originating transactions. And by sending a signal watermark embedded with the onion address to the Tor circuit, we establish a correlation between the onion address and IP address of a Monero Tor hidden service node. Ultimately, we correlate transactions and IPs of Monero Tor hidden service nodes. Through experimentation on the Monero testnet, we provide empirical evidence of the effectiveness of our approach in successfully deanonymizing transactions originating from Monero Tor hidden service nodes.
Added by: Rucknium  

vtnerd said "we can definitely improve the time_sync request message which is leaking the remote tor address in certain situations. Also, randomly select whether a tx is related over tor another time instead of always forwarding over clearnet."

More discussion at


Added by: Rucknium  Last edited by: Rucknium
WIKINDX 6.5.0 | Total resources: 214 | Username: -- | Bibliography: WIKINDX Master Bibliography | Style: American Psychological Association (APA)