Implementation and Integration Patterns
Practical guidance for implementing subaddresses, multisig, view-only wallets, hardware wallet integration, and exchange-facing transaction workflows. Covers address generation standards, key image verification, and mempool interaction patterns. Wallet developers, exchange engineers, and custody providers use this group to build compliant, privacy-preserving integrations that handle Monero's unique cryptographic constraints correctly.
Subaddress Generation and Management
Implementation guide for wallet developers and exchanges on generating and managing Monero subaddresses. Covers cryptographic derivation paths, integrated address encoding for payment IDs, and patterns for mapping millions of unlinkable receiving addresses to a single wallet. Affects custody providers, exchange engineers, and payment processors who need to preserve customer privacy without fragmenting funds. Chainscore can review subaddress implementation for correctness and privacy leakage risks.
Multisignature Wallet Implementation
Practical patterns for implementing Monero's non-smart-contract N-of-M multisig wallets. Details the interactive setup ceremony, key shard management, round-based signing process, and critical differences from Bitcoin or Ethereum multisig that can cause permanent fund loss. Affects wallet developers, custody providers, and institutional treasury teams. Chainscore can audit multisig implementation logic and operational key-management procedures.
View-Only Wallet and Audit Key Patterns
How to implement view-only wallets using the secret view key for compliance, accounting, and cold-storage monitoring. Covers proving incoming transaction amounts to auditors without exposing spend authority, and the critical limitation of detecting outgoing transactions via key image imports. Affects exchange compliance teams, auditors, and treasury operators. Chainscore can assess view-only wallet setups for completeness of monitoring coverage.
Key Image Verification and Management
Deep dive into key images as the sole mechanism for detecting spent outputs in a privacy-preserving way. Covers how exchanges and custody providers should generate, import, and scan for key images to detect unauthorized withdrawals from view-only wallets. Affects exchange security engineers and custody infrastructure teams. Chainscore can review key image synchronization pipelines for reliability and security gaps.
Hardware Wallet Integration Guide
Integration patterns for supporting Monero on hardware wallets like Ledger and Trezor. Focuses on handling RingCT on-device, host-device communication for transaction construction, secure key image generation, and UX flows for confirming recipient addresses and decoy selection. Affects hardware wallet firmware teams and wallet application developers. Chainscore can review host-device protocol implementations for security and privacy vulnerabilities.
Exchange Transaction Workflow and Compliance
Canonical architecture for exchange hot-wallet and sweep infrastructure. Covers the full lifecycle: generating unique per-deposit subaddresses, running a decoupled wallet-rpc instance, implementing the 10-block unlock maturity, constructing sweep transactions with proper decoy selection, and using integrated addresses for internal payment IDs. Affects exchange infrastructure teams and compliance officers. Chainscore can perform readiness reviews of exchange Monero integration architectures.
Mempool Interaction and Transaction Broadcasting
Practical guidance for interacting with a Monero node's mempool to ensure reliable transaction propagation. Covers Dandelion++ stem and fluff phases, handling transaction rebroadcasting for stuck transactions, and querying the mempool via daemon RPC to verify pending status. Affects exchange operators, payment processors, and wallet developers. Chainscore can assess transaction submission pipelines for reliability under network congestion.
ZeroMQ Event Stream Integration
How to build real-time event-driven integrations using monerod's ZeroMQ publisher. Details subscription patterns for txpool_add, chain_main, and miner_data topics to trigger deposit confirmations, detect incoming transactions instantly, and monitor blockchain reorgs without polling. Affects high-volume exchange operations and block explorers. Chainscore can review event-stream architectures for completeness and failure-recovery handling.
Wallet RPC vs. Daemon RPC: Architecture and Security
Guide to the separation of concerns between wallet RPC and daemon RPC interfaces. Explains why exchanges must run a dedicated, firewalled monero-wallet-rpc instance for transaction construction and key management, and how to securely connect it to a public monerod node, including JSON-RPC authentication and TLS setup. Affects exchange infrastructure architects and security teams. Chainscore can audit RPC boundary security and network segmentation.
