Main navigation

Monero Devs Disclose Nine XMR Bugs That Could Have Allowed Stealing XMR from Exchanges

Sat, 07/06/2019 - 11:10
article image
Yuri Molchan
??Developers of the anonymous Monero coin have made public almost a dozen security flaws, one of them was able to allow stealing XMR from crypto exchanges??
Monero Devs Disclose Nine XMR Bugs That Could Have Allowed Stealing XMR from Exchanges
Cover image via
Read U.TODAY on
Google News

The bugs in the Monero code were not discovered until March this year, reports Hard Fork.

One of the bugs that the dev team has recently made public enabled dirty players to steal XMR from crypto currency exchanges by making ‘specifically-crafted’ blocks to get Monero wallets to take fake deposits in exchange for any XMR amount.

The bugs threatened private DLT data to be stolen from Monero

The HackerOne report confirms that these bugs allowed stealing XMR from exchanges and other online wallets. Several other of the disclosed bugs allowed conducting a DoS attack.

Some of the other bugs were targeted at CryptoNote – a software layer that helps Monero ensure higher level of privacy for its users. These vulnerabilities could have let culprits put out Monero nodes by demanding big amounts of DLT data from the platform.

A developer Andrey Sabelnikov pointed out that other crypto platforms that use CryptoNote are also vulnerable to that sort of attacks.

Apart from that, Monero devs found that the network’s software was leaking big amounts of ‘uninitiated’ memory, containing private data, to untrusted peers of the network.

Binance to List DOGE, Meme Coin is Up 28 Percent Already

Nascent crypto software is bound to be vulnerable to attacks

The developers warn that most of those flaws detected in the Monero code had been labelled as ‘proof of concepts’. 

Since the crypto industry, especially privacy-focused coins are only beginning to appear on a large scale, bugs that make coins to be stolen by hackers from wallets will emerge from time to time.

article image
About the author

Yuri is a crypto journalist interested in technology and technical innovations. He has been in crypto since 2017. Believes that blockchain and cryptocurrencies have a potential to transform the world in the future in many of its aspects. ‘Hodls’ major cryptocurrencies and has written for multiple crypto media outlets. 

His articles have been quoted by such crypto influencers as Tyler Winklevoss, John McAfee, CZ Binance, Max Keiser, etc.

Currently Yuri is a news writer at U.Today and can be contacted at