Monero FCMP++ Explained: The Next Big Privacy Leap

Is Monero FCMP++ Close to Launch, or Still Just a Test?

Is Monero FCMP++ live yet? Not on the main network. It runs on a public test network called a stressnet, and the latest build, v3.1, shipped on Oct 26.

FCMP++ stands for Full-Chain Membership Proofs, Spend Authorization and Linkability. It replaces Monero's current ring-based input-hiding mechanism with a proof that a spent output belongs to the eligible output set across the blockchain. Separate cryptographic mechanisms still establish spending authority and prevent double spending without revealing the specific output.

This guide covers what Monero FCMP++ changes, how testing is going and why the mainnet date is unknown. It reflects public information as of Nov 10, 2026.

From Ring Signatures to Full-Chain Membership Proofs

Every Monero payment hides which coin is being spent. Today, a ring signature does that job.

A ring signature is a proof that says "one of these outputs is mine" without saying which. An output is simply a coin sitting on the blockchain.

Right now, a ring holds 16 outputs. One is real and fifteen are decoys. An outside observer sees 16 possible senders.

Full-chain membership proofs, or FCMPs, change the scale. The v3.1 release describes a proof that the spent output belongs to the eligible output set across the blockchain. At the time, it put that set at more than 150 million outputs.

"Eligible" means outputs the protocol allows to be spent. The count changes as the chain grows.

So Monero FCMP++ is more than a bigger ring. The "++" adds spend authorization, which shows the spender controls the right key. It also adds linkability, which lets the network catch double spends. Neither reveals which output was spent.

How curve trees make this possible

Curve trees make it practical to prove membership in a very large set of outputs without revealing which one is being spent. They organise committed outputs into a structure that supports compact proofs. Monero FCMP++ combines this with the extra mechanisms above.

Picture a family tree as a loose visual aid: outputs at the bottom, branches summarising those beneath. The real proof is more involved. It relies on linked elliptic curves and cryptographic commitments.

The trade-off is complexity. Nodes must also maintain tree data as new outputs arrive.

What Monero FCMP++ Fixes

The main target is the input anonymity set: the group of possible outputs among which a real spend is hidden. A larger eligible set can make identifying the actual input harder. Effective privacy still depends on other information an observer can see.

With rings, that set is 16 on paper. Researchers have long argued the effective crowd can be smaller, since decoy choices and transaction patterns can narrow the guesses.

A full-chain proof removes the need to select decoys for each spend. That addresses a major limitation of ring-based input privacy, but it doesn't eliminate every source of transaction analysis. Timing, network-level information and other metadata can still matter. The benefit stays a design goal until mainnet proves it.

The Monero FCMP++ stressnet also bundles Carrot, a proposed update to Monero's addressing protocol. It adds privacy and usability features while staying compatible with existing addresses.

Stressnet v3.1: Where Testing Stands

A stressnet is a public test network. Volunteers and developers push the code hard to find bugs before real money is at risk.

Beta testing of Monero FCMP++ began in May. The v3 network forked from testnet on Oct 5 at block 3,102,800. Developer j-berman then published v3.1 of the Monero FCMP++ stressnet on Oct 26.

The v3.1 release included several fixes and improvements:

• Faster wallet scanning

• Denial-of-service protection for transaction relay

• Denial-of-service protection during wallet-side tree building

• Updated seed nodes

• A change that keeps Carrot outputs out of ring signatures

The release notes also describe a detectable inflation vulnerability, exposed in the 24 hours after the Oct 5 fork. That concerns the test network only. It doesn't mean mainnet Monero suffered an inflation event.

The release also listed hardware-wallet support, multisig and transaction proofs as not yet functional. It is labelled beta software, so read it as a testing milestone, not a production-ready build. Its anonymity set is in the dozens at best, versus thousands for a mainnet node. Don't treat it as private.

What the audits cover

Monero FCMP++ has undergone several security reviews, but their scopes shouldn't be confused with a complete audit of the final mainnet implementation.

Veridise reviewed the membership-proof circuit and related code from April 7 to May 2, 2025. The 12 person-week assessment found one Warning and one Informational finding. Both were fixed.

Trail of Bits published a separate review on Aug 17, 2026. The two-engineer-week assessment focused mainly on incremental changes to Monero's cryptography core libraries. It reported six Informational findings and no High, Medium or Low ones. Five were resolved and one was partially resolved.

A broader integration-audit programme also covers Curve Tree building and consensus integration. These reviews matter, but they aren't proof that the full mainnet implementation is audited or risk-free.

The Open Question: Mainnet Timing

Here's the honest status of Monero FCMP++. As of Nov 10, 2026, no official activation date or fork height has been announced. The official Monero blog lists only routine 0.18.5.x point releases as its latest posts.

Upstream work is moving, though. Developer updates in early November said the tree-building database integration had merged into the main Monero repository. Consensus-verification integration was still under review. Code reaching the main repository is a key step, but it doesn't activate Monero FCMP++ on mainnet.

A developer's non-binding working plan has included a tentative 2027 activation window. It isn't a confirmed Monero release schedule. The date still depends on integration reviews, testing, audits and wallet readiness. The blog and repository are more reliable indicators than dates repeated by third-party calendars.

Milestones worth watching

• Consensus-verification pull requests merging upstream

• A release candidate that names a fork height

• Published audit reports covering the integration

• Wallet releases with stable Monero FCMP++ support

Why It Matters for the Privacy Narrative

Monero sells itself on privacy by default. Rings have been the most debated piece of that story, and Monero FCMP++ targets it directly.

Our read: a working Monero FCMP++ would answer the most common technical criticism without changing how people send coins. Wallets would still ask for an address and an amount.

That matters beyond Monero's own community. Analytics firms and exchanges watch privacy coins closely. A larger eligible set would likely make input tracing harder.

Still, promises stay promises until real traffic hits mainnet. Real users bring real patterns, and some flaws only show at scale. The upgrade also adds complexity, and complexity is where bugs hide.

Conclusion: A Real Test, Not Yet a Launch

Monero FCMP++ would replace 16-member rings with proofs over the eligible output set. It runs on a public stressnet, v3.1 is out, and several security reviews have reported back.

What stands out is steady testing and bug-fixing. What's uncertain is the calendar, because no official mainnet date exists.

Watch the official Monero blog, the core repository and the audit reports. They'll tell you more than any timeline claim.

Disclaimer: This article is for information only and is not financial advice. Crypto assets are volatile and high-risk, and upgrade timelines can change. Do your own research before making any decision.