Monero
XMRPrivacy-oriented cryptocurrency
News Heat Trend
Project Overview
Monero is an open-source, privacy-oriented cryptocurrency that was launched in 2014. Its blockchain is intentionally configured to be opaque, making transaction details such as the identity of senders and recipients and the amount of each transaction anonymous by disguising the addresses used by participants.
$900,000 Bitcoin Theft Case: US Seeks Forfeiture of 110,300 USDT
Odaily News: The U.S. Attorney's Office for the District of Massachusetts filed a civil forfeiture lawsuit on September 28, seeking the forfeiture of 110,300 USDT seized from a Binance account. The case involves phishing text messages impersonating Coinbase, which led to the theft of 33.7 bitcoins, worth approximately $900,000 at the time, from a beneficiary and their family trust held in the same Coinbase account.Investigators said that between June 5 and June 15, 2023, 11.2 of the stolen bitcoins were traced to the Binance account and were quickly converted into Monero. When the FBI requested the account be frozen, it held approximately 758.55 Monero; Binance transferred 110,300 USDT to a government-controlled wallet on August 3, 2026. (Bitcoin.com News)
Privacy coin sector market cap increased by $24.54 billion over 5 months, with ZEC and XMR leading growth
Odaily News: Over the past five months, the market cap of the privacy coin sector grew from $11.97 billion to $36.51 billion, an increase of $24.54 billion, or approximately 205%. Among them, Zcash (ZEC) market cap increased by $20.27 billion, while Monero (XMR) increased by $4.33 billion.In January, the U.S. Securities and Exchange Commission (SEC) concluded its investigation into the Zcash Foundation without recommending enforcement action. On August 25, digital asset management company Grayscale converted Zcash Trust into the ZCSH spot ETF and listed it on NYSE Arca, making it the first listed privacy coin spot ETF in the United States.On September 8, Digital Currency Group (DCG) exchanged ZEC for approximately $100 million worth of ZCSH ETF shares. During the same period, the price of ZEC rose from $319 to $1,507, while XMR rose from $330 to $555. (Bitcoin.com News)
Revolut Responds to Multiple Extortion Attempts: No Direct Contact Received, Italian Authorities Have Intervened
Odaily News: Following a customer data breach at Revolut, multiple hacker groups have publicly demanded ransom. A group calling itself "IAmNotAVillain" demanded that Revolut pay 6,000 Monero (XMR, approximately $3 million) within 24 hours, or it would sell customer data to other criminal organizations; another group, "Revolut Smilik," had earlier demanded 10,000 Bitcoin (approximately $780 million).In response, a Revolut spokesperson stated that the company has not received any direct contact or extortion demands from any of the aforementioned individuals or organizations. Meanwhile, Italy's Anti-Mafia and Anti-Terrorism Directorate has launched an investigation, with Italian prosecutors investigating unauthorized access to government computer systems, and Italy's privacy regulator has also asked banks to urgently review the security of their access systems. (Cointelegraph)
NES holdings inflated to $50 million, Cosmos EVM exploit attacker actually profited about $60,000
According to Odaily, an investigation into the security vulnerability exploit of the Cosmos EVM module reveals that the primary attacker (0x9AE7) purchased $250,000 worth of NES and bridged it to Nesa Chain, exploiting a balance vulnerability to inflate holdings to 200 times their original size, then bridged approximately $50 million worth of NES back to Ethereum. The attacker's initial funding for the wallet originated from Monero. Through multiple wallets, the attacker exchanged NES for ETH on DEXs and deposited the proceeds into centralized exchanges. Due to rapid liquidity withdrawal, most exchanges suffered extreme slippage, and the attacker ultimately sold for only $315,000, netting a profit of approximately $60,000 after deducting costs.
THORChain Resumes Trading After $10.7 Million Attack
Odaily, the decentralized cross-chain liquidity protocol THORChain has resumed trading after being down for over five weeks following a May attack. Signing, swapping, liquidity provider operations, and redemptions have all been restored.On May 15, blockchain investigator ZachXBT and security firm PeckShield identified that the protocol had likely been exploited, prompting THORChain to halt trading. The vulnerability resulted in a loss of approximately $10.7 million from one of its six Asgard vaults, while the other five vaults were unaffected.THORChain stated that each vault has now been verified, and every key share has been cross-checked. Native Monero swaps are currently undergoing end-to-end testing and will be launched subsequently. (The Block)
Foundry, a leading Bitcoin mining pool, has officially launched its Zcash mining pool, already accounting for nearly one-third of newly minted ZEC.
