For the cryptocurrency community, 2016 was a very good year. Bitcoin doubled in price. The far-out Bitcoin alternative Ethereum shot up by a factor of 10. But another, once-obscure cryptocurrency called Monero outpaced all of them, multiplying its value around 27-fold. That’s a windfall not just for cryptocurrency speculators, but for financial privacy advocates everywhere—including a few suddenly wealthy dark web drug dealers.
Over the last year, the value of the hyper-anonymous cryptocurrency Monero grew 2,760 percent, making it almost certainly the best-performing cryptocurrency of 2016. Today each Monero is worth around $12, compared with just 50 cents at the beginning of last year, and the collective value of all Monero has grown to close to $165 million. The source of that explosive growth seems to be Monero’s unique privacy properties that go well beyond the decentralization that makes Bitcoin so resistant to control by governments and banks. It’s instead designed to be far more private: fully anonymous, and virtually untraceable.
Those features have made Monero a budding favorite within at least one community that has a pressing need for secrecy: the dark web black market. In August, the darknet market site Alphabay began offering its thousands of vendors the option to accept Monero as an alternative to Bitcoin. A quick browse through the market today shows dealers of everything from stolen credit cards to heroin to handguns accepting the stealthier cryptocoin. That increase in illicit users also illustrates Monero’s privacy potential, says Riccardo Spagni, one of Monero’s core developers.
“That uptick among people who really need to be private is interesting,” says Spagni. “If it’s good enough for a drug dealer, it’s good enough for everyone else.”
Not Another Bitcoin
It’s tempting to think of cryptocurrencies in terms of Bitcoin—in part because many cryptocurrencies are Bitcoin derivations. Monero’s fully its own entity, though. First outlined in an October 2013 whitepaper by the pseudonymous figure Nicolas van Saberhagen and called Cryptonote, another pseudonymous individual known only as “thankful_for_today” later coded those ideas into a currency called Bitmonero. When open-source coders on the Bitcointalk forum disagreed with thankful_for_today’s directions for the currency, they forked it in 2014 to create Monero, whose name means simply “coin” in Esperanto.
Its structure solves several key privacy vulnerabilities that dog Bitcoin, which despite its reputation for secret transactions has long been stuck in a strange privacy paradox. Unlike commercial services like PayPal, Bitcoin allows anyone to spend money online without providing identifying details. But if someone’s Bitcoin address is linked with their real identity, any transaction from that address is entirely visible on the public blockchain, the accounting ledger that prevents fraud and forgery in the Bitcoin economy. Hiding those transactions requires taking extra steps, like routing bitcoins through “tumblers” that mix up coins with those of strangers—and occasionally steal them—or using techniques like “coinjoin,” built into some bitcoin wallet programs, that mix payments to make them harder to trace. “If I pay my rent in Bitcoin, it wouldn’t be that hard for the landlord to figure out how much money I earned if I don’t take extra precautions,” says encryption and cryptocurrency consultant Peter Todd. “Then they can decide whose rent to increase. You’re giving away information you don’t want to make public.”
Monero not only bakes anonymity features into the cryptocurrency itself, but implements a few features that Bitcoin still can’t offer. It uses a technique called “stealth addresses” to generate addresses for receiving Monero that are essentially encrypted; the recipient can retrieve the funds, but no one can link that stealth address to the owner. It employs a technique called “ring signatures,” which means every Monero spent is grouped with as many as a hundred other transactions, so that the spender’s address is mixed in with a group of strangers, and every subsequent movement of that money makes it exponentially more difficult to trace back to the source. And it uses something called “ring confidential transactions,” which hides the amount of every transaction.