How Does Monero Work?

L1|Risk C+|6 mechanisms|5 interactions

Monero is the leading privacy-focused cryptocurrency, using mandatory ring signatures, stealth addresses, and RingCT to make all transactions private by default. With a market cap of approximately $7.6 billion, XMR ranks among the top 20 cryptocurrencies. Its C+ grade reflects the 2025 51% attacks — which the Qubic mining pool executed but has since exited as of April 2026 — alongside 73 exchange delistings due to regulatory pressure on privacy coins. These risks are balanced by 10+ years of operation, a fair-launch distribution, active development momentum (Ring Signature v3 deployed March 2026, FCMP++ beta stressnet live with audit in progress), and a tail emission model providing permanent mining incentives.

TVL

Sector

L1

Risk Grade

C+

Value Grade

B-

Core Mechanisms

5.1.1

RandomX Proof-of-Work — CPU-optimized, ASIC-resistant mining algorithm designed for commodity hardware

RandomX launched in November 2019 to maintain ASIC resistance. CPU-friendly design enables broader participation but also makes hashrate rentable via general-purpose compute.

1.1.4

Monero tail emission — perpetual 0.6 XMR per block after initial supply exhaustion (reached June 2022)

Tail emission provides a permanent security budget. Annual inflation ~0.86% and declining. Novel at introduction but now an established pattern in the taxonomy.

4.3.1

Ring signatures with RingCT — mandatory transaction privacy using ring signatures to obscure sender among decoy outputs

CryptoNote ring signatures in production since 2014. RingCT added in 2017 to hide amounts. Ring Signature v3 hard fork deployed March 2026, reducing transaction size by 28% via improved ring member compression and decoy sampling.

4.3.1

Stealth addresses — one-time addresses generated per transaction to protect recipient privacy

Standard CryptoNote feature. Each transaction creates a unique destination address, preventing address linking.

1.3.1

Dynamic block size with penalty-based fee mechanism — blocks can grow beyond median size with a quadratic miner reward penalty

Adaptive block size allows throughput scaling without hard forks. Penalty prevents spam while allowing organic growth.

5.2.1

Monero difficulty adjustment — recalculates every block using a moving average for smooth adjustments

Per-block adjustment is more responsive than Bitcoin's 2,016-block window, reducing vulnerability to hashrate oscillation.

How the Pieces Interact

RandomX PoWRing signature privacyHigh

The August-September 2025 Qubic 51% attack demonstrated that RandomX's CPU-friendly design makes hashrate capturable through dual-mining incentives. Qubic exited Monero mining on April 1, 2026, reducing near-term concentration risk. The underlying vulnerability persists: any future dual-mining incentive scheme offering sufficient secondary rewards could repeat the attack. A successful chain reorganization on a privacy chain is particularly dangerous because double-spend attacks are harder to detect and trace than on transparent chains.

Ring signatures with RingCTStealth addressesMedium

Mandatory privacy for all transactions means the entire supply is unauditable from the blockchain alone. If a cryptographic flaw in ring signatures or RingCT allows undetectable token creation, there is no transparent pool to cross-reference. Supply integrity depends entirely on the soundness of multiple privacy primitives working in concert.

Tail emissionRandomX PoWMedium

While tail emission provides a permanent mining incentive (0.6 XMR/block), the relatively low emission rate may not generate sufficient miner revenue at lower XMR prices to prevent hashrate concentration. The 2025 attacks occurred despite active tail emission, suggesting the incentive may be insufficient to maintain decentralized mining.

Mandatory privacyDynamic block sizeLow

Private transactions are larger than transparent transactions due to ring signatures and RingCT proofs. The dynamic block size accommodates growth, but larger transactions mean higher per-transaction resource costs, limiting throughput compared to transparent chains.

Mandatory privacyExchange accessMedium

73 exchange delistings in 2025 demonstrate that mandatory privacy directly conflicts with regulatory compliance requirements. As atomic swaps and DEX access grow, Monero's economy increasingly depends on decentralized infrastructure that is less liquid and less accessible than centralized exchanges.

What Could Go Wrong

  1. In August-September 2025, the Qubic mining pool gained >51% of Monero's RandomX hashrate through its 'useful Proof-of-Work' dual-mining incentive, executing 6-block and 18-block reorganizations. Qubic exited Monero mining on April 1, 2026 following its transition to Dogecoin, removing the immediate threat. However, the underlying vulnerability persists: any future dual-mining scheme offering sufficient secondary rewards could repeat the attack on Monero's CPU-friendly RandomX algorithm.
  2. Monero faced 73 exchange delistings in 2025, including restrictions from Binance and Kraken, severely fragmenting centralized exchange liquidity. EU MiCA Article 79 explicitly prohibits custodying anonymity-enhancing coins across all 27 EU member states with full custodial bans by 2027; UAE/Dubai enacted a platform-level ban in early 2026. THORChain XMR mainnet (v3.18) launched in May 2026 providing non-custodial BTC↔XMR swaps, but THORChain itself suffered a $10.8M exploit days after the integration — and Chainalysis traced the attacker's pre-attack funding through Monero, amplifying the regulatory narrative against XMR's privacy features.
  3. Mandatory privacy (ring signatures, stealth addresses, RingCT) means all transactions are private by default, making supply auditability dependent on the cryptographic soundness of the privacy primitives. Unlike Zcash's opt-in privacy, there is no transparent fallback to verify total supply.
  4. FCMP++ (Full-Chain Membership Proofs), which replaces ring signatures with ZK proofs and expands the anonymity set from 16 to 150M+ outputs, completed a Trail of Bits audit May 11-22, 2026 with no critical findings publicly disclosed. Security researcher Taylor Hornby — who used AI to discover a critical 4-year-old counterfeiting vulnerability in Zcash's Orchard pool (patched June 1, 2026) — announced on June 6 he is adding Monero to his audit queue, introducing near-term cryptographic uncertainty. Until FCMP++ deploys to mainnet (targeted mid-to-late 2026), the existing ring signature privacy model remains in production.

Repeated Hashrate Capture Enabling Systematic Double-Spend

Moderate

Trigger: A mining pool or dual-mining scheme captures >51% of RandomX hashrate for periods exceeding 24 hours, enabling reorganizations deeper than the 10-block safety threshold.

  1. 1.A dual-mining incentive (like Qubic's uPoW) attracts >51% of Monero's RandomX hashrate to a single pool The pool gains ability to produce blocks faster than the rest of the network and perform chain reorganizations
  2. 2.Attacker executes deep reorganizations (18+ blocks as demonstrated in September 2025) to reverse confirmed transactions Double-spend attacks succeed against exchanges and merchants. Due to mandatory privacy, the double-spend is harder to trace and prove than on transparent chains
  3. 3.Remaining exchanges with XMR listings increase confirmation requirements to 100+ blocks or suspend deposits entirely Effective settlement time increases from ~20 minutes to hours, destroying XMR's utility for commerce and exchange transfers
  4. 4.Network confidence collapses, XMR price declines, further reducing mining revenue and honest hashrate Negative spiral where reduced price makes the attack cheaper relative to declining miner revenue, enabling persistent hashrate control

Risk Profile at a Glance

Mechanism Novelty3/15
Interaction Severity6/20
Oracle Surface0/10
Documentation Gaps3/10
Track Record8/15
Scale Exposure9/10
Regulatory Risk8/10
Vitality Risk3/10
C+

Overall: C+ (40/100)

Lower score = safer

More on Monero

Related L1 Explainers