According to Fortune, Foundry, a leading Bitcoin mining pool, officially launched a new mining pool for the privacy coin Zcash on April 13. Mike Colyer, CEO of Foundry, stated that this move aims to address growing institutional demand for privacy coins. The pool has already attracted several institutional miners, and its output now accounts for nearly one-third of all newly minted Zcash globally. Zcash implements transaction privacy via zero-knowledge proof technology while supporting selective disclosure to meet regulatory compliance requirements—making it more appealing to institutions than its competitor Monero. Fueled by this news, Zcash’s price has surged over 75% in the past 30 days, with its current market capitalization standing at approximately $6.3 billion. Foundry currently controls about 31% of the global Bitcoin hash rate, making it the world’s largest Bitcoin mining pool operator.
$900,000 Bitcoin Theft Case: US Seeks Forfeiture of 110,300 USDT
Odaily News: The U.S. Attorney's Office for the District of Massachusetts filed a civil forfeiture lawsuit on September 28, seeking the forfeiture of 110,300 USDT seized from a Binance account. The case involves phishing text messages impersonating Coinbase, which led to the theft of 33.7 bitcoins, worth approximately $900,000 at the time, from a beneficiary and their family trust held in the same Coinbase account.Investigators said that between June 5 and June 15, 2023, 11.2 of the stolen bitcoins were traced to the Binance account and were quickly converted into Monero. When the FBI requested the account be frozen, it held approximately 758.55 Monero; Binance transferred 110,300 USDT to a government-controlled wallet on August 3, 2026. (Bitcoin.com News)
23 Days, Profit Exceeds $3.15M; Monero Native Network's Top Holder Still Holds 16,000 XMR with 4x Leverage
Odaily News According to on-chain analyst Ai Yi's monitoring, the top holder on the Monero native network has accumulated profits exceeding $3.15 million in just 23 days by betting on XMR's price increase. The position was opened on August 9, reaching a peak of 34,000 XMR, valued at approximately $16.72 million. Last night, the holder closed half of the position, banking $1.637 million in profits, and currently retains a 4x leveraged position of 16,000 XMR, with unrealized gains exceeding $1.53 million.
A whale opens a 4x leveraged long position on XMR, target price $475–$516
According to on-chain analysis platform Lookonchain (@lookonchain), a newly created wallet deposited 3.56 million USDC into Hyperliquid, opened a long position on 36,000 XMR with 4x leverage valued at approximately $14.33 million, and set take-profit orders in the $475 to $516 range; the current XMR price is approximately $397.
Coinsbuy Hacked, Over $7.9 Million in Assets Stolen
According to Specter monitoring, over $7.9 million was stolen from wallets associated with Coinsbuy on Ethereum and TRON, and the attackers subsequently laundered the funds into XMR through exchanges. Coinsbuy stated that, with the support of ChangeNOW, it has successfully frozen stolen funds amounting to up to six figures. Following the incident, Coinsbuy temporarily suspended deposit and withdrawal services, which have now resumed.
value $4.18 million: an address opens a 4x long position with 11,000 XMR, ranking as the second-largest position on Hyperliquid
Odaily News: According to on-chain analyst Ai Yi’s monitoring, an address transferred 2 million USDC as margin and then opened a 4x long position of 10,962.78 XMR, valued at $4.18 million, with an entry price of $383.23. This has become the second-largest XMR position on Hyperliquid. The address has also placed a limit buy order worth $1.082 million between $378.2 and $381.4, indicating plans to add to the position if the price drops further.
OFAC updates ISIS-K sanctions list, adds 134 cryptocurrency wallet addresses; Tether has frozen all TRON address balances
According to Chainalysis, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) updated its sanctions list against ISIS-K (Islamic State Khorasan Branch) on July 1, adding 134 cryptocurrency wallet addresses, of which 131 are on the TRON chain and 3 are Monero addresses. On-chain data shows that the aforementioned TRON wallets have cumulatively received over $1.4 million since 2023 and transferred out over $880,000, with some funds flowing to Syrian crypto exchangers. Currently, Tether has frozen the balances of all 131 TRON addresses. Additionally, on the same day, OFAC also sanctioned two Brazilian individuals and four companies related to the Latin American criminal organization "Primeiro Comando da Capital" (PCC), accusing them of using cryptocurrency to transfer over $30 million in illegal proceeds across borders from the United States to Brazil.
