Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

KYC and XMR FOR HACKERS

AltKey

Where

HackersTown
DEF CON 34

Duration

30 min

Shows how technologists can use Monero to pay for goods and services without KYC checks, and which correlation attacks and mitigations matter.

Summary

The talk is a practical tour of using Monero (XMR) to buy goods and services without handing identity documents to an exchange. The speaker stresses that it is not trading advice and that each listener must judge their own threat model, since no single operational security approach fits everyone. Bitcoin serves as the contrast throughout: its public ledger can expose purchases long after the fact, and fraud-scoring tools can flag coins that touched mixers, which makes ordinary payments risky.

Using a worked example of a collectible card sale, the speaker shows how Monero's private-by-default design avoids that exposure. Getting XMR still usually means passing through an exchange that collects identity data. The main threats to Monero users are timing correlation, poisoned nodes that log transactions, and dust attacks that tag wallets. Suggested defenses include routing traffic through Tor, running your own node, blacklisting dusted addresses, using one-time addresses, and holding funds before spending them.

The talk closes with places to spend XMR, such as privacy-focused hosting and VPN providers, and wallet options including Cake Wallet and the official desktop wallet. Decentralized exchanges and the free book Mastering Monero are offered as starting points. The takeaway is that the chain's underlying math has not been publicly broken, so most failures come from user mistakes.

Materials

Related talks