Monero

Monero is the cryptocurrency where every transaction is private by default — no opt-in, no toggle, no privacy mode. Ring signatures hide the sender, stealth addresses hide the receiver, RingCT hides the amount, and the dandelion++ network layer hides the originating IP from peer-level observers. Listed here in the mixers category at Grade A · editor's pick because the strongest answer to "how do I mix coins?" is "use a chain where coins arrive pre-mixed" — at which point most of the rest of this directory's options become optional for users willing to bridge in.

Background. Monero launched in April 2014 as a fork of Bytecoin, governed since by an open contributor community without a foundation or token-allocation insiders. The protocol has shipped consistent privacy upgrades on a roughly 6-month hard-fork cadence — RingCT, Bulletproofs, Bulletproofs+, Triptych, view tags, and the in-progress Seraphis / Carrot / FCMP++ next-generation transaction protocol. No premine, no ICO, no developer fund — the only special allocation is the community-crowdfunded CCS (Community Crowdfunding System) that pays full-time contributors for specific time-boxed work. Reference codebase at github.com/monero-project/monero. Tor onion mirror operator-published. Localised into 15+ languages on getmonero.org including English, Español, 简体中文, 繁體中文 臺灣, Italiano, Polski, Français, العربية, Русский, Deutsch, Nederlands, Português do Brasil, Türkçe, Norsk, ελληνική.

What you trust (the protocol, not an operator). Monero is a protocol, not a company. There is no operator to compel for user data because there is no operator-held user data. Ring signatures: each transaction signs with the user's real key plus a set of decoy keys; an outside observer can't tell which one is the real signer — this hides the sender. Stealth addresses: every transaction sends to a one-time address derived from the recipient's public key + a per-transaction random scalar; nobody including a chain-watcher can link the recipient's published address to the on-chain output — this hides the receiver. RingCT (Ring Confidential Transactions): amounts are hidden using Pedersen commitments + range proofs; an observer sees only that "an amount" moved, not how much. Dandelion++: the originating-node IP is obscured through a randomised stem/fluff routing pattern, making it harder to map transactions to network endpoints. The privacy properties are structural and default — you don't have to remember to turn anything on.

Operational specs. Reference wallets: Monero GUI / CLI (official, from getmonero.org), Feather Wallet (community, listed separately), Cake Wallet / Monerujo for mobile (listed separately). Block time: ~2 minutes. Supply: emission curve with tail emission of 0.6 XMR/block after the main curve completes (≈2022 onward) — guarantees miner incentive in perpetuity without inflation tax above ~0.87% terminal. PoW: RandomX — CPU-optimised, ASIC-resistant, keeps mining accessible. Hard-fork cadence: roughly every 6 months, coordinated through the Monero Research Lab and the contributor community. CCS funding model: anyone can propose work; the community votes via crowdfunded XMR contributions. No corporate sponsor, no token reservation, no founder allocation.

Philosophy. Monero's editorial differentiator is privacy as the protocol-level default, contrasted with the "opt-in privacy" model of zcash (shielded pools are optional and most volume is transparent), the "post-hoc mixing" model of Bitcoin (where mixing services try to add privacy after the fact and produce traceable "mixer-touched" coins that exchanges then refuse), and the "hide the addresses with stealth" model of stealth-payment add-ons on transparent chains. By making privacy mandatory at the consensus layer, Monero removes the anonymity-set fragmentation problem — every user contributes to every other user's anonymity set automatically. The trade-off: larger transactions (~2 KB vs Bitcoin's ~300 bytes typical), slower block validation, no compliance-friendly opt-in transparency for institutional adoption. Monero's design says those are acceptable costs for the privacy property.

Grade rationale. Grade A and editor's pick reflect: 12 years of operational continuity (since April 2014); no premine, no ICO, no special allocation, no foundation-controlled treasury; open-source codebase with consistent privacy-research output from the Monero Research Lab; structural privacy properties (not opt-in); ASIC-resistant PoW that keeps mining decentralised; predictable hard-fork upgrade cadence; published research papers backing every major protocol change; CCS-funded development model that aligns contributor incentives with user value; tail emission that solves the "what happens when emission ends" problem most other cryptocurrencies dodge. Last verified 2026-05-11.

Useful when. You want on-chain privacy and don't want to manage mixer mechanics, anonymity-set hopping, or the "tainted coin" risk that mixer-touched Bitcoin carries. You're a merchant accepting payments and don't want competitors / nation-states / random snoops watching your revenue. You're a journalist or activist whose financial activity should not be a public record. You want a hedge against the *informational* failure mode of transparent chains — Bitcoin / Ethereum / Solana addresses leak more than most users realise over time, and Monero is the structural fix. You want to hold a cryptocurrency that doesn't dox your net worth to anyone who knows one of your addresses.

Caveats. Exchange delistings: Monero has been delisted from many centralised exchanges under regulatory pressure (Bittrex, Binance in some jurisdictions, several EU venues). On-ramping from fiat to XMR now usually requires the no-KYC swap route or P2P (see Trocador, Haveno, the kyc.rip aggregator, etc.). Wallet sync is heavier than transparent chains — Monero wallets scan every block looking for outputs they own; first-time sync from a freshly-installed wallet can take hours unless you use a remote node (which then sees your wallet's IP unless you route through Tor). Privacy is protocol-level, not application-level — Monero protects on-chain metadata, not "you signed up for an exchange with your passport and bought XMR with it." If you on-ramp via KYC, your purchase is logged; only the *post-purchase* on-chain activity gains the Monero privacy properties. Network-layer leaks are still possible — running a wallet over a non-anonymised network reveals your IP to whichever node you connect to; use Tor or run your own node. Statistical attacks on ring signatures existed historically (e.g., the 2018 EAE-attack research); the protocol has shipped mitigations and continues to harden — but no privacy system is perfect, and Monero's caveat is that breakthrough cryptanalysis could in principle weaken the ring-signature anonymity set in retrospect. Larger transaction size means slightly higher fees and slower validation — usually not user-visible at retail scale but factor it in for high-frequency use.