Privacy blockchain Monero has rolled out a new client update to provide users with greater security against “spy nodes” on the network.
The “Fluorine Fermi” software update was announced via X on Thursday, with the team stating it is “a highly recommended release.”
The term “spy nodes” is part of the vernacular used in the Monero community. It refers to malicious nodes, groups of nodes, or botnets that have the potential to calculate and match IP addresses to transactions conducted on the network.
The changes focus on providing greater data protection and node matching protocols, such as an improved peer selection algorithm that works to avoid connecting to multiple nodes in the same range of IP addresses and an increase in the limit of subaddresses (unique one-time addresses) that can be created at once, along with some general reliability and stability fixes.
Monero privacy threats
The Fluorine Fermi provides another tool for users to protect their privacy.
Given that spy nodes threaten the privacy of users in contrast to the main aim of the project, the community has worked hard to find workarounds, establish safety practices, promote self‑node operation and utilize software to provide a shield against malicious nodes on Monero.
Related: Privacy is ‘constant battle’ between blockchain stakeholders and state
One such idea, proposed by the Monero Research Lab in late 2024, is to enable node operators to create a ban list of all IP addresses suspected of being spy nodes, thereby avoiding connections to them.
However, this is not seen as a foolproof or fully sustainable tactic, as malicious node operators could just go on and set up new spy IP addresses if they need to.
Another tool the community promotes is the use of Dandelion++, software designed to prevent malicious actors from linking IP addresses to transactions.
Monero privacy issues were, in part, brought into the spotlight via a leaked Chainalysis video that appeared in September 2024.
Cointelegraph was supplied with the video by an anonymous source, which claimed that Chainalysis was able to track transactions back to 2021 via its own “malicious” Monero nodes.
Headline: ‘Help! My robot vac is stealing my Bitcoin’: When smart devices attack