Monero’s private amounts do not make its monetary supply unauditable. The network verifies supply through cryptographic proofs rather than by exposing every output value publicly. Every transaction must prove that its inputs equal its outputs plus the fee. Pedersen commitments allow nodes to verify that balance equation without revealing the amounts. Bulletproofs+ range proofs prevent hidden outputs from representing negative, overflowed, or otherwise invalid values. Key images prevent the same output from being spent twice, and every miner reward is checked against Monero’s consensus-defined emission schedule. Taken together, these rules mean ordinary transactions cannot create new XMR. New coins can enter circulation only through a valid miner transaction paying the permitted block reward, and every fully validating node independently enforces that rule.

Replies (5)