DEV Community

Alexander
Alexander

Posted on

RingCT and Stealth Addresses: How Monero Hides Transactions

#monero #privacy #cryptocurrency #security

Cryptocurrency Privacy & Security: A Research Guide

What is financial privacy, and why does it matter in cryptocurrency?

Think of your traditional bank account. Your bank knows every transaction you make, but that information stays relatively contained — your landlord can't look up your balance, and your employer can't see what you spent money on last weekend. Privacy isn't about hiding wrongdoing; it's about maintaining the same reasonable boundaries that exist in everyday life.

Cryptocurrency complicates this. Most blockchains are public ledgers — every transaction is recorded permanently and visible to anyone. Bitcoin's blockchain is like a giant spreadsheet published on the internet. If someone knows your wallet address, they can trace every transaction you've ever made from it, see your balance in real time, and potentially link activity across time.

This creates real risks: targeted theft, surveillance by corporations or governments, personal safety exposure for activists or journalists, and simple loss of financial dignity. A contractor paid in Bitcoin, for example, might not want their client knowing exactly how much they charge other clients.

Privacy tools exist to restore the same expectations most people already take for granted.

What's the difference between pseudonymity and anonymity?

Bitcoin and Ethereum are pseudonymous, not anonymous. This is an important distinction.

Pseudonymous means you operate under an identifier — a wallet address — that isn't your name, but can still be linked to you. Anonymity means no connection can be made at all.

The analogy: writing letters under a pen name is pseudonymous. If someone tracks which post office you use, studies your writing style, and correlates the timing of your letters with known events, they can eventually figure out who you are. Your pen name provided a layer of separation, but it wasn't a guarantee.

Blockchain analytics firms like Chainalysis and Elliptic do exactly this kind of detective work. They combine on-chain data (transaction graphs, timing, amounts) with off-chain data (exchange KYC records, IP addresses, social media) to de-anonymize wallet addresses. Studies have shown that even mixing a few "tainted" coins with otherwise clean funds can be statistically traced with 90%+ accuracy using clustering algorithms.

True anonymity requires deliberate effort and the right tools.

How do privacy-focused cryptocurrencies work?

Several cryptocurrencies were designed with privacy as a core property rather than an afterthought.

Monero (XMR) is the most widely studied. It uses three technologies together:

  • Ring signatures — when you send a transaction, your signature is mixed with several others (the "ring size" is currently 16 by default). An outside observer can see that one of 16 people sent funds, but not which one.
  • Stealth addresses — the recipient's actual address never appears on-chain. Instead, a one-time address is generated for each transaction, so linking payments to a single recipient is cryptographically prevented.
  • RingCT (Ring Confidential Transactions) — transaction amounts are hidden using Pedersen commitments, a cryptographic technique that proves a transaction is valid without revealing the numbers involved.

Zcash (ZEC) takes a different approach using zk-SNARKs (zero-knowledge succinct non-interactive arguments of knowledge). The math here is sophisticated, but the concept is elegant: a zero-knowledge proof lets you prove you know something without revealing what you know. Zcash's shielded transactions prove you have enough funds to cover a payment without disclosing the amount, sender, or receiver. The catch — most Zcash transactions are actually transparent, and only a small percentage use the shielded pool, which weakens the anonymity set.

Grin implements MimbleWimble, a protocol where transactions are aggregated and old transaction data can be pruned from the blockchain entirely. No amounts, no addresses — just cryptographic proofs.

What is a "hot wallet" vs. a "cold wallet," and how does this affect security?

A hot wallet is connected to the internet. A cold wallet is not.

The analogy is a wallet in your back pocket versus cash in a safe at home. You wouldn't walk around with your life savings in your back pocket — it's convenient for small amounts but exposed to risk.

Hot wallets (like MetaMask, Phantom, or mobile apps) are vulnerable to malware, phishing attacks, browser exploits, and compromised clipboard data (some malware silently replaces copied wallet addresses with the attacker's address). They're fine for amounts you'd be comfortable losing.

