Skip to content

Memoro Vault Bounty Challenge (36 XMR Security Demonstration)

Kaŝmaristo Delvakto requested to merge Kasmaristo-Delvakto/memoro-vault-bounty:Kasmaristo-Delvakto-master-patch-03027 into master

Proposal

This proposal launches the Memoro Vault Bounty Challenge: a live security demonstration where the Monero community is invited to test and attempt to break a new vault system.

  • I am personally committing 1 XMR per month from September 15, 2025 → September 15, 2026 (12 XMR total).
  • I am requesting 2 XMR per month from the community, October 1, 2025 → September 1, 2026 (24 XMR total).
  • Together, this builds a 36 XMR bounty pool.

Whoever recovers the vault’s seed keeps the Monero.

GitHub release with hashes, integrity checks, and the view-only wallet to verify the bounty:
🔗 Memoro Vault v1.0.8: Official Bounty Challenge

What is Memoro Vault?

Memoro Vault is a self-contained, offline vault for protecting seeds, private keys, and sensitive files. It is built for inheritance, disaster recovery, and long-term Monero storage.

  • Rust-backed crypto: all security-critical operations (Argon2id, AES-GCM, SHA-256) are implemented in Rust and compiled to WebAssembly.
  • Argon2id: memory-hard key derivation, resistant to GPU/ASIC cracking.
  • AES-256 GCM: authenticated encryption for confidentiality and integrity.
  • SHA-256: used for integrity checks and answer-order binding.
  • Frontend: HTML/JS interface for accessibility, but Rust handles the crypto.
  • Offline-first: no servers, no custodians, no telemetry.

Why This Matters for Monero

  • Inheritance & continuity: Keys are often lost. Memoro Vault provides a controlled way for families or trusted parties to recover Monero if the original owner cannot.
  • Audit & testing: The bounty forces real-world verification. If it holds, the vault is proven. If it breaks, we learn.
  • Transparency: The vault files, hashes, and a view-only wallet are all public for verification.
  • Self-sovereignty: No need to trust third parties.

This project directly supports Monero’s ethos of privacy, resilience, and user empowerment.

Milestones & Timeline

  • September 15, 2025: personal contributions begin (1 XMR/month).
  • October 1, 2025 – September 1, 2026: community contributions of 2 XMR/month.
  • Total grows to 36 XMR bounty pool.

Expiration

This proposal expires at the end of September 2026, coinciding with the last scheduled bounty deposit.
If not fully funded by that point, remaining unfunded amounts are released back to the general fund.

Call to Action

Memoro Vault could become a core tool for Monero users and families who need secure inheritance planning and disaster recovery.

By supporting this bounty, you help:

  • Grow the prize pool to incentivize testing.
  • Strengthen Monero’s security ecosystem.
  • Prove (or break) an open-source vault designed to protect the future of private money.

Support the bounty. Test it. Try to break it. Help Monero grow stronger.

Merge request reports