# Monero (XMR) Quantum Readiness Report

> Monero has a QRI score of 10.4/100 and is assessed at Stage 2 (Mitigation / Development) with medium evidence confidence.

Evaluation date: 2026-06-06. Review status: draft. Evaluated scope: Native asset (XMR) on Monero PoW privacy chain with no validator signatures; FCMP++ beta stressnet noted as development-stage activity that does not materially protect production users.

Monero (XMR) is a PoW privacy chain whose production cryptographic stack is entirely dependent on elliptic curve cryptography (Ed25519-based CLSAG ring signatures, Pedersen commitments, Bulletproofs+) and is therefore vulnerable to Shor's algorithm across all critical layers: spend authorization, address/public-key exposure, state-integrity, and privacy. The Monero Research Lab has conducted extensive public quantum risk assessments since 2020, earning full marks in Security Assessment & Evidence Preparedness (5.0/5). The FCMP++ beta stressnet (May 2026) introduces forward secrecy for historical transaction privacy using post-quantum commitments, representing meaningful Stage 2 development activity, but it does not replace the ECC-based spend authorization that secures all active XMR. Jamtis-PQ (CSIDH-1024) is a research-stage addressing scheme for post-quantum encryption. No production PQ protection exists for any critical layer. The QRI Score of 10.4 reflects strong risk assessment preparedness combined with zero production quantum protection. All XMR value-at-risk remains quantum-vulnerable. A full PQ migration would require replacing Ed25519 spend authorization, redesigning Pedersen commitments and Bulletproofs+ under PQ assumptions, migrating stealth addressing to PQ key derivation, and coordinating a network-wide hard fork — none of which has progressed beyond research proposals.

## Core resources

- [Monero QRI report](https://qrindex.org/projects/monero/): Human-readable assessment with score, stage, evidence, blockers, risks, and assurance notes.
- [Monero structured report data](https://qrindex.org/projects/monero/report.json): Complete report as JSON for deterministic machine processing.
- [QRI methodology](https://qrindex.org/methodology/): Scoring model, evidence handling, readiness stages, confidence, assurance, and report status.
- [All QRI project reports](https://qrindex.org/llms.txt): Score-ranked index of every published project assessment.
- [Monero official website](https://www.getmonero.org): Project-maintained website.
- [Monero source repository 1](https://github.com/monero-project/monero): Project source code referenced by QRI.



## Evidence sources

- [Evidence source 1](<https://github.com/monero-project/research-lab/issues/131>): Public source cited by the Monero QRI assessment.
- [Evidence source 2](<https://github.com/monero-project/research-lab/issues/151>): Public source cited by the Monero QRI assessment.
- [Evidence source 3](<https://ccs.getmonero.org/proposals/research-post-quantum-monero.html>): Public source cited by the Monero QRI assessment.
- [Evidence source 4](<https://github.com/insight-decentralized-consensus-lab/post-quantum-monero>): Public source cited by the Monero QRI assessment.
- [Evidence source 5](<https://www.getmonero.org/resources/research-lab/pubs/whitepaper_annotated.pdf>): Public source cited by the Monero QRI assessment.
- [Evidence source 6](<https://github.com/monero-project/monero>): Public source cited by the Monero QRI assessment.
- [Evidence source 7](<https://github.com/insight-decentralized-consensus-lab/post-quantum-monero/blob/master/writeups/semitechnical_summary.MD>): Public source cited by the Monero QRI assessment.
- [Evidence source 8](<https://qrindex.org>): Public source cited by the Monero QRI assessment.
- [Evidence source 9](<https://www.quantumcanary.org/insights/can-quantum-computers-break-monero>): Public source cited by the Monero QRI assessment.
- [Evidence source 10](<https://github.com/tevador/RandomX>): Public source cited by the Monero QRI assessment.
- [Evidence source 11](<https://www.getmonero.org/resources/moneropedia/randomx.html>): Public source cited by the Monero QRI assessment.
- [Evidence source 12](<https://github.com/monero-project/monero/blob/master/src/hardforks/hardforks.cpp>): Public source cited by the Monero QRI assessment.
- [Evidence source 13](<https://arxiv.org/html/2512.13333v1>): Public source cited by the Monero QRI assessment.
- [Evidence source 14](<https://cidu.io/articles/monero-fcmp-stressnet-privacy-doctrine>): Public source cited by the Monero QRI assessment.
- [Evidence source 15](<https://www.getmonero.org>): Public source cited by the Monero QRI assessment.
- [Evidence source 16](<https://github.com/monero-project/meta>): Public source cited by the Monero QRI assessment.
- [Evidence source 17](<https://veridise.com/wp-content/uploads/2025/06/VAR_Monero_250407_fcmp___V3.pdf>): Public source cited by the Monero QRI assessment.
- [Evidence source 18](<https://ccs.getmonero.org/proposals/fcmp++-integration-audit.html>): Public source cited by the Monero QRI assessment.
- [Evidence source 19](<https://www.getmonero.org/2026/05/10/deprecating-unlock-time.html>): Public source cited by the Monero QRI assessment.