MKT
XMR
Privacy

What is Monero (XMR)?

RANK #14
$557.11+0.49% 24h+6.19% 7d
LIVE · CoinGeckoPrice updated Sep 27, 2026, 01:25 PMText updated

The only major cryptocurrency where privacy is mandatory rather than optional, and the one asset whose price rose while exchanges were dropping it — XMR hit an all-time high near $797 in January 2026 after more than seventy venues delisted it. Two things define its year: FCMP++, a hard fork that widens the anonymity set from 16 decoys to over 150 million outputs, and the August 2025 Qubic episode, which showed what a rented majority of a small hashrate can do.

Price chart · 30D

Monero market stats

Market cap
$10.48B
24h volume
$95.32M
24h high
$562.88
24h low
$546.5
7d change
+6.19%
Circulating supply
18.81M XMR
All-time high
$797.73
All-time low
$0.2162

Monero at a glance

Privacy
Mandatory on every transaction — no transparent mode exists
Consensus
Proof of work, RandomX — designed for CPUs, ASIC-resistant
Supply
No cap. Tail emission of 0.6 XMR per block, permanently
All-time high
Near $797, January 2026
Delistings
More than 70 exchanges since 2024; 73 venues dropped privacy coins during 2025
FCMP++
Hard fork in public testing since May 2026 — anonymity set from 16 to 150m+

Categories: Smart Contract Platform · Privacy Coins · Layer 1 (L1) · Proof of Work (PoW) · Galaxy Digital Portfolio · Privacy

How Monero works

Monero is a cryptocurrency where you cannot see who sent what to whom, or how much, and there is no setting to turn that off. Bitcoin is a public ledger with pseudonyms — chain analysis has been deanonymising it commercially for a decade. Monero was built so that analysis does not work.

Three mechanisms do it together. Ring signatures mix your real input with decoys so an observer cannot tell which one spent. Stealth addresses generate a fresh one-time destination for every payment, so nothing accumulates against a reusable address. RingCT hides the amount while still proving no coins were created. Every transaction gets all three; there is no opt-in and no transparent mode, which is precisely what makes the anonymity set large enough to matter.

FCMP++, the biggest change in Monero's history

Ring signatures have a known limit: a ring of 16 means an observer knows your real spend is one of 16. Statistical work across many transactions can narrow that. FCMP++ — full-chain membership proofs — replaces the ring with a zero-knowledge proof that your input is somewhere in the entire set of unspent outputs. The anonymity set goes from 16 to over 150 million, roughly a ten-million-fold increase, and the statistical attacks that worked against rings stop applying.

It entered public testing in May 2026. If it activates as designed it removes the last practical foothold chain analysis had on Monero.

Mining is genuinely open, and that matters here

Monero uses RandomX, deliberately optimised for general-purpose CPUs and hostile to ASICs. A laptop can mine XMR — not profitably at scale, but it can participate. This is why Monero's search traffic is full of mining calculators and rigs in a way no other top-50 asset's is: its users actually run the network. It is also the source of the security problem below.

What XMR is used for

  • Payments where the parties do not want the amount or counterparties public — the entire point of the asset.
  • A store of value for holders who consider financial surveillance the risk they are hedging.
  • Settlement between parties in jurisdictions where transparent chains create real personal danger.
  • Mining participation, which on Monero is open to ordinary hardware rather than industrial operations.

The uncomfortable half has to be said plainly: mandatory privacy is valuable to people evading surveillance for good reasons and to people evading it for bad ones, and the technology cannot distinguish between them. Monero's community argues that cash has always had this property and that the alternative — a permanent public record of every payment anyone makes — is the more dangerous default. That is a real argument. It is also why the delistings keep coming, and both facts belong in any honest assessment.

XMR tokenomics and supply

There is no supply cap. Monero's main emission curve ended in 2022 and it now runs a permanent tail emission of 0.6 XMR per block — roughly 0.8% annual inflation at present, declining as a percentage as the base grows.

This was a deliberate design decision, not an oversight, and it is the clearest-headed piece of economics in the asset. Monero's developers reasoned that a chain whose miners are paid only by transaction fees eventually has a security budget that depends on fee spikes — which is precisely the unresolved question hanging over Bitcoin. A small permanent subsidy guarantees miners are always paid something. Monero chose predictable mild inflation over an uncertain future security budget, and said so openly.

There was no premine, no ICO and no founder allocation. Monero launched in 2014 as a community fork and its development is funded by a public donation-based Community Crowdfunding System. In distribution terms it is among the cleanest assets in existence.

XMR staking and yield

Monero cannot be staked. It is proof of work with no bonding mechanism.

Mining is the only protocol-level way to earn, and unusually it is accessible: RandomX runs on ordinary CPUs, so joining a pool with a normal computer is realistic participation rather than theatre. Products offering XMR yield are lending it to a platform — a counterparty relationship, and an odd one to accept for an asset whose entire purpose is not trusting intermediaries with your financial information.

Monero risks

August 2025: the Qubic episode

Qubic, a mining project, spent a month redirecting hashrate at Monero and in August 2025 claimed to have taken majority control. What is documented is that a six-block deep reorganisation occurred and roughly 60 blocks were orphaned. Qubic's claim of a sustained 51% is disputed — controlling a large share of hashrate can produce a six-block run through luck rather than dominance, and a true majority would allow rewriting far more history than was rewritten.