Sweeping and UTXO Consolidation Strategies
Operational patterns for managing Monero outputs to avoid transaction bloat and degraded privacy. Covers sweep_all vs. sweep_single logic, programmatic output selection for consolidation during low-fee periods, and privacy implications of merging outputs of different origins. Affects exchange wallet operators and high-volume payment processors. Chainscore can review consolidation strategies for privacy degradation and fee efficiency.
Payment ID Migration and Encoding
Historical and practical guide to the deprecation of unencrypted payment IDs and migration to encrypted, subaddress-based payment identification. Covers encoding short payment IDs into integrated addresses for legacy compatibility and privacy risks of long unencrypted payment IDs. Affects exchanges maintaining legacy systems and payment gateway providers. Chainscore can assess migration paths for compliance and privacy risks.
Decoy Selection Algorithm and Best Practices
How wallets select decoys from the global output distribution to build ring signatures. Explains the gamma distribution picker, importance of using a recent output set, the 10-block lock rule, and heuristic-breaking patterns like selecting decoys from the same block or using zero-mixin transactions. Affects wallet developers and privacy researchers. Chainscore can review decoy selection implementations for fingerprinting vulnerabilities.
Transaction Construction and Fee Calculation
Technical walkthrough of building a Monero transaction from output selection to final signature. Details dynamic block weight and fee calculation, the penalty-free zone, and how to programmatically estimate final transaction size and fee before construction. Affects wallet developers, exchange engineers, and payment integrators. Chainscore can audit fee estimation logic for accuracy and mining reliability.
Handling Chain Reorganizations and Orphaned Blocks
Defensive integration pattern for detecting and recovering from blockchain reorganizations. Covers monitoring the daemon for reorg events via ZeroMQ or polling, re-scanning for affected incoming transactions, and logic to re-issue sweep transactions if the original was mined in an orphaned block. Affects exchange operators and custody providers. Chainscore can review reorg-handling logic for double-spend vulnerability and fund safety.
Remote Node and Trusted Daemon Configuration
Guidance on security and privacy trade-offs of connecting a wallet to a remote public node versus running a local full node. Covers data leaked to remote node operators, use of the --trusted-daemon flag, and patterns for using a local node as a privacy-preserving proxy for internal wallet services. Affects wallet developers, exchanges, and privacy-conscious integrators. Chainscore can assess node topology for privacy leakage and threat modeling.
Bootstrapping and Sync Optimization
Operational patterns for reducing time to deploy a new monerod instance. Covers importing a trusted blockchain.raw bootstrap file, using --prune-blockchain for resource-constrained environments, and configuring --out-peers and --in-peers for optimal P2P sync speed behind corporate firewalls. Affects node operators, exchanges, and infrastructure teams. Chainscore can review node deployment procedures for sync reliability and chain-state integrity.
Dandelion++ Transaction Propagation
Guide for developers on how Monero's Dandelion++ propagation mechanism impacts transaction privacy and latency. Explains the stem phase where transactions relay through a single path and the fluff phase where they broadcast widely, and how this affects timing of transaction visibility on network explorers. Affects wallet developers, block explorers, and privacy researchers. Chainscore can assess transaction broadcast strategies for timing-analysis resistance.
Proof of Payment Verification
How to use Monero's cryptographic proof of payment feature (get_tx_proof) to generate and verify undeniable evidence that a specific transaction was sent to a specific address. Critical pattern for payment dispute resolution between customers and exchanges or merchants. Affects exchange support teams, merchant integrators, and payment processors. Chainscore can review dispute-resolution workflows for cryptographic correctness.
Wallet Restore and Recovery Procedures
Definitive operational guide for restoring a Monero wallet from its 25-word mnemonic seed or keys file. Covers the critical restore height parameter to avoid scanning the entire blockchain, differences between restoring a wallet and an entire account, and procedures for recovering after hardware failure without losing subaddress labels. Affects wallet developers, exchange key-management teams, and end-user support. Chainscore can audit recovery procedures for completeness and fund safety.