Monero audited its new protocol

Monero is an open-source, decentralized cryptocurrency that ensures strict privacy using the latest cryptographic technologies. Monero is now rolling out a new version of its protocol using bulletproofs, a non-interactive zero-knowledge proof created by Benedikt Bünz.

The Monero community commissioned Kudelski Security to conduct a security assessment of the implementation of the new protocol, which is expected to be a prototype of an early version of Java.

In the final audit report, Kudelski Security identified identified security issues and provided recommendations for mitigation, and gave an overall assessment of the implementation of the bulletproofs mechanism. 

There were three potential security issues and eight issues related to general code security that were identified in the implementation of bulletproofs or in other components of the Monero source code base.

Auditors say they found no critical flaws that could be exploited by attackers.

However, after spending about 75 hours on the project, they say that further analysis could have revealed dangerous security holes that they were unable to find due to limited time. 

The errors they found indicate that further technical assessment is necessary. For example, the code base would likely benefit from additional random testing.

The audit was conducted by Dr. Jean-Philippe Aumasson, CTO, and Jolan Romiller, Cryptographic Engineer, of Kudelski Security.

According to research.kudelskisecurity.com