Lucene search
+L

1 matches found

Hacker One
Hacker One
•added 2026/04/27 4:23 p.m.•56 views

Monero: `check_reserve_proof` sums RingCT ECDH amounts without checking the output commitment

The checkreserveproof function in the Monero codebase was found to sum RingCT ECDH amounts without checking the output commitment. The decoded amount was added to the total without verifying that it matched the commitment, which could allow a malicious prover to claim larger reserves than actuall...

5.5AI score
SaveExploits0
Rows per page
Query Builder