The lesson stands regardless of which reading is right. Monero's CPU-friendly mining keeps it decentralised in participation and also keeps its total hashrate small in dollar terms — small enough that a well-funded project can rent or redirect a threatening share of it. Bitcoin's defence is that attacking it is prohibitively expensive. Monero does not have that defence at the same scale, and this is the structural cost of ASIC resistance.

Delistings and access

More than seventy exchanges have removed Monero since 2024, and 73 venues dropped privacy coins during 2025 — a 43% increase over 2023. The EU's anti-money-laundering package is expected to restrict anonymity-enhancing coins at regulated venues by 2027. The practical consequence for a holder is not price but access: buying and selling increasingly means decentralised exchanges, atomic swaps or peer-to-peer, all of which have their own risks and worse pricing.

Worth noting against the obvious conclusion: XMR reached an all-time high near $797 in January 2026 despite all of it. Restricted access has not, so far, meant falling demand — arguably the restrictions have advertised the product.

Regulatory escalation

Delisting is the mild version. Outright prohibition in major jurisdictions is a live possibility for privacy coins, and Monero is the flagship. That is a tail risk with a real probability rather than a theoretical one.

FCMP++ is a hard fork

Replacing the core privacy mechanism of a live chain carrying billions is the highest-risk kind of upgrade there is. Monero's engineering record is strong and the fork has been in public testing since May 2026. It is still a rewrite of the thing the asset exists for.

No recourse, by design

Send to the wrong address and it is gone — there is no chain analysis to trace it, which is the feature working correctly. The properties that protect you protect your mistakes too.

Monero: key events

  • Apr 18, 2014 — Monero launches as a community fork with no premine and no founder allocation.
  • Jan 10, 2017 — RingCT activates, hiding transaction amounts as well as participants.
  • Nov 30, 2019 — RandomX activates, making mining CPU-friendly and hostile to ASICs.
  • Jun 8, 2022 — The main emission ends; the permanent 0.6 XMR tail emission begins.
  • Aug 12, 2025 — Qubic claims majority hashrate control; a six-block reorg and around 60 orphaned blocks are documented.
  • Jan 1, 2026 — XMR reaches an all-time high near $797 despite seventy-plus delistings.
  • May 1, 2026 — FCMP++ enters public testing, widening the anonymity set past 150 million.

Monero FAQ

Is Monero traceable?

+

Not by the methods that work on Bitcoin. Ring signatures, stealth addresses and RingCT hide the sender, recipient and amount on every transaction, with no transparent mode. Chain analysis firms have claimed probabilistic techniques against the 16-decoy ring, and FCMP++ — in public testing since May 2026 — replaces the ring with a proof over the entire unspent output set, taking the anonymity set past 150 million and removing that foothold.

What is FCMP++?

+

Full-chain membership proofs, Monero's largest ever protocol change. Instead of hiding your spend among 16 decoys, a zero-knowledge proof shows your input is somewhere in the whole set of unspent outputs — an anonymity set above 150 million, roughly ten million times larger. It entered public testing in May 2026.

Why are exchanges delisting Monero?

+

Mandatory privacy conflicts with the transaction-monitoring obligations regulated venues have. More than seventy exchanges have dropped it since 2024, and the EU's anti-money-laundering package is expected to restrict anonymity-enhancing coins at regulated venues by 2027. XMR still reached an all-time high near $797 in January 2026.

Did Monero suffer a 51% attack?

+

In August 2025 the Qubic project claimed majority control of Monero's hashrate after a month-long campaign. What is documented is a six-block deep reorganisation and about 60 orphaned blocks. The 51% claim is disputed — a large hashrate share can produce that run through luck, and a genuine majority would have allowed far deeper rewriting. Either way it showed that Monero's total hashrate is small enough in dollar terms for a funded project to threaten it.

Can you mine Monero with a CPU?

+

Yes. RandomX is deliberately built for general-purpose CPUs and hostile to ASICs, so an ordinary computer can join a pool and contribute meaningfully. That openness is why Monero's mining is unusually decentralised — and why its total hashrate is comparatively cheap to rival.

Does Monero have a supply cap?

+

No. The main emission ended in 2022 and a permanent tail emission of 0.6 XMR per block continues — about 0.8% a year and falling as a percentage. It was chosen deliberately so miners always have a subsidy, rather than leaving security to depend on fee revenue alone.

Monero vs Zcash — which is more private?

+

Monero's privacy is mandatory on every transaction; Zcash's shielded pool is optional, and optional privacy means a smaller anonymity set because most users do not opt in. Zcash's cryptography is strong, but a shielded transaction among a small shielded set stands out. Monero's approach has the weaker regulatory position and the stronger practical privacy.

Where can you buy Monero now?

+

Increasingly outside major regulated exchanges — decentralised venues, atomic swaps and peer-to-peer, following seventy-plus delistings since 2024. Expect worse pricing and more counterparty diligence than for a listed asset.

Sources

This page is information, not financial advice. Prices come from CoinGecko; the text is written and checked by our desk. See our editorial policy.