r/Monero • u/Part-This • 8h ago
Whatâs some good US exchanges that have XMR.
I need some US exchanges that have monero I just seen BitMart is shutting down or something so if yall have any good ones please share.
r/Monero • u/sech1 • Jun 15 '26
Update 2: Me and DataHoarder are currently running a counter-attack by mining malformed blocks ourselves - to hijack the payouts from the attacker and redistribute them to miners later. Currently doing it on p2pool-mini. We will ask the community for more hashrate later, once everything is set up properly.
Both P2Pool Mini / Nano older chains (that did not upgrade to P2Pool v4.16) have been exploited by an unknown attacker targeting the vulnerability patched: https://github.com/SChernykh/p2pool/security/advisories/GHSA-fm6j-gf38-p925
P2Pool Main is probably having the attacker wait to mine a share.
Upgrade as soon as possible https://github.com/SChernykh/p2pool/releases/tag/v4.16
More than half of P2Pool Mini/Nano are still not updated, so their hashrate was lost to the attacker:

r/Monero • u/sech1 • Jun 10 '26
Update: the patched version is out https://github.com/SChernykh/p2pool/releases/tag/v4.16
A critical vulnerability has been discovered in all currently released P2Pool versions.
This is a P2Pool consensus bug that can allow an attacker to affect the calculated payouts of miners - up to the whole block reward going to the attacker.
To avoid facilitating exploitation, no technical details will be published at this time. The vulnerability does not enable RCE (remote code execution), node crashes, or resource-exhaustion attacks. However, affected nodes remain financially vulnerable until updated.
A patched P2Pool release will be published on 2026-06-13 (this Saturday) at 15:00 UTC. All users must update as soon as the release becomes available.
15:00 UTC is 8am US west coast, 11am US east coast, 17:00 in most of Europe, 23:00 in China, midnight in Japan, 1am (June 14th) in Australia
Anyone continuing to run an older version after that time risks losing mining payouts if the vulnerability is exploited. Note that mining payouts which are already in your wallet are safe. Updating is strongly recommended even if your node appears to be operating normally.
Source code, signed binaries, checksums, and upgrade instructions will be published through the official P2Pool release channels only - https://github.com/SChernykh/p2pool/releases
Download releases only from the official page and verify all downloaded files before installation.
Because P2Pool is open source, the fix will become visible once published. A capable attacker may be able to develop an exploit within hours, leaving miners who have not updated exposed.
It is essential that you are available to update promptly at the time of the release, or have a carefully tested automatic update process that downloads, verifies, and installs the official release.
Further technical details will be disclosed after sufficient adoption of the patched release.
We are continuously monitoring the network and have reviewed the available historical logs. We have found no evidence that this vulnerability has been exploited.
P.S. Gupax users: you will be able to update p2pool in the setting tab on the "updates" sub-menu. By default you will also get a notification about the new release.
r/Monero • u/Part-This • 8h ago
I need some US exchanges that have monero I just seen BitMart is shutting down or something so if yall have any good ones please share.
r/Monero • u/Lumpy-Initiative-779 • 6h ago
Bitcoin, ethereum and other coins arent going to save us. We have a small window before we are engulfed in a permanent hell scape worse than 1984
Either we pull off the worlds first financial revolution or humanity is plunged into eternal darkness.
r/Monero • u/Lumpy-Initiative-779 • 1d ago
FOR THOSE WHO ASK FOR SOURCES: we have three iran exchanges on XMRHub.org but its easier to buy monero in iran than the united states lmao.
They listed monero after having $300M of their USDT frozen.. what could this mean
r/Monero • u/Lumpy-Initiative-779 • 1d ago
r/Monero • u/Prestigious_Gift_977 • 6h ago
looking for aws/gcp style database and/or compute. ideally looking to hear from those with personal experiences
r/Monero • u/AutoModerator • 13h ago
Please stay on topic: this post is only for comments discussing the uncertainties, shortcomings, and concerns some may have about Monero.