$900,000 Bitcoin Theft Case: US Seeks Forfeiture of 110,300 USDT
Odaily News: The U.S. Attorney's Office for the District of Massachusetts filed a civil forfeiture lawsuit on September 28, seeking the forfeiture of 110,300 USDT seized from a Binance account. The case involves phishing text messages impersonating Coinbase, which led to the theft of 33.7 bitcoins, worth approximately $900,000 at the time, from a beneficiary and their family trust held in the same Coinbase account.Investigators said that between June 5 and June 15, 2023, 11.2 of the stolen bitcoins were traced to the Binance account and were quickly converted into Monero. When the FBI requested the account be frozen, it held approximately 758.55 Monero; Binance transferred 110,300 USDT to a government-controlled wallet on August 3, 2026. (Bitcoin.com News)
Revolut Responds to Multiple Extortion Attempts: No Direct Contact Received, Italian Authorities Have Intervened
Odaily News: Following a customer data breach at Revolut, multiple hacker groups have publicly demanded ransom. A group calling itself "IAmNotAVillain" demanded that Revolut pay 6,000 Monero (XMR, approximately $3 million) within 24 hours, or it would sell customer data to other criminal organizations; another group, "Revolut Smilik," had earlier demanded 10,000 Bitcoin (approximately $780 million).In response, a Revolut spokesperson stated that the company has not received any direct contact or extortion demands from any of the aforementioned individuals or organizations. Meanwhile, Italy's Anti-Mafia and Anti-Terrorism Directorate has launched an investigation, with Italian prosecutors investigating unauthorized access to government computer systems, and Italy's privacy regulator has also asked banks to urgently review the security of their access systems. (Cointelegraph)
Revolut Hit by Ransom Attack: Hackers Demand 3 Million Monero or Threaten to Leak Data
The hacker group "iamnotavillain" attacked Revolut and demanded 6,000 Monero as ransom, threatening to sell the data of at least 680 customers to the black market if the payment is not made.
ZachXBT Accuses Austin Fine of Allegedly Facilitating Money Laundering of Stolen Crypto Assets
On-chain detective ZachXBT posted allegations accusing user "Mr Austin Fine" (handle "@xmrfine") of helping Malone Lam, the mastermind behind a $245 million crypto fraud case, exchange funds for luxury goods and launder a portion of the stolen cryptocurrency, while also raising suspicions that he acted as an informant. ZachXBT has already traced on-chain, revealing that a portion of the funds flowed through Monero to Los Angeles luxury car dealer TBTFW for vehicle purchases.
NES holdings inflated to $50 million, Cosmos EVM exploit attacker actually profited about $60,000
According to Odaily, an investigation into the security vulnerability exploit of the Cosmos EVM module reveals that the primary attacker (0x9AE7) purchased $250,000 worth of NES and bridged it to Nesa Chain, exploiting a balance vulnerability to inflate holdings to 200 times their original size, then bridged approximately $50 million worth of NES back to Ethereum. The attacker's initial funding for the wallet originated from Monero. Through multiple wallets, the attacker exchanged NES for ETH on DEXs and deposited the proceeds into centralized exchanges. Due to rapid liquidity withdrawal, most exchanges suffered extreme slippage, and the attacker ultimately sold for only $315,000, netting a profit of approximately $60,000 after deducting costs.
Hackers exploit macOS Screen Sharing vulnerability to compromise Macs and implant Monero mining programs.
据 Decrypt 报道，荷兰国家网络安全中心（NCSC）发出警告，攻击者正在积极利用 macOS 屏幕共享功能中的一个身份验证漏洞（CVE-2026-65400，严重性评分 7.1），对将 5900 端口暴露于公网的 Mac 设备发起攻击，成功获取 root 权限后植入门罗币挖矿程序。
XMR, ZEC can be natively exchanged for BTC, ETH, and stablecoins; THORChain launches version 3.20
Odaily News: THORChain announced the launch of version 3.20, adding native cross-chain swap support for Monero (XMR) and Zcash (ZEC). Users can directly swap XMR and ZEC for Bitcoin, ETH, and stablecoins without wrapping assets, registering on centralized exchange accounts, or relinquishing asset custody. This upgrade also introduces Protocol-Owned Liquidity (POL) and Stable Reserve, and restores support for Solana, Base, and BNB. Among these, Stable Reserve supports zero-liquidity-fee swaps between stablecoins.
