Advanced

Attacks & Defenses Quiz (Advanced)

Test whether you understand how Monero privacy is actually attacked — and the defense that answers each attack.

Covers material from How Monero Is Attacked — and Defends.

Create a free account or log in to save your quiz scores and track your progress.

What made the 'zero-decoy' era before enforced ring sizes so damaging to traceability?

Zero decoys made amounts public, revealing balances Zero-decoy spends were traceable and, by elimination, deanonymized other rings too It exposed users' IP addresses on the blockchain It let attackers reverse transactions after the fact

What is the essence of the EAE (poisoned-outputs / known-spent flooding) attack?

The attacker poisons the mempool so transactions can't confirm The attacker steals view keys from a malicious wallet The attacker forges range proofs to mint coins The attacker floods the chain with outputs they know, shrinking others' effective anonymity set

Why must Monero's decoy selection mimic the real spend-age distribution (roughly a gamma curve)?

So the ring signature verifies faster So decoys are spread evenly across all of chain history So amounts stay hidden inside the commitment So the (usually recent) real output isn't a statistical outlier among its decoys

For most ordinary users, which layer is typically the WEAKEST link in practice?

The ring signature math, which is routinely broken The Bulletproofs range proofs, which leak amounts The 25-word seed, which observers can guess The network layer — your IP exposed to the node you broadcast through

A firm markets the ability to 'trace Monero'. What's the sober interpretation?

It means the ring signatures have been mathematically inverted It usually means statistical heuristics or user-OPSEC mistakes, not broken crypto It means the tail emission was cracked It means every Monero transaction is now fully public

Which combination best defends the two different layers an adversary attacks?

Churning every output hundreds of times and nothing else Mandatory on-chain privacy (RingCT + decoys + stealth) PLUS your own node over Tor/I2P A larger wallet password and more confirmations Only using exchanges with strong KYC

Why is churning (repeatedly sending outputs to yourself) not a reliable privacy cure-all?

It doubles your effective balance each time It is required for every transaction to be private It permanently deletes the decoys used against you It gives limited, situational benefit and can create patterns; it ignores network leaks

What does Dandelion++ specifically defend against?

Correcting a biased decoy-selection distribution Breaking the ring signature to find the real spend Revealing the hidden amounts in RingCT Linking a transaction to the node/IP that first broadcast it

Why does enforcing a mandatory minimum ring size (rather than leaving decoys optional) protect everyone?

It hides users' IP addresses at broadcast Optional/low-decoy spends deanonymized others by elimination; uniform rings fix that It sets the tail-emission rate It mainly makes transactions smaller and cheaper

Q10

Per the sober view, what most realistically deanonymizes a careful Monero user?

Guessing the victim's 25-word seed phrase OPSEC failures — KYC ramps, address reuse, identity and network leaks Mathematically inverting the ring signature Reading the amounts straight out of RingCT

🎓 Graduate from Monero Academy

Create a free account, ace every quiz across all courses, and earn your place on the Graduates wall — with your own Monero address for donations. An account also tracks your progress through the courses, and graduating is the prize for finishing.

Create free account How it works