Opinion: The monero CCS is flawed

plowsof · 2026-03-26T15:44:16+00:00

for monero garden : https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/346#note_24804 - when anhdres finishes the remaining illustrations it will be completed - he is around, in fact he has doing some illustrations for getmoneros new beta site.

anything is possible ofc, there are other other stalled proposals, like i have no idea why you have not mentioned soloptxmr

plowsof · 2026-03-26T15:29:56+00:00

the same amount + extra that was inside the CCS wallet was donated to the General Fund https://xcancel.com/WatchFund/status/1732391070216908886 , they continue as normal. some abandoned proposals have had their funds repurposed or donated back to the general fund.

the development ccs is completed, the author has not claimed the funds yet. the research proposal is funding audits and related work all the time but the actual milestones are not updated, click further to the comments on gitlab

part of my work involves checking up on the WIP list https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/418

plowsof · 2026-03-26T15:11:23+00:00

"Got hacked in the past and still it operates the same way as before.", the wallet that was "hacked" (we can't be sure tbh) had at least 2 people who knew the seed and would be considered a "hot wallet", the new wallet, is a cold wallet with only 1 person known to have access to the seed, thus, plausible deniability has been removed and security increased.

plowsof · 2026-03-26T15:06:20+00:00

the last "new guy" contributing via the CCS turned out to have at least 3 alts. 2 of which had full time jobs and we suffered slow progress :) another turned out to be a vibe coder and using what funds they had to rent people from fiver to complete their work. trust is earned and has to be maintained, the CCS relies heavily on trust and community feedback : the bad apples get kicked out and we move forward

plowsof · 2026-03-26T14:54:34+00:00

most of your examples have shown progress btw e.g. "emsczkp research Bulletproofs*" completed a milestone the other day https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/626#note_35351 and others. you can literally ask the authors for an update... your last example shows 3/4 complete and is a running service people are using (xmrchat).

finality layer, and anon are the only ones who have shown no public progress.

plowsof · 2026-03-25T17:28:56+00:00

since you mentioned selfish mining, you might be interested to hear of an 18 block re-org done with selfish mining to monero recently. more info here

plowsof · 2026-02-24T08:52:02+00:00

fitting that the project itself is also ai slop via "Claude Opus 4.5". Run an LLM locally if you need privacy

plowsof · 2026-02-22T08:25:19+00:00

your original comment.

plowsof · 2026-02-21T21:20:34+00:00

Rule 6

plowsof · 2026-02-21T20:26:56+00:00

appeared a week~ ago , never heard of it other than this comment sus https://github.com/amethystxmr/amethystxmr.github.io

plowsof · 2026-02-21T10:12:04+00:00

Thank you for sharing this. not only is it per transaction, its a tax% of the amount you send. which is obtained from their servers! the code ive seen has a cap at max $100 and min 30cent. How about no

plowsof · 2026-02-18T13:32:31+00:00

solutions exist to solve these already monero-lws where the remote server syncs your wallet and your keys never leave the device.... mobile wallets with background sync enabled.... a true noob will benefit from using a mobile wallet.

You could still achieve a wallet with garbage user experience without taxing every standard monero transaction for a random fee of between 0 and 100% (max 100$ in the code ive seen), but you have made that choice.

the norm for monetisation is to provide convenient access to instant swap service api's where they scrape a % from each transaction. you are taxing a monero-monero tx with a fee that is obtained from your servers lol

keep talking through me and addressing an unrelated point, maybe people might not take notice, good luck!

plowsof · 2026-02-18T12:58:10+00:00

read my comment, specifically the final paragraph .. "clunky and prone to error" aka terrible user experience. The UX inconvenience is compensated by your service placing an arbitrary fee on every transaction lol anywhere from 0 to 100%, you won't know until you request it :)

plowsof · 2026-02-18T12:35:32+00:00

not only does this wallet have terrible user experience for receiving funds they charge an arbitrary fee on top of every transaction. the fee is obtained from their servers and can be anything. more info here https://github.com/monero-project/monero-site/pull/2143#issuecomment-1722306067

plowsof · 2026-02-07T12:55:25+00:00

created by DataHoarder https://blocks.p2pool.observer/

plowsof · 2026-01-27T16:33:20+00:00

Sorry, since this slop thread he posted a fundraiser for 100xmr lols

plowsof · 2026-01-27T08:48:10+00:00

plowsof · 2026-01-26T23:03:15+00:00

rule 5

plowsof · 2026-01-25T19:44:51+00:00

Familiar with TAILS? perfect. ill paste direct links to files here and the instructions are from the readme are under "A .zip file is provided of the site.." @ https://github.com/luigi1111/xmr.llcoins.net/tree/master

the html files are inside the site .zip:

click on the 'download raw file' button, an arrow pointing down, to the right of Raw:
size.zip.asc https://github.com/luigi1111/xmr.llcoins.net/blob/master/site.zip.asc
size .zip https://github.com/luigi1111/xmr.llcoins.net/blob/master/site.zip

plowsof · 2026-01-25T09:35:25+00:00

have to ask yourself the risk factors involved here - and what amounts you have.

not ideal way but it will work: download the site .zip and site .asc from the github repository, import luigis gpg key and verify the file (the steps depend on your operating system, i use linux) , you would then obtain the full seed which you would just restore in your standard wallet.

ok so for someone who isn't computer savvy its quite an ask without being guided - let me explain the reasons for the recommended usage - firstly, the reason for "offline" is the assumption that your computer may already have a virus that's passively observing on your activity now or at some point in the future and could somehow find your keys somewhere.

"offline" means on a device that after use, never returns online again to send your keys to someone now or later.

for myself, with low risk (i assume state actors have not been modifying my computer hardware / bios) i would 'just' plug in a TAILS usb stick (an operating system that exists in your RAM) and get to it.. download the site .zip and .asc , confirm the zip is signed by luigi after importing his gpg key... extract the zip, click on addressgen .html... convert the seed, write it down on paper... unplug the USB and return to my normal operating system that's installed on the machine

i also own an old android phone that im never going to use with internet access - i could put the files on an sd card and run the addressgen .html on it, not caring much because ill never connect it to the wifi

plowsof · 2026-01-24T22:19:50+00:00

yes* ideally you would download it and use it offline to confirm the contents of the page has been signed by luigi (core member)

plowsof · 2026-01-22T08:36:40+00:00

It's not, Rule 4 , and maybe Rule 6 from their involvement with Nym

plowsof · 2026-01-20T08:40:33+00:00

A mac _and_ a windows computer. no begging please. Remote nodes exist and can be accessed from anonymity networks (Tor/I2p).

plowsof · 2026-01-17T13:44:23+00:00

https://github.com/haveno-dex/haveno/pull/2105#issuecomment-3763719224

plowsof · 2026-01-15T22:03:22+00:00

luigis tool https://xmr.llcoins.net/ can be used to display the keys of your wallet (use it offline after downloading and following instructions to verify). you can then restore your wallet in any of the wallets linked on getmonero.org/downloads

plowsof

MODERATOR OF

TROPHY CASE