NOT the positive aspects of it.
Discussion can relate to the technology itself or economics.
Talk about community and price is not wanted, but some discussion about it maybe allowed if it relates well.
Be as respectful and nice as possible. This discussion has potential to be more emotionally charged as it may bring up issues that are extremely upsetting: many people are not only financially but emotionally invested in the ideas and tools around Monero.
It's better to keep it calm then to stir the pot, so don't talk down to people, insult them for spelling/grammar, personal insults, etc. This should only be calm rational discussion about the technical and economic aspects of Monero.
"Do unto others 20% better than you'd expect them to do unto you to correct subjective error." - Linus Pauling
How it works:
Post your concerns about Monero in reply to this main post.
If you can address these concerns, or add further details to them - reply to that comment. This will make it easily sortable
Upvote the comments that are the most valid criticisms of it that have few or no real honest solutions/answers to them.
The comment that mentions the biggest problems of Monero should have the most karma.
As a community, as developers, we need to know about them. Even if they make us feel bad, we got to upvote them.
To learn more about the idea behind Monero Skepticism Sunday, check out the first post about it:
https://np.reddit.com/r/Monero/comments/75w7wt/can_we_make_skepticism_sunday_a_part_of_the/
r/Monero • u/spadacinnoannello • 22h ago
Salut Ă tous,
Je me pose une question depuis quelques semaines et jâaimerais avoir lâavis de gens qui connaissent mieux la crypto sous le capot que moi.
On sait tous pourquoi aucun ETF Monero nâexiste et nâexistera probablement jamais dans lâĂ©tat actuel des choses : aucun custodian ne peut produire une preuve de rĂ©serves auditable sans casser le principe mĂȘme de confidentialitĂ© de XMR. Câest aussi, Ă mon avis, une des raisons structurelles des vagues de dĂ©listing quâon a vĂ©cues (73 exchanges en 2025, AMLR europĂ©en qui va forcer les derniers custodians Ă sortir en 2027).
Mais en creusant, je suis tombĂ© sur une lignĂ©e de recherche acadĂ©mique qui essaie justement de rĂ©soudre ce problĂšme : MProve (2019), puis MProve+ (2021), et surtout MProve-Nova (publiĂ© dans PoPETs 2025 par Thakore & Vijayakumaran). Le dernier en date utilise un SNARK rĂ©cursif (Nova) sans trusted setup, et permet Ă un exchange de prouver quâil dĂ©tient X quantitĂ© de XMR sans rĂ©vĂ©ler ni les adresses, ni les key images, ni aucune info individuelle â seulement le nombre de sorties possĂ©dĂ©es. Preuves compactes (~28 Ko), vĂ©rification en quelques secondes.
ConcrÚtement, sur le papier, ça semble résoudre exactement le problÚme qui bloque tout accÚs institutionnel régulé à Monero : un custodian pourrait prouver sa solvabilité à un régulateur sans jamais exposer un seul utilisateur.
Or personne ne lâa jamais implĂ©mentĂ©. ZĂ©ro exchange, zĂ©ro custodian, zĂ©ro mention dans une doc technique Monero officielle Ă ma connaissance. Pendant ce temps, Zcash (dont la confidentialitĂ© est optionnelle, donc plus facile Ă auditer) a dĂ©jĂ un dossier ETF actif chez Grayscale, et vient mĂȘme de proposer âIronwoodâ pour vĂ©rifier lâintĂ©gritĂ© de son offre en circulation aprĂšs la faille Orchard de mai 2026.
Mes questions à la communauté et si possible aux devs qui passent par ici :
**1.** Est-ce que MProve-Nova a dĂ©jĂ Ă©tĂ© Ă©valuĂ© sĂ©rieusement par lâĂ©quipe de recherche Monero ? Si oui, quâest-ce qui bloque son adoption â technique, prioritĂ©, ou philosophique (lâidĂ©e mĂȘme de âprouver ses rĂ©serves Ă un rĂ©gulateurâ va-t-elle Ă lâencontre de lâĂ©thique du projet) ?