Cold wallets store private keys on hardware that never touches the internet. Hardware wallets like Ledger and Trezor are the most common implementations. When you sign a transaction, it happens inside the device — the private key never leaves the hardware. Even if your computer is fully compromised, the attacker can't extract keys they never see.

Key numbers to know:

  • A 24-word seed phrase (BIP-39 standard) represents 256 bits of entropy — roughly 2²⁵⁶ possible combinations. Brute-forcing it is computationally impossible with current or foreseeable technology.
  • Ledger devices use a Secure Element chip (the same type used in passports and credit cards) rated CC EAL5+, designed to resist physical extraction attacks.

One critical point: the seed phrase is the wallet. Hardware is just a convenient way to use it. If your device breaks but you have the seed, you can restore everything. If you lose the seed phrase and the device, the funds are gone permanently.

What is a coin join, and how does transaction mixing work?

CoinJoin is a privacy technique for Bitcoin that combines multiple users' transactions into a single transaction with many inputs and many outputs. From the outside, it's difficult to determine which input corresponds to which output.

Imagine five people each putting $20 bills into a hat, shaking it up, and each pulling out $20. You all get the same amount back, but no one watching can say whose bill is whose anymore.

Wasabi Wallet implements a variant called WabiSabi, which allows variable output amounts, making analysis harder. JoinMarket is another implementation where participants are matched automatically, and "makers" earn small fees for providing liquidity to the mixing pool.

Whirlpool (used by Samourai Wallet) uses a fixed denomination model — all outputs in a mixing round are the same amount (e.g., 0.01 BTC), which eliminates amount-based correlation. Funds go through multiple rounds; after five rounds, the entropy score makes chain analysis probabilistically expensive rather than impossible.

Limitations exist. CoinJoin requires other participants (an anonymity set), and unmixed change outputs can undermine privacy if not handled carefully. Timing analysis — if you consistently mix and then immediately transact — can also reduce effectiveness.

What is blockchain analysis, and how do analysts de-anonymize users?

Blockchain analytics is essentially graph theory applied to transaction data. Every transaction creates edges between addresses on a directed graph. Analysts look for patterns.

The most powerful technique is common input ownership heuristic: if a transaction has multiple inputs, those inputs were likely controlled by the same entity (because you need the private keys for each to sign). This lets analysts cluster addresses into "wallets" even without knowing who owns them.

Other methods:

  • Dust attacks — sending tiny amounts (a few hundred satoshis, called "dust") to target addresses. If the recipient later spends that dust in a transaction with other inputs, those inputs get clustered together, revealing the wallet.
  • Change output detection — Bitcoin transactions often produce change. Analysts use output amount analysis, address type matching, and round-number detection to identify which output is change, following it to future transactions.
  • Exchange correlation — when funds eventually touch a KYC exchange (one that requires identity verification), the identity attached to that account can be linked backward through the transaction graph.
  • IP tracking — if you broadcast a transaction directly from your node, your IP address may be logged. This links your network identity to your wallet activity.

Firms maintain large labeled datasets — known exchange addresses, network market addresses, mixing service addresses — and propagate those labels through the transaction graph. One interaction with a labeled address can color your entire transaction history.

How does Tor and VPN usage relate to cryptocurrency privacy?

Your IP address is a significant de-anonymization vector. When you broadcast a transaction or connect to a block explorer to check a balance, that network request can be logged.

Tor routes your traffic through three volunteer-operated relays, encrypting it at each hop, so no single node knows both who you are and what you're requesting. Bitcoin Core, Monero's wallet, and Wasabi Wallet all support native Tor integration. Running a Bitcoin full node over Tor means your transaction broadcasts can't be trivially tied to your IP

Research References

The following archives provide additional research context:

Open Source Tools:

Top comments (0)