TODO list for launch

[j-berman]

Wallet features

• Restore
• Sync
• Transfers
• Sweeps
• Support >8 input txs
  • Needs faster FCMP++ prove()
  • FCMP++: support up to 128 inputs per tx, and 8 inputs per FCMP++ proof #57
• Payments to integrated address
  • carrot+fcmp: send to integrated address and fix transfer tests #61
• scan_tx
  • fcmp++: scan_tx & RPC for path by global output id #49
  • Consolidate paths in the response
• Background sync
• Hot/cold wallet integration
  • Carrot tx proposal overhaul, wallet2_basic lib, sweep fixes, and preliminary hot/cold types  #51
  • wallet: finsih implementing and testing hot/cold wallet cryptography #52
• HW wallet interface changes
  • Guide: How to implement HW devices for Carrot/FCMP++ [WIP] #63
• Tx proofs
• Multisig
• 3rd party HW wallet integrations
  • Helpful link: Guide: How to implement HW devices for Carrot/FCMP++ [WIP] #63
  • Trezor
  • Ledger
• Clean up CLI references to rings in UI
• Clean up GUI references to rings
• Wallet RPC describe_transfer command for Carrot transaction proposals
• Don't remove existing tx dests and tx privkeys when opening an old wallet with the new software
  • See this section
• Don't need simple_wallet::prompt_if_old after fork
• Remove block hashes download on restore

Daemon features

• Build FCMP++ tree
• DB migration for FCMP++ tree
• Validate FCMP++ txs
• Validate Carrot txs
• Include init sync data needed to restore a wallet from arbitrary restore height
• Include FCMP++ tree root and n tree layers in PoW hash
• Prohibit torsioned outputs at consensus
• Endpoint to get path by output id
  • fcmp++: scan_tx & RPC for path by global output id #49
  • Consolidate paths in response
• Hardened tx weight calculations (TODO: revisit FCMP++ transaction weight funcion #44)
  • Proposed: https://github.com/ArticMine/Monero-Documents/blob/master/MoneroScaling2025-07.pdf
• Dynamic block weight changes
  • Proposed: https://github.com/ArticMine/Monero-Documents/blob/master/MoneroScaling2025-07.pdf
• PoW-enabled relay (PoWER)
• RandomX commitments w/double hashing

Known bugs

• [BUG] error: m_blockchain <> m_tree_cache top block idx mismatch #45
• [BUG] node failed to verify FCMP++ proof #46
• @nahuhh reported a segfault in wallet, broken wallet state
  • Should be fixed by Destroy Rust FFI types correctly #39 and fcmp++: fix path_for_proof when a non-root layer has single elem #59
• Sweep when some txs don't cover fees.
  • Mitigated by Carrot tx proposal overhaul, wallet2_basic lib, sweep fixes, and preliminary hot/cold types  #51.
  • Should be fixed by carrot_impl: sweep_all filters dust automatically #54.
• Handle uncaught errors in tx construction (e.g. no unlocked outputs triggering "no input candidates provided" currently breaks the RPC wallet)
  • Possibly carrot+fcmp: send to integrated address and fix transfer tests #61
  • Add a functional test for error handling in the RPC wallet
• Sporadic failure in k_anonymity functional test (link)
  • Maybe this one is ok to leave for now since allowing >8 inputs per tx should solve it.
• Handle tx dests taking Carrot changes into account.
  • carrot+fcmp: send to integrated address and fix transfer tests #61
• Handle tx priv keys taking Carrot changes into account.
  • carrot+fcmp: send to integrated address and fix transfer tests #61
• Fee-included transfers.
  • carrot+fcmp: send to integrated address and fix transfer tests #61
• wallet2::get_payment_id updated for Carrot.
  • carrot+fcmp: send to integrated address and fix transfer tests #61
• Blockchain import should add locked outputs and update FCMP++ tree
• Require new wallets point to updated daemon (required for building the tree from an arbitrary restore height)
  • Require updated daemon on init wallet connection #58
• Creating watch-only wallet from full wallet, wallet2::import_blockchain has a FIXME for tree

Misc.

• FFI cleanup
  • Destroy Rust FFI types correctly #39
  • Remove unwraps and asserts
• fcmp++: faster & cleaner transparent amount commitment handling, and detangle deps #43
• fcmp++: avoid expensive inner proof_size calls #40
• Don't store output pubkeys and commitments in db twice
  • fcmp++: store indexes for outputs in tree instead of complete OutputContext, saving 57 bytes/output #62
• Test pre-RCT to FCMP++
  • FCMP++/Carrot: core test creating FCMP++/Carrot tx from {Coinbase,Regular} Pre-RCT tx and BP+ tx #67
• Clean up compile warnings
  • Fix FCMP++/Carrot compile warnings #66
• Block explorer
  • Discussion: Changes for Carrot/FCMP++ moneroexamples/onion-monero-blockchain-explorer#335
• LWS
• Updated documentation for the FCMP++ integration
• Carrot integration documentation
  • Heuristics wallet implementers must keep in mind (e.g. zero-change dummies back to sender)
  • New things users should understand (new priv keys, tx keys, tx proofs, view balance key)
• Document general wallet changes users should keep in mind
  • Updated wallets must point to updated daemons, old wallets can point to updated daemons
  • Deprecated scan_tx scanning future txs relative to wallet sync height, faster wallet restore at high height
  • Updated wallets re-sync from restore height (in order to sync tree)
• Document general daemon changes users should keep in mind
  • Long migration
  • Deprecated building on top of alt chains
• Make sure functional tests pass excluding the HF from hardforks.cpp too
• Use optimized libs (https://github.com/j-berman/fcmp-plus-plus-optimization-competition)
• Integrate updated divisors re-implementation

On hold

• Blinds cache (fcmp++: cache that blinds branches and outputs in the background #25) (no longer necessary thanks to contest success)

[jeffro256]

Stressnet Blockers

The following tasks are blockers before a useful stressnet network can be launched.

• Support >8 input txs (including fixing quadratic prove bug)
• Divisors re-impl from SLVer bullet
• Pulling in @fabrizio-m's ec-divisors submission

These tasks may significantly impact the performance characteristics of the nodes and should be merged before undergoing stressnet testing.

[spackle-xmr]

Unresolved from the 2024 stressnet

• Serialization limits: Daemons processing big blocks may bump against serializer sanity checks and fail to sync #9388 and contrib: change default value of epee::serialization to fix limitation #9433

• Dynamic block sync size: src: dynamic block sync size #9494

• Dynamic span: src: dynamic span, to calculate span limit dynamically #9495

[nahuhh]

Unresolved from the 2024 stressnet

• Serialization limits: Daemons processing big blocks may bump against serializer sanity checks and fail to sync #9388 and contrib: change default value of epee::serialization to fix limitation #9433

serialization limits might best be resolved by 8867

• Dynamic block sync size: src: dynamic block sync size #9494

this should be ready for review, and had been tested many times. This works around the serialization limits (by keeping batches, by default, below them), while also syncing batches based on size instead of an arbitrary 100 or 20 blocks.

• Dynamic span: src: dynamic span, to calculate span limit dynamically #9495

This is unrelated to stressnet / hopes to fix an unrelated issue

---

So unless we plan on going above ~30mb blocks, 9494 (dynamic block sync size) is the only one of these 4 prs that need to make it into the stressnet