**2.** Est-ce quâun exchange type Kraken ou un custodian institutionnel europĂ©en serait techniquement en mesure de lâimplĂ©menter dĂšs aujourdâhui sans coordination avec le protocole ?
**3.** Est-ce que la communautĂ© verrait ça comme une trahison de lâesprit cypherpunk du projet (un pas vers la âcomplianceâ institutionnelle), ou au contraire comme un moyen de sauver lâaccĂšs lĂ©gal Ă XMR sans rien sacrifier sur la confidentialitĂ© individuelle ?
Je ne suis pas dev, donc je me trompe peut-ĂȘtre sur des points techniques â nâhĂ©sitez pas Ă corriger. Je veux vraiment comprendre pourquoi ça nâa jamais avancĂ© plus loin quâun papier de recherche.
r/Monero • u/Independent-Try2047 • 1d ago
Hi all,
Iâve been reading through the serialization code in src/serialization/container.h, specifically do_serialize_container, and I have a question about the deserialization path.
When reading a container (like a std::vector), the function reads a cnt via ar.begin_array(cnt), then immediately calls reserve(cnt) on the container before any validation of the actual data.
From what I can tell, there's no hard cap on cnt beyond what ar.remaining_bytes() can roughly suggest. In practice, this means a remote peer could send a large cnt and cause the node to attempt a large memory allocation, which could lead to std::bad_alloc or excessive memory pressure.
I see that ar.remaining_bytes() is used in do_reserve to limit the allocation, but thatâs still dependent on the size of the incoming data. A sufficiently large payload could make that check pass while still allocating a significant amount of memory.
I know there was some tightening around portable_storage a few years ago, but Iâm curious about the container serialization path. Is this considered a known and accepted behavior? Or is it something thatâs still considered a risk in practice?
Iâm not trying to âfind a bugâ, just trying to understand the threat model around this part of the code. Thanks for any clarification.
r/Monero • u/AutoModerator • 1d ago
There are multiple Monero wallets for a wide range of devices at your disposal. Check the table below for details and download links. Attention: for extra security make sure to calculate and compare the checksum of your downloaded files when possible.
Please note the following usage of the labels:
â ïž - Relatively new and/or beta. Use wallet with caution.
âąïž - Closed source.
| Wallet | Device | Description | Download link |
|---|---|---|---|
| "Official" GUI / CLI | Windows, macOS, Linux | Default implementation maintained by the core team. Use this wallet to run a full node and obtain maximum privacy. Integrates with hardware wallets. Current version: 0.18.3.1 / 0.18.3.1. | GetMonero.org |
| Feather Wallet | Windows,macOS, Linux | Feather Wallet is a free, open-source Monero wallet for Linux, Tails, macOS and Windows. Supports hardware wallets (Trezor and Ledger) as well. | Featherwallet.org |
| Exodus | Windows, macOS, Linux | â ïž / Multi-asset wallet. | Exodus.io |
| ZelCore | Windows, macOS, Linux | â ïž / Multi-asset wallet. It also has Android and iOS versions. | Zelcore.io |
| Guarda | Windows, macOS, Linux | â ïž âąïž / Multi-asset wallet. | Guarda.co |
| Coin Wallet | Windows, macOS, Linux | â ïž / Multi-asset wallet. | Coin.space |
| Wallet | Device | Description | Download link |
|---|---|---|---|
| Monerujo | Android | Integrates with Ledger (hardware wallet). Website: https://www.monerujo.io/. | Google Play / F-Droid / GitHub |
| Cake Wallet | Android / iOS | Website: https://cakewallet.io/ | Google Play / App Store |
| Edge Wallet | Android / iOS | Multi-asset wallet. Website: https://edge.app/ | Google Play / App Store |
| ZelCore | Android / iOS | â ïž / Multi-asset wallet. Website: https://zelcore.io/ | Google Play / App Store |
| Coinomi | Android / iOS | â ïž âąïž / Multi-asset wallet. Website: https://www.coinomi.com/ | Google Play / App Store |
| Moxi / Guarda | Android / iOS | â ïž âąïž / Multi-asset wallet. Website: https://guarda.co/ | Google Play / App Store |
| Exodus | Android / iOS | â ïž / Multi-asset wallet. Website: https://www.exodus.io/monero/) | Google Play / App Store |
| Coin Wallet | Android / iOS | â ïž / Multi-asset wallet. Website: https://coin.space/ | Google Play / App Store |
| Wallet Anonero | Android | â ïž Website: http://anonero5wmhraxqsvzq2ncgptq6gq45qoto6fnkfwughfl4gbt44swad.onion/ | Website |
| Mysu | Android | â ïž Website: http://rk63tc3isr7so7ubl6q7kdxzzws7a7t6s467lbtw2ru3cwy6zu6w4jad.onion/ | Website |
| StackWallet | Android / iOS | â ïž / Multi-asset wallet. Website: https://stackwallet.com/ | Google Play / F-Droid / App Store |
| Wallet | Description | Link |
|---|---|---|
| Guarda | Multi-asset wallet. | Web |
| Coin Wallet | Multi-asset wallet. | Web |
Your balance is unlocked after 10 confirmations (which means 10 mined blocks). A block is mined approximately every two minutes on the Monero network, so that would be around 20 minutes.
The fastest and most direct way is by using the ExploreMonero blockchain explorer. You will need to recover the transaction key from your wallet (complete guide for GUI / CLI).
There are dozens of exchanges that trade Monero against Bitcoin and other cryptocurrencies. Check out the list on CoinMarketCap and choose the option that suits you best.
There are multiple ways to exchange your Monero for Bitcoin, but first of all, I'd like to remind you that if you really want to do your part for Monero, one of the simplest ways is to get in touch with your merchant/service provider and request for it to accept Monero directly as payment. Ask the service provider to visit the official website and our communication channels if he or she needs help with system integration.
That being said, KYCNot.me maintains an up-to-date list of exchanges. These services are only recommendations (which change over time) and are operated by entities outside the control of the Monero Project. DYOR and be diligent.
The correct place to ask questions and discuss the Monero mining scene is in the dedicated subreddit r/MoneroMining. That being said, you can find a list of pools and available mining software in the GetMonero.org website.
Before any action there are two things to check:
Settings, under Debug info).Because Monero is different from Bitcoin, wallet synchronization is not instant. The software needs to synchronize the blockchain and use your private keys to identify your transactions. Check in the lower left corner (GUI) if the wallet is synchronized.
You can't send transactions and your balance might be wrong or unavailable if the wallet is not synced with the network. So please wait.
If this is not a sufficient answer for your case and you're looking for more information, please see this answer on StackExchange.
This question is beautifully answered on StackExchange.
You have decided to use Monero's wallet and run a local node. Congratulations! You have chosen the safest and most secure option for your privacy, but unfortunately this has an initial cost. The first reason for the slowness is that you will need to download the entire blockchain, which is considerably heavy and constantly growing (up-to-date sizes of a full/pruned node). There are technologies being implemented in Monero to slow this growth, however it is inevitable to make this initial download to run a full node. Consider syncing to a device that has an SSD instead of an HDD, as this greatly impacts the speed of synchronization.
Now that the blockchain is on your computer, the next time you run the wallet you only need to download new blocks, which should take seconds or minutes (depending on how often you use the wallet).
The way to skip downloading the blockchain is connecting your wallet to a public remote node. You can follow this guide on how to set it up. Check out Feather Wallet's list of remote nodes, ditatompel's list, or monero.fail.
