The February 2026 wallet system upgrade implemented automatic Monero subaddress generation for every user deposit. Previously, users received a static deposit address that could be linked across multiple transactions through blockchain analysis — even though Monero's ring signature and RingCT mechanisms would obscure the transaction contents, the same deposit address appearing repeatedly created a linkability signal.
Monero subaddresses are derived mathematically from a user's primary wallet address using a index-based derivation function. Each subaddress is cryptographically distinct and unlinkable to other subaddresses (or the primary address) without the account's private view key. From the blockchain perspective, subaddress recipients appear to be completely unrelated parties.
Technical Implementation
The platform generates a fresh subaddress for each deposit request using the user's account-specific subaddress derivation key. The previous static deposit address model is deprecated — users requesting a deposit address receive a new, unique subaddress that expires after 48 hours or after one confirmed use. This eliminates the static-address linkability vulnerability while maintaining the user experience of a simple copy-and-paste deposit flow.
Integration with the multi-signature escrow system required coordination between the subaddress generation module and the multisig wallet coordination layer. Subaddresses are now generated within the multisig context, ensuring that the subaddress-level privacy properties are maintained throughout the escrow transaction lifecycle including dispute resolution.
// INFORMATIONAL NOTICE
Cryptocurrency privacy documentation. Monero guide →