Monero (XMR): History and Future
From a pseudonymous white paper to the most-used privacy coin in crypto: Monero's twelve-year history, how it works, who uses it, and what's next.
Most cryptocurrencies promise privacy. Monero actually delivers it, by default, on every transaction, and it has done so for more than twelve years. That track record is why XMR has survived exchange delistings, government bounties, and a near-constant stream of obituaries to remain the most widely used private digital cash in the world. Here’s how it got here, how it works, and where it’s headed.
A White Paper Nobody Signed
Monero’s story begins not with Monero, but with a document. On October 17, 2013, an author writing under the name Nicolas van Saberhagen published the CryptoNote v2.0 white paper. Nobody knows who van Saberhagen is. Like Satoshi Nakamoto, the author has never been identified, and the name is widely assumed to be a pseudonym.
The paper is a pointed critique of Bitcoin. Van Saberhagen argued that Bitcoin’s public ledger was a “critical flaw” for a currency: every payment you make is permanently visible, and once one address is tied to your identity, your entire financial history unravels. The paper defined two properties that true electronic cash should have. Untraceability means that for any incoming transaction, all possible senders are equally likely. Unlinkability means that for any two outgoing transactions, it should be impossible to prove they went to the same person. Bitcoin fails both tests.
The white paper didn’t just diagnose the problem; it prescribed the cure. Ring signatures would let a sender hide among a group of decoys, so an observer could see that someone in the group signed, but not who. One-time keys, now called stealth addresses, would generate a fresh destination address for every payment, so the recipient’s public address never appears on chain. The paper also called for an egalitarian, CPU-friendly proof-of-work to keep mining accessible, and for adaptive block sizes rather than hard-coded limits. Every one of these ideas is still at the heart of Monero today.
The Bytecoin Scandal and the Birth of BitMonero
The first coin to implement CryptoNote was Bytecoin, which surfaced publicly in early 2014 claiming to have been quietly running since 2012. The community soon discovered that roughly 82% of the total supply had already been mined before the public knew the coin existed. Whether that was an innocent quirk of a hidden launch or a deliberate premine, the Bytecoin community’s trust was gone.
A Bitcointalk user known as thankful_for_today saw the promise of the technology and the poison in its launch. In April 2014, he announced a clean fork of the Bytecoin codebase with no premine, and on April 18, 2014, BitMonero went live. “Monero” is Esperanto for “coin.”
The clean launch didn’t come with clean governance. Within days, thankful_for_today began making unilateral decisions the community objected to, including refusing to change controversial parameters and going silent for stretches. In a moment that would define the project’s culture, the community simply forked away from him. A group of contributors, most of them pseudonymous and including Riccardo “fluffypony” Spagni, smooth, othe, tacotime, NoodleDoodle, and eizh, took over development, dropped the “Bit” from the name, and kept building. A leaderless, community-owned Monero emerged soon after launch.
Twelve Years of Relentless Upgrades
What separates Monero from most of the 2014-era altcoins is that it never stopped improving. The project established the Monero Research Lab, a group of cryptographers who publish peer-reviewed work on privacy techniques, and it adopted a cadence of regular network upgrades that steadily hardened the protocol.
January 2017: RingCT. Ring Confidential Transactions, based on work by Bitcoin Core developer Gregory Maxwell and adapted by Monero researcher Shen Noether, hid transaction amounts for the first time. Before RingCT, Monero hid senders and receivers but amounts were visible. Afterward, every field that mattered was private.
October 2018: Bulletproofs. Hiding amounts came at a cost: transactions were large and fees were high. Bulletproofs, a new form of zero-knowledge range proof, cut the median transaction size by roughly 83% and slashed fees accordingly.
November 2019: RandomX. Faithful to the white paper’s call for egalitarian mining, Monero fought a years-long war against ASIC manufacturers, forking its mining algorithm several times to keep specialized hardware off the network. RandomX ended the war by designing an algorithm optimized for general-purpose CPUs. To this day, anyone with an ordinary computer can mine Monero.
October 2020: CLSAG. A more compact ring signature scheme shrank transactions by about 25% and sped up verification.
May 2022: Tail emission. Monero’s initial supply curve wound down, and a permanent “tail emission” of 0.6 XMR per block kicked in. Unlike Bitcoin, which will eventually rely entirely on fees to pay miners, Monero guarantees a small, predictable, and declining rate of inflation forever (just under 1% a year and falling) so that network security never depends on a fee market that may or may not materialize.
August 2022: Ring size 16, Bulletproofs+, and view tags. The number of decoys per transaction rose from 11 to 16, transaction sizes dropped again, and wallet syncing got dramatically faster.
Leadership evolved alongside the code. Spagni, the project’s most visible figure for years, stepped back as lead maintainer in December 2019, and Monero has operated without a public face since. Development is funded largely through the Community Crowdfunding System, in which contributors post proposals and the community donates XMR directly.
Who Actually Uses Monero?
This is the question that separates Monero from most of the crypto market, and the answer is that people actually spend it.
On chain data shows roughly 25,000 to 30,000 transactions per day in 2025 and 2026, with a single-day figure of 29,677 recorded in May 2026 and about 9.1 million transactions over the trailing twelve months. That’s not Ethereum scale, but it’s real, sustained, and growing about 15% year over year. Notably, Monero’s transaction volume in 2024 and 2025 stayed well above its 2020 and 2021 bull-market levels, which points to regular use rather than speculative churn. Median fees hover well under a penny.
