Dispelling Monero FUD | sethforprivacy.com


In this post I’ll attempt to walk through the most common FUD around Monero (both valid and invalid) and help to clarify many of these points



Onion Details



Page Clicks: 0

First Seen: 03/12/2024

Last Indexed: 10/23/2024

Domain Index Total: 84



Onion Content



Table of Contents Introduction Monero has an infinite supply You can’t audit the Monero supply Monero can’t scale Monero’s hard-forks make it centralized Monero mining is centralized Monero has no adoption KYC/AML-regulated exchanges won’t support Monero/governments will ban Monero can’t support layer-two networks (like Lightning) Conclusion Introduction # One of the most common issues I deal with as someone passionate about personal privacy is fighting through common fear, uncertainty, and doubt (FUD) that is mentioned by those who don’t understand an issue thoroughly, or from people who are maliciously spreading FUD to demean a project or tool they don’t want people to use. While this is a key issue across the privacy space, it’s often the worst in the cryptocurrency space due to the in-built incentives in cryptocurrencies that lead to greed and tribalism. In this specific post I’ll attempt to walk through the most common FUD around Monero (both valid and invalid) and help to clarify many of these points. Note that much of the FUD spread has a sliver of truth but does not often tell the full story or approach difficult technical topics with nuance, so I’ll try to remedy some of that today by laying out the facts and letting the reader decide if that point of FUD is something that personally concerns them, or not. All I want out of this post is people to have the chance to make well-informed decisions - I don’t expect to sway anyone or change minds, but hopefully the information container within this post will help to clarify things for you. Let’s walk through the common FUD points one-by-one below. Monero has an infinite supply # Response This one is very common from the Bitcoin crowd, and is technically true. However, there is a lot of thought and intentional design that has gone into the supply dynamics of Monero. Monero implements a “defined supply” of 18.4m coins, and has a tail emission of 0.6XMR per block after the defined supply has been mined. That tail emission starts ~May, 2022. This means that Monero has extremely low inflation that approaches 0% forever , and is technically “disinflationary” or “asymptotatically approaching 0% inflation”. The inflation rate is currently lower than Bitcoin and gold, and will continue to decrease. It’s also important to realize that a low inflation rate like that of Monero is a way to replace lost coins over time in circulation, but is likely even too little inflation to account for lost coins (rough estimates are ~1.5% of coins lost in circulation each year, compared to Monero’s current inflation rate of 1.12% as of writing). This would mean that Monero is in fact deflationary , even with the low perpetual issuance. It’s also extremely important to make it clear that Monero’s supply is pre-defined, verified and enforced via consensus, and entirely predictable, just like Bitcoin’s - you can know the inflation rate and totaly supply at any point in the future without doubts. This tail emission enables two key features in Monero A lower bound of network security forever (miners will always be able to rely on 0.6XMR per block, no matter the fee market) A dynamic block size (Monero’s blocks can grow/shrink to adapt to short-term increases in usage, with a penalty to mining rewards during these times). For more on both of these, see the resources below. Resources “Why Monero has a tail emission”: https://localmonero.co/knowledge/monero-tail-emission “How Monero Solved the Block Size Problem That Plagues Bitcoin”: https://localmonero.co/knowledge/dynamic-block-size Excellent Twitter thread on Monero’s tail emission and supply approach: https://www.twitter.com/DontTraceMeBruh/status/1489979998228426754 Inherent risks in not having a defined block reward in perpetuity: https://www.cs.princeton.edu/~arvindn/publications/mining_CCS.pdf Monero’s long-term emissions as a percentage of total supply (notice they are constantly approaching 0%): Image Credit - @TheStoicCoiner You can’t audit the Monero supply # Response This is probably the most common point of FUD brought against Monero, and is caused by the complexity and nuance involved in understanding how supply audits work in cryptocurrencies. Monero’s supply can be easily audited by anyone running a Monero node, but this process does rely on the soundness of the monerod software implementation and the validity of cryptography used in range-proofs. These range-proofs allow it to be mathematically proven that the inputs and outputs of each transaction add up to zero without revealing amounts, ensuring that the supply is sound and not inflated in any way. Every node on the network is validating these range-proofs in each transaction every time a transaction is first seen, and validating all historical range-proofs when initially syncing. A manual audit is possible because coinbase transactions (those transactions that are mining rewards in each block including issuance + transaction fees) are intentionally transparent and amounts of these outputs are not obfuscated in any way. Monero users running a node can simply validate these totals on-demand, and all node owners are constantly verifying the amounts in transactions via range-proofs. Unlike Bitcoin, however, Monero users cannot simply do “napkin math” and