🔺Severity: Medium
👽 Reporter: bebensap
⭐️ Reputation: 1026
🛠 State: resolved
💼 Team: Monero
💵 Bounty: null
🕐 Submitted: 2026-04-27
⏰ Disclosed: 2026-08-05 10:23:55
📝 Summary: A vulnerability was discovered in the
check reserve proof function in the Monero wallet software. The vulnerability allowed duplicate entries in the reserve proof, which could artificially inflate the reported total reserve amount without affecting the verification of individual entries. The issue was in the verifier logic, where the accounting was done in a flat manner, adding the output amount for each row without checking for duplicates.📂 Report JSON File: 3699522
@hackeronereports