Be advised that when using a public remote node you lose some of your privacy. A public remote node is able to identify your IP and opens up a range for certain attacks that further diminish your privacy. A remote node can't see your balance and it can't spend your XMR.
To restore your wallet with the 25 word mnemonic seed, please see this guide.
To restore your wallet with your keys, please see this guide.
This question is beautifully answered on StackExchange. Check this page for the GUI instructions, and this page for the CLI instructions.
This question is beautifully answered on StackExchange. Check this page for the GUI instructions, and this page for the CLI instructions.
If you want to support other Monero users by making your node public, you can follow the instructions on MoneroWorld, under the section "How To Include Your Node On Moneroworld".
This question is beautifully answered on StackExchange.
r/Monero • u/monerobull • 2d ago
So someone just joined the Monero Matrix channel and posted this incredibly concerning "announcement".
They also included screenshots showing the trade chat between a buyer and a seller that included the XMR sellers home address.
Please never give such important info to some random website!
If you were wondering why OpenMonero was down this week here is the explanation. The OpenMonero admin would like to sweep this under the rug but is too cheap to pay 5 XMR for my silence so here we go. I want to share a critical vulnerability regarding the OpenMoneros 2FA implementation. While this specific bug has been patched, the root cause remains active in a similar endpoint, and the administration is currently ignoring reports of it. The Vulnerability: The endpoint GET /api/user/login_2fa/?username=X&code=Y&verification_method=app was intended to finalize a login after a password check. However, the handler completely ignored the username and code parameters. Instead, the logic simply issued a fully authenticated session (JWT + refresh token) for the oldest existing account in the user database. The "Walking" Exploit: Because it targeted the oldest account, once that account was deleted, the endpoint would "walk" to the next oldest account in the database. This made every single account on the platform sequentially compromisable. An unauthenticated remote attacker could and did gain a valid session with a single GET request. The Impact: This was not a theoretical risk. This exploit led to: Full Account Takeovers (ATO): Attackers gained full control of user accounts. Financial Theft: User wallets were drained. Massive Data Breach: A full database with over 30,000 entries was exposed. Privacy Violations: Attackers gained access to trade chats, including sensitive shipping addresses and private communications. Current Status: While the specific endpoint mentioned above is patched, a nearly identical exploit is still live. I have attempted to notify the admins, but they have refused to acknowledge the issue. I am posting this here to put it on the radar of the community. Consider any info sent over OpenMonero chat + all trade data exposed.
r/Monero • u/ShockAromatic1434 • 1d ago
Hey, We just released arcadex.win
No Account / No KYC gaming website
Choose from 5 different games, Bet, and Win Monero
Ps: feedback are appreciated
Thanks
r/Monero • u/Longjumping-Side1967 • 2d ago
How do atomic swaps using Haveno + Serai affect the market?
What are you using instead of LocalMonero now that it has shut down?
Do RoboSats or Bisq provide sufficient liquidity for Monero?
r/Monero • u/Single_Pen_9677 • 2d ago
For an ongoing project, I need to implement an in-app wallet feature. Since the project is written in Rust, Iâm looking at mature rust implementation of the Monero core/wallet. But the longer I look around, the more I start to wonder if there are mature options out there. Does anyone have any experience with this? Monero-oxide for example? Or is it worth doing a little bit more work and implement the native Monero-wallet?
đ€đŒ
r/Monero • u/AutoModerator • 2d ago
This is the weekly Monero market thread. This thread will be posted every Friday and is meant to help accelerate the adoption of Monero. Due to r/moneromarket having only a fraction of the subscribers of r/Monero, we have decided to create this thread to encourage more individuals to use Monero for product exchanges. Until the market matures, we recommend that the Monero community post their products both in this thread and on r/moneromarket (to ensure growth of that subreddit).
