Why FCMP++ Matters for Monero’s Privacy Roadmap

Monero’s Current Privacy Mechanism

Monero currently relies on ring signatures to hide the true origin of each spent output. For every input, the protocol selects 15 decoy outputs from the blockchain and forms a ring that always contains exactly 16 elements: the real output plus the 15 decoys. Official technical specifications list this fixed ring size of 16 as the standard as of 2026.

Within each ring the real spend remains indistinguishable from the decoys, so an observer sees only that one of the 16 outputs was used. Protocol version v16, activated at block 2,689,608 in August 2022, continues to enforce this ring size on mainnet. The resulting anonymity set per input is therefore limited to those 16 candidates.

Because the set stays small relative to the total number of historical outputs, statistical attacks that correlate decoy selection patterns or transaction timing retain more leverage than they would against a larger anonymity set. This constraint defines the privacy boundary of the current ring-signature system.

Introducing FCMP++ and Its Cryptographic Foundations

FCMP++ introduces Full-Chain Membership Proofs as a replacement for Monero’s existing ring-signature approach. The “++” designation signals the addition of Spend Authorization and Linkability, which together allow a transaction to prove that its spent output belongs to the full set of eligible outputs on the chain without disclosing the specific one chosen.

The construction relies on Curve Trees combined with elliptic-curve divisors. Curve Trees organize the entire output set into a hierarchical structure that supports efficient zero-knowledge membership proofs. Divisors supply the discrete-log proofs required inside those trees, enabling verification that a given output is present in the set while keeping the exact position hidden. This yields an immediate anonymity set of 100,000,000 outputs, according to the official Monero project page dated April 27, 2024.

Development proceeded independently of the earlier Seraphis migration plan. As a result, the protocol preserves the current address format and avoids a full wallet migration at launch. Transaction chaining, outgoing view keys, and forward secrecy are already defined in the protocol specification, though wallet-level support for these features is scheduled for later releases. Funding has come through CCS proposals, and the divisor component has undergone review by three independent security firms plus a machine-checked soundness proof.

Anonymity Set Size Comparison

Monero’s current ring-signature system limits each transaction input to an anonymity set of 16 outputs. FCMP++ expands that set to 100,000,000 eligible outputs, according to the official project documentation published in April 2024.

The jump from 16 to 100,000,000 changes the statistical exposure of any single spent output. With a ring of 16, an observer can eliminate possibilities more quickly when transaction patterns or timing data are available. A 100,000,000-member set makes such elimination impractical because every eligible output on the chain becomes a plausible candidate.

Stressnet materials from September 2026 reference more than 150 million historical outputs, yet the protocol target cited in the April 2024 getmonero.org post remains 100,000,000. Either figure still represents a several-million-fold increase over the present ring size, directly strengthening the privacy guarantee for every input.

Development Timeline and Testing Status

Monero’s FCMP++ work is funded through Community Crowdfunding System proposals and remains in active development. The third beta stressnet, covering both FCMP++ and the CARROT addressing protocol, activated on October 5 2026 at block height 3,102,800 following the release of v0.19.0.0-beta.3.0 around September 25 2026. Community members are invited to run nodes, submit transactions, and report issues during this phase.

The current mainnet protocol version stays at v16, activated August 14 2022 at block 2,689,608. No replacement hard-fork height or activation date for FCMP++ has been scheduled. Implementation continues in the monero-project repository, including the September 2026 merge of the curve-tree builder pull request.

Security reviews have covered the divisors technique used inside the zero-knowledge system. Three independent firms examined the code, and the central soundness theorem received a machine-checked proof, as noted in the Magic Grants post dated September 29 2026. Additional audit work on the overall composition is referenced in project documentation, though final mainnet deployment timing is still undecided.

Broader Implications for Monero’s Privacy Roadmap

FCMP++ advances Monero’s privacy upgrades on a separate track from the Seraphis migration plan. This separation permits faster deployment because the change preserves the existing address format and does not require a complete wallet migration at launch.

The protocol already encodes support for transaction chaining, outgoing view keys and forward secrecy. Wallet teams can activate these capabilities in later releases without altering the core consensus rules.

By avoiding a full migration step, developers can deliver a substantially larger anonymity set on the current chain while still leaving room for additional privacy features later. The approach therefore shortens the timeline between research and usable mainnet improvements, allowing Monero to strengthen its privacy posture incrementally rather than waiting for a single, high-risk upgrade.

FAQ

When will FCMP++ activate on Monero mainnet?

No mainnet hard-fork height or date has been scheduled. The third beta stressnet launched on October 5, 2026 at block 3,102,800, and community testing continues.

Do existing wallets need updates for FCMP++?

Address formats remain unchanged because development proceeded independently of the Seraphis plan. Additional features such as transaction chaining are supported in the protocol but deferred to future wallet releases.

Does FCMP++ require a hard fork?

Yes. Protocol version v16 remains active on mainnet as of October 2026, and FCMP++ will need a future hard fork once testing completes.

Are claims that FCMP++ is already live accurate?

No. Official project documentation and recent stressnet announcements confirm it is still in development; secondary reports claiming mainnet activation since 2025 or early 2026 contradict getmonero.org sources.

How does FCMP++ affect current users during testing?

Users can participate in stressnet v3 released with v0.19.0.0-beta.3.0 to report bugs, but mainnet transactions continue under the existing ring-signature system until activation.