It is worth acknowledging where some of that use comes from. Monero is the dominant currency on darknet markets; by 2025, nearly half of newly launched markets accepted only XMR. Ransomware groups have long preferred it. Chainalysis has described it as the “currency of choice” for laundering proceeds in some of the ugliest corners of the internet. Anyone writing about Monero and skipping this is not being straight with you.
But the same property that makes Monero useful to criminals makes it useful to everyone else, and the everyone-else category is far larger. Journalists and dissidents in hostile countries. Merchants who don’t want competitors reading their revenue off a public ledger. Ordinary people who simply don’t believe their landlord, employer, or ex-spouse should be able to look up their net worth because they once paid them in crypto.
The “Only Criminals Use It” Argument
You will hear this one constantly: Monero is only used for bad things, therefore a currency like Monero shouldn’t exist. It sounds serious. It isn’t, and the simplest way to see why is to think about cash.
Picture two people walking into a room. One hands the other an envelope of bills in exchange for something, and they walk out. Who knows about that transaction? Two people. Not the bank, not the government, not a blockchain analytics firm, not anyone. Unless one of them chooses to tell someone, that exchange is anonymous and untraceable, permanently. There is no ledger to subpoena and no address to cluster. And that scene isn’t an edge case. It plays out billions of times a day, in every country on earth: a farmer’s market, a used car, a tip at a restaurant, rent paid to a landlord, a kid’s allowance. Private, peer-to-peer cash exchanges are not a suspicious sliver of the global economy. By transaction count, they are the global economy.
Nobody looks at this and concludes that cash should be abolished because some of those envelopes contain drug money. We accept, without much thought, that a functioning economy runs on transactions that are visible only to the people making them, and that the privacy of the law-abiding majority is worth more than perfect surveillance of the lawbreaking few. The “only criminals” argument asks you to abandon that principle the moment money becomes digital, and it never explains why. Strip away the framing and it is not really an argument about Monero at all. It is a general anti-crypto argument dressed up as a concern about crime, and it fails the moment you apply the same logic to the twenty-dollar bill.
Monero’s community has always described the coin as digital cash, and the description is precise. Physical money is private by default and has been for as long as money has existed. Monero doesn’t invent a new kind of secrecy; it takes the oldest form of transaction there is, two parties and nobody else, and brings it into the present digital world.
The market seems to agree. Despite Binance delisting XMR in February 2024 and Kraken following for European customers that October, Monero’s price climbed sharply through 2025 and set a new all-time high of $797.73 on January 14, 2026. As of mid-September 2026 it trades around $510 with a market cap near $9.6 billion, ranking it inside the top 15 cryptocurrencies. Trading has migrated toward decentralized venues, atomic swaps, and the Haveno peer-to-peer exchange, which is exactly the outcome you’d expect from a coin built to route around intermediaries.
The Risks
A positive evaluation isn’t a blind one. Monero faces three real headwinds.
Regulation. The European Union’s Anti-Money Laundering Regulation will, from July 2027, prohibit regulated crypto service providers from handling “anonymity-enhancing coins.” The ban binds exchanges, not individuals; self-custody, peer-to-peer trades, and decentralized protocols remain legal. But it will make on-ramps harder for European users, and other jurisdictions may follow.
Mining centralization. In August 2025, a project called Qubic pointed its network’s computing power at Monero and claimed a hashrate majority, producing a six-block chain reorganization. Estimates of Qubic’s true share vary, but independent analyses put it below a sustained majority; no double-spend occurred, but the episode was a warning: RandomX keeps ASICs out, but it can’t stop a well-funded actor from renting CPUs. The community responded, Qubic’s share collapsed, and research into mitigations continues.
The analytics arms race. In 2020, the IRS awarded two contracts worth up to $625,000 each, to Chainalysis and Integra FEC, for tools to trace Monero, and firms like Chainalysis claim partial success using statistical analysis of the decoy selection process. The Monero Research Lab’s response is the most significant upgrade in the project’s history.
Where It’s Going: FCMP++
Ring signatures have always had a theoretical weakness: hiding among 16 decoys is good, but it isn’t perfect, and a sufficiently clever analyst with enough external data can sometimes narrow the field. Full-Chain Membership Proofs (FCMP++) eliminate the problem entirely. Instead of hiding among 16 outputs, every transaction will hide among every output ever created on the chain, well over a hundred million of them, while keeping proof sizes constant at a few kilobytes. It is paired with Carrot, a new addressing protocol that improves wallet efficiency and prepares Monero for future upgrades.
The upgrade has moved through the pipeline exactly as a serious project’s should. A stress-test network launched in October 2025, a second testnet went live on May 6, 2026, and Trail of Bits completed an audit of the cryptographic implementation in August 2026 with zero high-, medium-, or low-severity findings. Mainnet activation is expected once remaining audits and testing conclude. When it ships, Monero will offer the largest anonymity set of any cryptocurrency, and the entire history of the chain will serve as the anonymity set for every transaction made after the upgrade.
The Verdict
Monero is not a get-rich-quick token, and it has never pretended to be. It has no venture backers, no foundation with a marketing budget, no founder doing podcast tours. What it has is a twelve-year record of shipping cryptography that works, a community that once fired its own founder to protect the project, and a user base that treats the coin as money rather than a lottery ticket.
Privacy is not a feature you bolt onto a currency later. Monero understood that in 2014, built for it, and has spent every year since making it harder to break. In a market full of projects that promise the future, Monero is one of the few that has quietly been delivering it all along.
This article is for informational purposes only and is not financial advice. Cryptocurrency is volatile; do your own research before investing.