CoinYQ Dossier

Monero started from forked code and kept rewriting the rules of private cash

BitMonero was announced on 9 April 2014 as a new chain built from Bytecoin’s CryptoNote-based code. It inherited the code lineage, not Bytecoin’s ledger. The sharper break came later: Monero repeatedly made stronger privacy rules mandatory, changed its proof of work and accepted permanent issuance to keep miners present. Its current story ends with a boundary—v16 is live, while FCMP++ and CARROT are still being built.

A Bytecoin code fork began with an empty ledger

The original forum post announced BitMonero on 9 April 2014 and scheduled launch for 18 April at 10:50 GMT. It called the software a Bytecoin fork but also specified a new genesis block. That distinction matters: developers reused and changed CryptoNote-based code; miners did not receive Bytecoin balances or its old chain. A Monero Research Lab paper later clarified that Bytecoin’s reference code, not a separately published CryptoNote reference implementation, was the immediate source.

Monero’s own history calls the start fair and pre-announced, with no premine, instamine or development cut from block rewards. The name shortened to Monero in the launch month. When thankful_for_today later proposed changes the community rejected, a new Core Team and the continuing community took over the project. The official account calls this a fork of the project; it does not describe another currency splitting from the live Monero ledger.

RingCT turned hidden amounts from an option into a network rule

The first design already used one-time recipient outputs and ring signatures, but Monero did not hide amounts with RingCT from its first block. Protocol v4 allowed RingCT at block 1,220,516 on 5 January 2017. Protocol v6 then rejected ordinary non-RingCT transactions at block 1,400,000 on 16 September. Privacy moved from a wallet choice toward a network rule.

The next bottleneck was size. RingCT needs range proofs so nodes can confirm hidden values are valid. Bulletproofs made those proofs smaller in October 2018; they were enabled on the 18th and required on the 19th. Bulletproofs did not hide an IP address or choose decoys. It improved the amount-proof layer, one part of a system whose pieces should not be collapsed into the word “anonymous.”

RandomX and Dandelion++ moved the argument beyond the ledger

On 30 November 2019, Monero replaced its proof of work with RandomX. The algorithm uses random code and memory-heavy work to favor general-purpose CPUs and reduce the advantage of specialized ASICs. That is an engineering aim, not proof that mining is evenly distributed or profitable for every processor.

Version 0.16 added Dandelion++ in May 2020. Instead of immediately flooding a new transaction to many peers, a node first sends it along a narrower path before wider diffusion. This makes it harder to connect a broadcast to its source IP, but the official technical specification still warns that an ISP, VPN provider or first remote node sits outside that protection. Tor or I2P configuration remains a separate choice.

The October 2020 upgrade introduced CLSAG and then forbade the older MLSAG transaction format. This was another efficiency change to the signature path. It did not replace RingCT, stealth outputs or the network layer; Monero’s privacy came from upgrading several different mechanisms in sequence.

Tail emission traded a hard cap for a lasting security budget

Monero’s main emission declined until block 2,641,623 on 9 June 2022 at 00:29 UTC. From there, the nominal block subsidy became 0.6 XMR per roughly two minutes, or less when a large block triggers a penalty. Supply therefore has no final maximum. The annual percentage added falls as the existing supply grows, but it never becomes zero by rule.

Two months later, protocol v15 fixed each ring at 16 members—one real spend and 15 decoys—deployed Bulletproofs+ and added view tags to reduce wallet scanning work. V16 then rejected the older transaction format. The release tied together privacy, efficiency and the miner budget: hidden transactions still had to remain practical to verify, scan and include in blocks.

The stable software still runs v16 while the next proof system is built

The latest stable core and command-line release at review time was v0.18.5.1, published on 8 July 2026; it hardened wallet and daemon behavior and updated the RandomX library without announcing a new consensus version. GUI v0.18.5.2 followed on 21 July. The canonical upgrade table still ends at v16 and leaves the next height, date and version as placeholders.

FCMP++ proposes replacing the 16-member ring with a proof that a spend belongs to the much larger set of chain outputs. Current integration targets CARROT, while earlier Seraphis and Jamtis paths remain research history or separate future work. The hard-fork milestone was 69% complete after its 23 August 2026 update, with 12 issues open, 27 closed and no due date. A design article, test network or draft pull request shows work in progress; mainnet still uses rings until a network upgrade activates different rules.

There is no XMR-weighted governance ballot behind these changes. Research groups debate designs, maintainers review code, releases package the result, and users, miners and services decide whether to run compatible software. XMR gives control of coins through keys. It does not grant a corporate share, fixed-price redemption or a formal vote over the next protocol.

How the project changed

  1. 2014-04-09 to 2014-04-18
    BitMonero is announced and starts a new chain

    The announcement precedes a new genesis by nine days; Bytecoin code is forked without inheriting its ledger.

  2. 2017-01-05 to 2017-09-16
    RingCT moves from allowed to mandatory

    The network first accepts confidential amounts, then rejects new transactions that do not use RingCT.

  3. 2018-10-18 to 2018-10-19
    Bulletproofs shrink the amount proof

    Compact range proofs are enabled and then required for confidential transactions.

  4. 2019-11-30
    RandomX becomes the proof of work

    The network moves mining toward a CPU-oriented, memory-heavy algorithm.

  5. 2020-05-23 to 2020-10-18
    Propagation and signatures change

    Dandelion++ reaches the release software; later CLSAG replaces the older input-signature format.

  6. 2022-06-09 00:29 UTC
    Tail emission begins

    The nominal subsidy settles at 0.6 XMR or less per block instead of falling to zero.

  7. 2022-08-13 to 2022-08-14
    V15 and v16 set the current transaction rules

    Ring size 16, Bulletproofs+ and view tags arrive; the preceding transaction format is then forbidden.

