<321bob321> Stuff and things

<agorise:matrix.org> someone said today that OM actually got hacked before. is that true? i doubt it. if so, source?

<agorise:matrix.org> what about retoswap though? weren't they? i seriously just want to use the safest one because i know bartenders here in mexico who have large sums of cash that they want to put into xmr and if anything ever happened like that and i was the one who recommended a platform, i'm a f*kn dead man. please confirm if true, please. eve [... too long, see mrelay.p2pool.observer/e/kKHdqYALYVBBLVVL ]

<tomdooley:matrix.org> dont throw the whole stack into a trade, break it up, then if anything happens, youre good

<tomdooley:matrix.org> @agorise:matrix.org: and dont fuck with people that are dangerous

<ofrnxmr:xmr.mx> @agorise:matrix.org: Yes, OM did. No, retoswap didnt.

<ofrnxmr:xmr.mx> Retoswap admins can steal all funds being offered on the orderbook, so.. trust what you want.

acx part-time work on Monfluo 2026Q2 is now fully funded! ccs.getmonero.org/proposals/acx-mon…ance-and-further-development-5.html @luigi1111

🥳 ^ while we wait for the 1TB disk, do note that registrations have moved to manual approval only - before this, any bot could register an account (this happened every minute or seconds, totalling 5 million+ accounts) and start up their own repository and fill it with hundreds of MB's of garbage (mainly advertising, for search engine

optimisation presumably). i have already deleted the largest offenders freeing 4 ish GB.

the ccs-backend can be pointed at a github repo, out of the box (i have confirmed this working while hosting my own instance) more sanity checks to to see what effect - if any - pointing a running ccs at a mirror'd repo on another host (it should have no effect) - this can be done temporarily if any bot removal / maintenance needs to be done, or,

during migration there are hiccups

the funding required page continues to work after i submitted a small try/catch patch to avoid any over funding

<user2570:unredacted.org> 🙂👍

thx plowsof

<r4v3r23> x.com/Joe_IO/status/2052012958054584577

<r4v3r23> monero on trezor safe 7

Monero's already supported on Ledger right?

<ofrnxmr:xmr.mx> Yes

<anonmesh:matrix.org> > Retoswap admins can steal all funds being offered on the orderbook

<anonmesh:matrix.org> Can you explain this further?

<ofrnxmr:xmr.mx> A trade consists of 3 parties

<ofrnxmr:xmr.mx> buyer <-> mediator/admin <-> seller

<ofrnxmr:xmr.mx> you need 2/3 of these people to sign a multisig transaction to release funds. In the event of a dispute, the mediator is the second signature and decides where the funds are sent to.

<ofrnxmr:xmr.mx> [... more lines follow, see mrelay.p2pool.observer/e/lcWDxIALV2ljdWg4 ]

<ofrnxmr:xmr.mx> so every offer to sell xmr, can have the xmr stolen by rogue admins (if they decided to rug or had their admin keys stolen).

<anonmesh:matrix.org> Oh yes, I thought you implied it for all orders, but this is still a fair threat. How are the mediators/admins selected btw? Is it somehow anonymous individuals with some kind of reputation, or are they just the devs of Retoswap?

<anonmesh:matrix.org> Or actually it could be even more dangerous if there would be more mediators in a decentralized way. Maybe multiple mediators could solve this?

<ofrnxmr:xmr.mx> @anonmesh:matrix.org: They select themselves

<ofrnxmr:xmr.mx> The mediators are the admins on reto

<ofrnxmr:xmr.mx> @anonmesh:matrix.org: More mediators mean that the mediator trying to steal funds has a lower chance of being selected as the mediator for the offer that they are trying to steal from