Monero provides a high level of anonymity for both users and their transactions. However, many criminal activities might be committed with the protection of anonymity in cryptocurrency transactions. Thus, user accountability (or traceability) is also important in Monero transactions, which is unfortunately lacking in the current literature. In this paper, we fill this gap by introducing a new cryptocurrency named \textit{Traceable Monero} to balance the user anonymity and accountability. Our framework relies on a tracing authority, but is optimistic, in that it is only involved when investigations in certain transactions are required. We formalize the system model and security model of Traceable Monero. We present a detailed construction of Traceable Monero by overlaying Monero with two types of tracing mechanisms, tracing the one-time addresses with money flows and tracing the long-term addresses. We prove the security of Traceable Monero and implement a prototype of the system, which demonstrates that Traceable Monero incurs merely a very small overhead in generating and verifying a transaction compared to Monero transactions.

中文翻译：

---

可追溯的门罗币：具有增强问责制的匿名加密货币

Monero 为用户及其交易提供了高度的匿名性。然而，许多犯罪活动可能会在加密货币交易中保护匿名性。因此，用户问责制（或可追溯性）在门罗交易中也很重要，遗憾的是当前文献缺乏这一点。在本文中，我们通过引入一种名为 \textit{Traceable Monero} 的新加密货币来填补这一空白，以平衡用户匿名性和问责制。我们的框架依赖于追踪权威，但它是乐观的，因为它只在需要对某些交易进行调查时才涉及。我们将 Traceable Monero 的系统模型和安全模型形式化。我们通过用两种类型的跟踪机制覆盖门罗币来展示可追溯门罗币的详细构造，追踪有资金流向的一次性地址，追踪长期地址。我们证明了可追踪门罗币的安全性并实现了系统原型，这表明与门罗币交易相比，可追踪门罗币在生成和验证交易方面仅产生非常小的开销。