14:49:00 Hello, I guess it could be the right room for this. Could someone explain or give more details on an observation made by Justin Ehrenhofer (SamsungGalaxyPlayer) regarding recent CCS wallet breach? In particular, what interests me is how Txs bb77d...d1a58 and then both 2c5b4...ad5ec and 06550...ca47b were linked together? How true spends were estimated? Unusual fee amounts? Or just 14:49:00 time correlation? Thanks in advance! 14:49:07 https://github.com/monero-project/meta/issues/916 14:49:28 https://github.com/monero-project/meta/issues/916#issuecomment-1791309479 14:49:28 https://github.com/monero-project/meta/issues/916#issuecomment-1791446149 15:03:44 He's "sgp" on IRC, doesn't seem around atm, unless behind a bridge. 15:06:08 Alfie Edwards: Did you read the explanation by SGP here?: https://moonstoneresearch.com/2023/11/03/Postmortem-of-Monero-CCS-Hack.html 15:06:50 Thanks, that is what I looked for 15:23:11 Mixing testnet (280xx) and stagenet (380xx) won't work 😆 15:36:22 sgp here, let me know if you have questions 19:26:06 What are the best ways to learn what Monero transactions are dropped/modified as a result of a reorg? https://monero.stackexchange.com/questions/14150/how-do-i-get-notice-of-a-monero-reorg-and-the-transactions-that-were-dropped-mod 20:24:46 It doesn't happen often because we don't usually have reorgs more than 2-3 blocks deep. But if some transactions become invalid, they'll stay in mempool for, IIRC, 5 days, and it will be clearly visible 20:25:04 Because they will be invalid and unmineable 20:27:58 There's also "kept_by_block" in transaction info when you call RPC to get the mempool 20:28:07 kept_by_block = transaction was in a block and was reorg'd