The core team stewarded website (getmonero.org) was compromised on November 18th and served malicious binaries meant to steal the seeds of users. If you downloaded any binaries from the site within the past week, you should NOT run them and redownload. If you have run it, move your funds immediately.

ALWAYS VERIFY HASHES! DO NOT SKIP THIS STEP!

You can read more about the situation on the blog post of the website.

CLI v0.15.0.1 'Carbon Chamaeleon' has been tagged. This solves the long-sync issue in the first tag. Users are encouraged to post the results of their deterministic builds.

XMR.to’s Community Hub has expanded their offerings with a Monero network map, which shows the distribution of Monero nodes across the world, as well as which nodes are on which protocol version. As well, XMR.to has added a new feature to the site proper, allowing users to specify an amount in Monero.

Stanford University responsibly disclosed an attack affecting Monero and Zcash wherein they describe “remote side-channel attacks on receiver privacy”. Their writeup (with link to the paper) can be found here with Monero’s publicly disclosed HackerOne report available here.

Monero Python Module 0.62 has been released, with optimized ed25519 code, leading to about 100x faster subaddress generation and seed operations.

MyMonero has released the 1.1.13 version of their desktop client, with general security and performance updates. Non-mandatory for the fork, but recommended.

Test Monero Core Software

Anyone with moderate technical ability is encouraged to try to build and run Monero nightlies. Do not trust it with your Monero, but feel free to open an Issue on Github as problems arise. Instructions to build on your OS of choice can be found on GitHub.

Getting Started with Helping Monero

If you are new to Monero and want to contribute, please check out this article about volunteering and contributing to Monero from the Monero Outreach Group.