Advanced

Attacks & Defenses Quiz (Advanced)

Test whether you understand how Monero privacy is actually attacked — and the defense that answers each attack.

Covers material from How Monero Is Attacked — and Defends.

Create a free account or log in to save your quiz scores and track your progress.

What made the 'zero-decoy' era before enforced ring sizes so damaging to traceability?

Zero decoys made amounts public, revealing balances It exposed users' IP addresses on the blockchain Zero-decoy spends were traceable and, by elimination, deanonymized other rings too It let attackers reverse transactions after the fact

What is the essence of the EAE (poisoned-outputs / known-spent flooding) attack?

The attacker forges range proofs to mint coins The attacker poisons the mempool so transactions can't confirm The attacker floods the chain with outputs they know, shrinking others' effective anonymity set The attacker steals view keys from a malicious wallet

Why must Monero's decoy selection mimic the real spend-age distribution (roughly a gamma curve)?

So amounts stay hidden inside the commitment So the ring signature verifies faster So the (usually recent) real output isn't a statistical outlier among its decoys So decoys are spread evenly across all of chain history

For most ordinary users, which layer is typically the WEAKEST link in practice?

The ring signature math, which is routinely broken The network layer — your IP exposed to the node you broadcast through The Bulletproofs range proofs, which leak amounts The 25-word seed, which observers can guess

A firm markets the ability to 'trace Monero'. What's the sober interpretation?

It usually means statistical heuristics or user-OPSEC mistakes, not broken crypto It means every Monero transaction is now fully public It means the ring signatures have been mathematically inverted It means the tail emission was cracked

Which combination best defends the two different layers an adversary attacks?

Churning every output hundreds of times and nothing else A larger wallet password and more confirmations Only using exchanges with strong KYC Mandatory on-chain privacy (RingCT + decoys + stealth) PLUS your own node over Tor/I2P

Why is churning (repeatedly sending outputs to yourself) not a reliable privacy cure-all?

It is required for every transaction to be private It permanently deletes the decoys used against you It gives limited, situational benefit and can create patterns; it ignores network leaks It doubles your effective balance each time

What does Dandelion++ specifically defend against?

Correcting a biased decoy-selection distribution Revealing the hidden amounts in RingCT Linking a transaction to the node/IP that first broadcast it Breaking the ring signature to find the real spend

Why does enforcing a mandatory minimum ring size (rather than leaving decoys optional) protect everyone?

It sets the tail-emission rate It hides users' IP addresses at broadcast It mainly makes transactions smaller and cheaper Optional/low-decoy spends deanonymized others by elimination; uniform rings fix that

Q10

Per the sober view, what most realistically deanonymizes a careful Monero user?

Guessing the victim's 25-word seed phrase Reading the amounts straight out of RingCT Mathematically inverting the ring signature OPSEC failures — KYC ramps, address reuse, identity and network leaks

🎓 Graduate from Monero Academy

Create a free account, ace every quiz across all courses, and earn your place on the Graduates wall — with your own Monero address for donations. An account also tracks your progress through the courses, and graduating is the prize for finishing.

Create free account How it works