validate the supply by manually adding up UTXO amounts, as transactions are never known-spent by the network, only by the parties involved in each specific transaction. This does force some added reliance on code/cryptography over Bitcoin, but as-of-yet I know of no one validating the Bitcoin supply this way. It does remain a valuable advantage of a transparent cryptocurrency, though it comes at the cost of the transactional privacy of every user in the system. Resources Excellent and nuanced blog post on auditability in cryptocurrencies: https://web.getmonero.org/2020/01/17/auditability.html Very thorough and detailed talk on the issues surrounding auditability in cryptocurrencies: https://www.youtube.com/watch?v=meDkx6gRPMg Detailed presentation from Aaron Feickert on supply auditablity in cryptocurrencies: https://www.youtube.com/watch?v=aHv2gq4Wm5I Audio clip about auditability in Bitcoin and Monero: https://www.twitter.com/DontTraceMeBruh/status/1414602052471332864 Anyone can easily verify the supply of Monero: https://x.com/fluffypony/status/1292032287396306944 Independently verifying the supply of Monero is trivial. pic.twitter.com/wA9Og7r4Zb - Riccardo Spagni (@fluffypony) August 8, 2020 Independent supply verification tools that confirm no hidden inflation These tools were written by a third-party developer in a different language (Python) and confirm that there is no auditability issue present. Monero vulnerability that was not exploited and was detectable Bitcoin vulnerability that was not exploited and was detectable Monero can’t scale # Response This point of FUD is one that is hard to get to the bottom of as well, as there are lots of other questions that come out of it. I’ll focus on transaction size in this one, as that is the most common complaint about Monero. Monero is, in fact, the most scalable cryptocurrency when used privately , and even when compared with default, transparent Bitcoin usage, its transactions are only ~3-4x the size of Bitcoin transactions today. Monero’s transactions were much larger in the past, but the Monero community, researchers, and developers have worked hard to improve the efficiency of Monero, bringing transactions down from ~13kb when RingCT was first introduced to ~1.4kb today. I’ve written an entire blog post around this topic, so for more on that see the resources below. Resources Comparing Private Spends Monero’s hard-forks make it centralized # Response The key points I would make around this are walked through in detail in the Twitter thread below, but here are some bulletpoints on Monero’s hard-forks: Monero used to hard-fork every 6mo, but now only hard-forks as-needed for key network upgrades Monero’s hard-forks enable it to constantly improve and adapt its privacy protocol (among other things) to stay ahead in the privacy arms race Monero’s hard-forks always include thorough code review before merging, and if any key parts of consensus code are touched (like with the upcoming Bulletproofs+), the code is audited by multiple 3rd-party auditing groups/companies The process of deciding what goes into a hard-fork, when to hard-fork, and what approaches to take all happens publicly, either on Github or in IRC/Matrix (mostly through scheduled meetings) Monero has yet to have a contentious hard-fork, showing strong community support for every hard-fork so far Resources Blog post on scheduled upgrades in Monero: https://www.getmonero.org/2020/09/01/note-scheduled-upgrades.html Long thread on the details around how Monero hard-forks and what they mean for centralization/decentralization: https://x.com/sethforprivacy/status/1397543058070200324 1/ Apparently the "Monero hardforks every 6mo which makes it centralized/vulnerable to attack" FUD is circulating again, so here's a quick thread on that common misconception. 👇 - Seth For Privacy | #FreeSamourai (@sethforprivacy) May 26, 2021 Monero mining is centralized # Response Monero’s approach to mining is almost entirely unique in the cryptocurrency world, as its community has maintained a core ethos of ASIC-resistance from the inception of the project. Monero aims for ASIC-resistance for three core reasons: Get back to “one CPU, one vote” Ensure easy access to Monero mining by as many people as possible Increase the security and decentralization of the network by increasing manufacturer and geographical diversity in mining Monero This goal has been accomplished via a few different mining algorithms in Monero’s history, but the current algorithm, RandomX, has successfully prevented ASICs on the Monero network for over two years, despite a bull market and growing usage increasing the allure of mining Monero to ASIC manufacturers. I won’t go into the technical details of RandomX here, but feel free to read through the resources below for more details. While Monero does have drastically less miners and energy used to secure the network compare to Bitcoin or Ethereum, it remains secure and extremely decentralized due to the technical approach in RandomX and the grassroots nature of the community up until now. This was made abundantly clear when ASIC-dominated coins experienced massive drops in hashrate (including Bitcoin!) when China banned mining in April, 2021: (From: https://medium.com/@tacorevenge/the-suppressor-part-2-on-chain-analysis-6561c5a478c4 ) Resources Excellent explainer on RandomX: https://www.monerooutreach.org/stories/RandomX.html A detailed look at why RandomX is so unique: https://localmonero.co/knowledge/monero-mining-randomx Monero faired extremely well during the ban on mining in Chi...