The cathedral and the cardboard box
The best privacy technology in cryptocurrency has been running in production for ten years. Every transaction is private by default. Sender hidden. Receiver hidden. Amount hidden. The engineering is meticulous. The cryptography has survived every audit and every upgrade without a single known privacy break.
Nobody uses it.
The market prefers Tether, which broadcasts every transaction onto a permanent public ledger and can freeze any address through a single administrative ICANN-style phone call. Tether operates a customer support hotline and maintains 115 billion dollars in circulation. Monero operates a whitepaper and a development community of cryptographers who would lose a marketing contest to a sandwich board outside a hardware store. The cardboard box with a toll-free number printed on the side is overflowing with customers. The cathedral is empty.
Ring signatures
You spend output number 42 on the Monero blockchain. To authorize the spend, you select 15 decoy outputs from historical blocks. You construct a proof that you own one of the 16 outputs in the ring without revealing which one is yours. The signature is structurally identical regardless of which ring member you actually signed for. An observer examining the transaction cannot identify the spender.
CLSAG signatures replaced the older MLSAG scheme in 2020. Published in 2019 by Goodell, Noether, and Blue. Smaller signatures. Faster verification. Identical security guarantees. The upgrade deployed through a scheduled hard fork with zero network disruption. The Monero community processed the upgrade in a matter of hours. The broader cryptocurrency ecosystem did not notice because the broader cryptocurrency ecosystem was watching Solana NFT floor prices.
Stealth addresses
Every Monero transaction generates a unique one-time destination key on the ed25519 curve. Only the recipient can derive the corresponding private key. The sender never learns the recipient’s persistent wallet address. The blockchain observer sees a public key that has never existed before and will never appear again.
Standard elliptic-curve Diffie-Hellman key exchange over ed25519. Mathematically straightforward. The concept of a reusable address does not exist in Monero because reusable addresses are a privacy vulnerability and Monero eliminated them at the protocol level. You cannot leak an address you do not have.
RingCT
Every transaction amount is concealed behind a Pedersen commitment. C = aG + bH where a is a random blinding factor and b is the amount. The commitment hides the value while the blinding factor enables balance verification without disclosure. Bulletproofs+ range proofs, deployed in 2022, prove the committed amount is non-negative without revealing it. The proofs shrank by an additional 96 bytes compared to the previous generation. Every output on Monero. Every amount on every output. Hidden.
The anonymity set for every Monero transaction is the entire blockchain. There is no opt-in. There is no shielded pool. Every transaction is ring-signed, stealth-addressed, and amount-hidden by consensus rule. The network will reject any transaction that attempts to operate in the clear.
The correct decision that lost
Zcash deployed technically superior cryptographic primitives. zk-SNARKs produce smaller proofs with stronger mathematical guarantees. The architecture was a masterpiece. The deployment was a catastrophe because the design team made one decision that destroyed the entire privacy model: they made shielded transactions optional.
Privacy optional is privacy eliminated. When you opt into shielding on a network where most transactions are transparent, you stand out. Standing out is the opposite of privacy. The anonymity set for shielded Zcash transactions is the small population of users who checked the optional box. That population is near-empty. You cannot have privacy within a group of one.
Monero made the opposite decision. Mandatory privacy for every transaction. No choice. No configuration toggle. The anonymity set is the entire user base of the network because every transaction is indistinguishable from every other transaction. The correct engineering decision. The correct cryptographic decision. The decision that lost to marketing.
The monument
I use Monero. I have read the ring signature generation in the C++ source at src/ringct/rctSigs.cpp. I verified the Pedersen commitment balance equation against the specification. I mapped the stealth address derivation. The cryptography is real and the privacy is real and the engineering decisions are the correct ones.
Monero has been delisted from Kraken in the UK and Australia. Binance restricted trading in multiple jurisdictions. Regulatory pressure is constant. The market has concluded that privacy is less valuable than convenience and convenience means sending money without installing a separate application. The best privacy technology ever deployed on any blockchain is functioning perfectly while the industry routes trillions of dollars through transparent ledgers visible to anyone with read access and an RPC endpoint. Monero is a monument to the proposition that getting the engineering right is not the same thing as winning. The cathedral is perfect. The cathedral is empty.