Hackers Exploit macOS Screen Sharing Vulnerability to Gain Root Access and Mine Monero
Odaily News: The Dutch National Cyber Security Centre (NCSC) has reported that attackers are exploiting a vulnerability in Apple's macOS Screen Sharing feature to take control of devices and install Monero mining programs. Multiple systems with port 5900 exposed to the internet have been compromised, with attackers gaining root access. The vulnerability, tracked as CVE-2026-65400, has a severity score of 7.1 out of 10. It stems from a state management error in the authentication process, allowing remote attackers to bypass login verification without valid credentials. Public proof-of-concept code has already been circulated. Apple has addressed the issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. The NCSC advises users to update their systems promptly and avoid exposing the Screen Sharing service directly to the internet. (Decrypt)
Coinsbuy Hacked, Over $7.9 Million in Assets Stolen
According to Specter monitoring, over $7.9 million was stolen from wallets associated with Coinsbuy on Ethereum and TRON, and the attackers subsequently laundered the funds into XMR through exchanges. Coinsbuy stated that, with the support of ChangeNOW, it has successfully frozen stolen funds amounting to up to six figures. Following the incident, Coinsbuy temporarily suspended deposit and withdrawal services, which have now resumed.
$282 Million in Bitcoin and Litecoin Stolen in Trezor Impersonation Support Scam
Odaily News, January 10 - A Bitcoin and Litecoin holder provided a 12-word recovery phrase to attackers impersonating Trezor support personnel, resulting in the theft of approximately $282 million in assets, including about $139 million in Bitcoin and $153 million in Litecoin. Blockchain forensics firm ZeroShadow stated that the incident stemmed from a social engineering attack, not a compromise of wallet software or private key infrastructure. The stolen funds were split via the THORChain cross-chain bridge within minutes and converted into Monero through instant exchange services. ZeroShadow's monitoring team flagged and froze approximately $700,000 in funds within 20 minutes. Under the BIP39 standard, a 12-word recovery phrase contains approximately 128 bits of entropy, while a 24-word phrase contains 256 bits of entropy. Chainalysis estimates that up to 23% of all mined Bitcoin is permanently inaccessible due to lost keys, involving millions of BTC, with causes including forgotten recovery phrases, damaged backups, and a lack of inheritance planning.
OFAC updates ISIS-K sanctions list, adds 134 cryptocurrency wallet addresses; Tether has frozen all TRON address balances
According to Chainalysis, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) updated its sanctions list against ISIS-K (Islamic State Khorasan Branch) on July 1, adding 134 cryptocurrency wallet addresses, of which 131 are on the TRON chain and 3 are Monero addresses. On-chain data shows that the aforementioned TRON wallets have cumulatively received over $1.4 million since 2023 and transferred out over $880,000, with some funds flowing to Syrian crypto exchangers. Currently, Tether has frozen the balances of all 131 TRON addresses. Additionally, on the same day, OFAC also sanctioned two Brazilian individuals and four companies related to the Latin American criminal organization "Primeiro Comando da Capital" (PCC), accusing them of using cryptocurrency to transfer over $30 million in illegal proceeds across borders from the United States to Brazil.
THORChain Resumes Trading After $10.7 Million Attack
Odaily, the decentralized cross-chain liquidity protocol THORChain has resumed trading after being down for over five weeks following a May attack. Signing, swapping, liquidity provider operations, and redemptions have all been restored.On May 15, blockchain investigator ZachXBT and security firm PeckShield identified that the protocol had likely been exploited, prompting THORChain to halt trading. The vulnerability resulted in a loss of approximately $10.7 million from one of its six Asgard vaults, while the other five vaults were unaffected.THORChain stated that each vault has now been verified, and every key share has been cross-checked. Native Monero swaps are currently undergoing end-to-end testing and will be launched subsequently. (The Block)
Related news
$900,000 Bitcoin Theft Case: US Seeks Forfeiture of 110,300 USDT
Odaily News: The U.S. Attorney's Office for the District of Massachusetts filed a civil forfeiture lawsuit on September 28, seeking the forfeiture of 110,300 USDT seized from a Binance account. The case involves phishing text messages impersonating Coinbase, which led to the theft of 33.7 bitcoins, worth approximately $900,000 at the time, from a beneficiary and their family trust held in the same Coinbase account.Investigators said that between June 5 and June 15, 2023, 11.2 of the stolen bitcoins were traced to the Binance account and were quickly converted into Monero. When the FBI requested the account be frozen, it held approximately 758.55 Monero; Binance transferred 110,300 USDT to a government-controlled wallet on August 3, 2026. (Bitcoin.com News)
Privacy coin sector market cap increased by $24.54 billion over 5 months, with ZEC and XMR leading growth
Odaily News: Over the past five months, the market cap of the privacy coin sector grew from $11.97 billion to $36.51 billion, an increase of $24.54 billion, or approximately 205%. Among them, Zcash (ZEC) market cap increased by $20.27 billion, while Monero (XMR) increased by $4.33 billion.In January, the U.S. Securities and Exchange Commission (SEC) concluded its investigation into the Zcash Foundation without recommending enforcement action. On August 25, digital asset management company Grayscale converted Zcash Trust into the ZCSH spot ETF and listed it on NYSE Arca, making it the first listed privacy coin spot ETF in the United States.On September 8, Digital Currency Group (DCG) exchanged ZEC for approximately $100 million worth of ZCSH ETF shares. During the same period, the price of ZEC rose from $319 to $1,507, while XMR rose from $330 to $555. (Bitcoin.com News)
Revolut Responds to Multiple Extortion Attempts: No Direct Contact Received, Italian Authorities Have Intervened
Odaily News: Following a customer data breach at Revolut, multiple hacker groups have publicly demanded ransom. A group calling itself "IAmNotAVillain" demanded that Revolut pay 6,000 Monero (XMR, approximately $3 million) within 24 hours, or it would sell customer data to other criminal organizations; another group, "Revolut Smilik," had earlier demanded 10,000 Bitcoin (approximately $780 million).In response, a Revolut spokesperson stated that the company has not received any direct contact or extortion demands from any of the aforementioned individuals or organizations. Meanwhile, Italy's Anti-Mafia and Anti-Terrorism Directorate has launched an investigation, with Italian prosecutors investigating unauthorized access to government computer systems, and Italy's privacy regulator has also asked banks to urgently review the security of their access systems. (Cointelegraph)
Revolut Hit by Ransom Attack: Hackers Demand 3 Million Monero or Threaten to Leak Data
The hacker group "iamnotavillain" attacked Revolut and demanded 6,000 Monero as ransom, threatening to sell the data of at least 680 customers to the black market if the payment is not made.
Bitcoin experienced a single-block reorganization, with the Antpool block included in the main chain and the Spiderpool block discarded
Odaily News: Research firm Galaxy Research recorded a reorganization event at Bitcoin block height 966500 on September 11, where mining pools Spiderpool and Antpool simultaneously discovered two valid blocks pointing to the same parent block, subsequently forming a brief competition. Ultimately, the Antpool block joined the chain with more cumulative work, and the Spiderpool block was discarded.Galaxy Research stated that this was the 3rd single-block reorganization in Bitcoin over the past 4 weeks, with the previous two occurring at block heights 962722 and 963853, respectively. Its node did not observe the block until the Antpool block completed confirmation and continued extending upon it.When a single-block reorganization occurs, the network will ultimately continue building along the chain with more cumulative work, while the other block is removed from the chain. Monero once experienced an 18-block reorganization, and Bitcoin SV experienced a 100-block reorganization in 2021; if a transaction is located in a replaced block, its confirmation count will disappear. (Bitcoin.com News)
ZachXBT Accuses Austin Fine of Allegedly Facilitating Money Laundering of Stolen Crypto Assets
On-chain detective ZachXBT posted allegations accusing user "Mr Austin Fine" (handle "@xmrfine") of helping Malone Lam, the mastermind behind a $245 million crypto fraud case, exchange funds for luxury goods and launder a portion of the stolen cryptocurrency, while also raising suspicions that he acted as an informant. ZachXBT has already traced on-chain, revealing that a portion of the funds flowed through Monero to Los Angeles luxury car dealer TBTFW for vehicle purchases.