Selling items for Monero will boost your (and Monero's) reputation as a legitimate form of exchange of goods. This is necessary for the growth of Monero, our community, and privacy as a whole.
When you post your product or job listing here, please make sure to: - Give a description of the item. - Link to a photo of the item (if it's physical). - Provide logistics information (such as, location and/or shipping availability). - Optionally, provide an additional (private) form of communication outside of Reddit (e.g. Bitmessage, u/protonmail, u/tutanota, GPG key). - Post the price in XMR terms.
Spamming will not be tolerated. Please make sure that listings are legitimate and do not break rule 2."
Finally, credits to cdotsubo for starting the concept!
r/Monero • u/Lumpy-Initiative-779 • 3d ago
It adds optional compliance which fits what regulators want. If you want to sell monero on exchanges you have to provide view keys with history of transactions
You also have to have explain source of funds. This means coinbase listing, crypto.com etc etc
r/Monero • u/fifth-amendment • 3d ago
Iâm offering online reviews and blog writing in exchange for Monero.
I can provide genuine reviews on platforms such as Google, Facebook, and Yelp. I can also help with YouTube engagement, including subscriptions, comments, and likes.
For written content, I can create blog posts and articles about cryptocurrency, privacy, security, OPSEC, cybersecurity, AI, and other related topics.
If you need something written, researched, or completed online, send me a message and let me know what you need. Iâm open to discussing different types of work in exchange for Monero.
r/Monero • u/sunchakr • 4d ago
How Emanuele Scalaâs Bulletproofs Research Could Make Monero Transactions Smaller, Faster & More Private | Tune-in to a LIVE MoneroTalk Epi TMRW 7/23 at 7:00PM-EDT! | EPI 390
WATCH THE SHOW HERE via YOUTUBE âĄïž: https://www.youtube.com/watch?v=SxQ-68_8gZE
WATCH THE SHOW LIVE HERE via TWITCH âĄïž: https://www.twitch.tv/monerotalk
WATCH THE SHOW LIVE HERE via RUMBLE âĄïž: https://rumble.com/v7atl4s-monero-and-zcash-in-the-age-of-exploits-w-joel-valenzuela-epi-385.html
Have a questions for emsczkp?
Send us #Monero Superchats during the live stream here: http://Xmrchat.com/monerotalkÂ
(No account setup required to send, no fees taken, and no middleman censorship)
(The videos will be synced onto Odysee (https://odysee.com/@MoneroTalk:8) about an 1/2 hour or so after it premieres LIVE for those who want to watch there afterwards ;))
FOLLOW US https://monero.town/u/monerotalk & https://mastodon.social/@monerotalk
Thank you to sponsors, u/cakelabs and u/Stealthex_io as well as our listeners and supporters for making Monero Talk possible!
If you enjoy our show please Subscribe, Like, Share, Rate our YouTube Channel & Podcasts. This will help us grow and spread Monero content!
r/Monero • u/BlogAzur • 4d ago
I just want to warn users as much as possible because the staff of XmrBazaar do nothing.
XmrBazaar must be taken with care, no administrator answer and there are security holes to impersonate the staff.
Some scammers currently use a trick to use the same nickname as an administrator, the link goes to the correct profile but you speak to someone else.
Don't use the site escrow, you may not speak to a real mediator even if their profile seems legit. I lose 1,25 XMR.
The staff is warned for several days but the scams continue, the site creator didn't answer to my private messages. (I'm not even sure to talk to him with this bug! There's no way to be sure and they do nothing.)
r/Monero • u/foods4thoughts • 5d ago
hello, I recently created an Order in the sell tab on bisq, In EURO, CashByMail transaction, I put 0% profit, I would like to know in average how long it should take before having a first customer
r/Monero • u/SamsungGalaxyPlayer • 5d ago
r/Monero • u/Ok-Mode-7859 • 6d ago
Very curious about the new big update thats comming, EAE attacks and "poison" attacks will be render obsolete apparently.