Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rotate receiving address once its use is detected in the mempool #1033

Open
chaserene opened this issue Nov 22, 2024 · 0 comments
Open

rotate receiving address once its use is detected in the mempool #1033

chaserene opened this issue Nov 22, 2024 · 0 comments

Comments

@chaserene
Copy link

at least for some assets, Stack Wallet rotates the address offered for receiving once a confirmed transaction had paid to it. this is great for preventing address reuse, increasing privacy.

I suggest hiding an address at an earlier stage, when an unconfirmed transaction in the mempool / transaction pool is expected to pay to it. this would further reduce the chance of giving out the same address twice. this gains further importance when the transaction isn't included in a block for a longer time (e.g. fee too low for network conditions, something that happened in Monero on a grand scale during the suspected spam of this March).

if the transaction that triggered the rotation is never included in a block, it would still make sense to not offer the skipped address, since the detection of the unconfirmed transaction proves that the address had been given out. for surveillable blockchains, entities tracking the mempool also learn about the address and the intent to pay to it.

I see two potential downsides:

  1. restoring a wallet from the mnemonic may not result in the same sequence of offered receiving address. this doesn't hurt the functioning of the wallet, and keeping the address hidden even in just one instance of the wallet would still reduce the chance of the address being reused.
  2. if any continuous "rotation gap" is wider than the address look-ahead distance, restoring from the mnemonic may fail to recover some funds. in my experience, look-ahead distances are usually long enough (100+) to make this risk negligible, but I can't speak for every wallet of all address-rotated Stack assets.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant