Monero усиливает защиту пользователей с новым обновлением против шпионских узлов Translation: Monero Strengthens User Protection with New Update Against Spy Nodes

Developers of the privacy-focused cryptocurrency Monero have enhanced the mechanisms against so-called «spy nodes» in the latest client version (v0.18.4.3), dubbed Flourine Fermi.

«This is a highly recommended update,» project representatives emphasized.

In the Monero community, «spy nodes» refers to malicious nodes, their groups, or botnets capable of linking IP addresses to transactions on the network.

The update introduces an improved peer selection algorithm designed to avoid connections to large subnetworks commonly exploited by spy nodes. As a result, users will connect to more secure nodes.

General enhancements have also been implemented to boost the stability and reliability of the network.

Given that malicious nodes pose a threat to user privacy and contradict the project’s goals, the Monero community is actively pursuing solutions: implementing security measures, encouraging the deployment of personal nodes, and refining the software.

At the end of 2024, researchers suggested that node operators block suspicious IP addresses and avoid connecting to them. However, this measure is difficult to consider effective since attackers can easily create new «spy» addresses.

Another tool advocated by the community is Dandelion++. This software is designed to complicate the association of IP addresses with transactions.

The privacy issues concerning Monero received heightened attention following a leaked video from Chainalysis in 2024. The video showcased how the analytics firm launches multiple nodes across various regions and employs several internet service providers to collect IP addresses and transaction timestamps.

It is worth noting that in September, the blockchain of the privacy-oriented cryptocurrency underwent its largest reorganization in 12 years.

The mining pool Quibic released a hidden chain that turned out to be longer than the main one. The network nodes automatically accepted it as valid, undoing previous blocks.