  8. 2026-07-08 to 2026-07-21
    Stable releases advance without a new hard fork

    Core/CLI v0.18.5.1 and GUI v0.18.5.2 ship fixes while mainnet remains on v16 rules.

Evidence and primary sources

Last evidence review: 2026-09-05

What is Monero?

Monero is a standalone proof-of-work payment network, and XMR is the coin created and transferred under its consensus rules. It is not a company-issued smart-contract token. Standard transactions use a one-time output for the recipient, a 16-member ring containing one real spend and 15 decoys, and RingCT commitments that conceal amounts.

That design is private by default, but not perfectly anonymous. Ring selection provides probabilistic ambiguity. A wallet’s device, counterparty, remote node or network route can still expose information, and Dandelion++ does not replace Tor or I2P.

The live chain still uses the v16 rules activated in August 2022. The latest stable core release, v0.18.5.1, shipped in July 2026 as a bug-fix release. FCMP++ and CARROT are active integration work, not mainnet features.

What problem does Monero solve?

A transparent ledger lets an observer connect addresses, amounts and payment histories. That can expose personal activity and weaken fungibility because otherwise equal coins may be judged by their past. Monero chose to hide the key payment fields in ordinary transactions rather than ask users to opt into a mixer.

The choice created a second problem: privacy cannot stand still. Better statistical analysis, malicious remote nodes, network surveillance, specialized mining and larger transaction proofs each forced the project to revise a different layer. Monero’s history is therefore a sequence of public protocol changes, not one cryptographic invention frozen in 2014.

How does Monero work?

A sender derives a one-time destination from the recipient’s address. To spend an output, the wallet signs a ring of 16 possible members, only one of which is real; a key image prevents the real output from being spent twice without revealing which ring member it was. RingCT hides amounts while allowing the network to check value conservation, and Bulletproofs+ keeps those range proofs smaller.

Nodes order this activity through RandomX proof-of-work. RandomX is designed around general-purpose CPUs to reduce specialized-hardware advantage, but it does not guarantee decentralized mining. Dandelion++ first relays a transaction through a restricted stem before wider diffusion, making source-IP inference harder without promising endpoint anonymity.

The nominal tail subsidy is 0.6 XMR per roughly two-minute block, subject to block-weight penalties. Supply therefore has no hard cap, while the percentage issuance rate falls as the base grows. Protocol changes are not decided by XMR-weighted voting: researchers and contributors discuss and merge code, and users, miners and services adopt compatible releases for scheduled network upgrades.

Key facts

  • BitMonero was announced on 9 April 2014 and scheduled to start from a new genesis on 18 April at 10:50 GMT.
  • The first chain used a fork of Bytecoin’s CryptoNote-based code; it did not inherit Bytecoin balances or block history.
  • Monero’s official history describes the launch as pre-announced, with no premine, instamine or development share of block rewards.
  • The name changed from BitMonero to Monero in April 2014; after an early dispute, the continuing community followed a new Core Team.
  • Current standard transactions use a fixed ring size of 16: one real spend and 15 decoys.
  • One-time stealth outputs protect recipient-address linkage, ring signatures obscure the selected input, and RingCT hides amounts; the three mechanisms solve different problems.
  • RingCT became available on 5 January 2017 and mandatory on 16 September 2017.
  • Bulletproofs became required in October 2018 to reduce confidential-amount proof size.
  • RandomX became the proof-of-work algorithm on 30 November 2019 and is designed to be CPU-friendly and ASIC-resistant.
  • Dandelion++ entered the May 2020 release to obscure initial transaction propagation; it does not hide all IP or remote-node metadata.
  • CLSAG activated in October 2020 as a more efficient input-signature format.
  • Tail emission began at block 2,641,623 on 9 June 2022 at 00:29 UTC, with a nominal 0.6 XMR or less per block.
  • The August 2022 v15/v16 upgrade fixed ring size at 16, deployed Bulletproofs+ and view tags, and retired the older transaction format.
  • The latest stable core/CLI was v0.18.5.1 on 8 July 2026; GUI v0.18.5.2 followed on 21 July.
  • The canonical upgrade table declares no next mainnet height, date or version. The FCMP++ milestone was 69% complete with 12 open issues and no due date after its 23 August 2026 update; FCMP++, CARROT and later address work remain undeployed.
  • Holding XMR permits spending with the relevant keys; it does not create shares, dividends, redemption rights or token-weighted protocol votes.

Official links

Categories

Related coins

Frequently asked questions

Did Monero copy Bytecoin’s blockchain?

No. The original announcement described a Bytecoin code fork that began from a new genesis. Monero did not carry Bytecoin balances or block history into its chain.

Was XMR premined?

Monero’s official history says the launch was announced in advance and had no premine, instamine or block-reward allocation to development. That is the project’s documented launch characterization.

Is every Monero user completely anonymous?

No. The protocol hides recipient linkage, sender selection and amounts by default, but ring privacy is probabilistic and devices, counterparties, remote nodes, network routes or user disclosure can reveal information.

Does Monero have a maximum supply?

No. Tail emission has a nominal subsidy of 0.6 XMR per roughly two-minute block, or less when block-weight penalties apply. Total supply keeps rising while percentage issuance trends downward.

Does owning XMR let me vote on upgrades?

There is no XMR-weighted on-chain vote. Changes move through public research, code review, releases and adoption of compatible software by users, miners and services.

Has FCMP++ replaced ring signatures on mainnet?

No. Current mainnet rules still use fixed 16-member rings. The FCMP++ milestone was 69% complete with 12 open issues and no due date after its 23 August 2026 update, while the canonical table leaves the next upgrade date and height undetermined.

External trackers

Choose a tracking site for Monero: