Diagram showing an encrypted Monero transaction moving through wallet, ledger, P2P and Tor layers, with adversarial nodes correlating a timing watermark to a source IP address.

ProxyMark and Monero over Tor: How Privacy Can Fail Between Layers

By Dr. Max Anon

A July 2026 research preprint presents ProxyMark, a multi-stage technique intended to associate transactions originated by certain Monero nodes operating through Tor with their source IP addresses. The work does not break Monero’s transaction cryptography or decrypt Tor circuits. Instead, it examines how application-layer forwarding rules, peer selection, Tor relay positioning and traffic patterns can interact to expose network metadata.

The study illustrates a broader privacy-engineering problem: protecting transaction contents does not automatically protect the communications surrounding a transaction. A cryptocurrency may conceal amounts, addresses and ownership relationships on its ledger while still exposing information through message direction, peer selection, timing, packet frequency or differences between locally created and relayed transactions.

These layers should not be evaluated independently. A probabilistic blockchain heuristic, a network-origin observation or an exchange record may be inconclusive on its own. When several signals refer to the same transaction, however, they may reinforce one another and materially reduce an investigator’s uncertainty.

For Ryo Currency, the research provides relevant context for its planned high-latency mixnet. It supports the architectural case for treating network anonymity as a dedicated privacy layer. It does not, by itself, establish that any proposed mixnet is secure—or that every Monero transaction sent through Tor can be traced.

What the evidence establishes

Established by the reported experiments: The researchers demonstrated the individual components of ProxyMark under specified test conditions. These included node-role identification, adversarial occupation of hidden-service peer connections, manipulation of proxy-selection probability and recovery of traffic watermarks at an adversarial Tor entry relay.

Required for end-to-end attribution: The target must use the Monero-over-Tor behavior analyzed in the paper. Adversarial Monero hidden-service peers must obtain suitable positions among the target’s outgoing peers. The adversary must receive the originated transaction, and a malicious or cooperating Tor relay must occupy the required entry-guard position.

Not established: The research does not demonstrate universal traceability of Monero-over-Tor transactions, defeat Monero’s RingCT or stealth-address cryptography, decrypt Tor traffic or automatically associate every Monero transaction with a real-world identity.

Still requiring verification: The experiments used Monero v0.18.3.1 for several attack stages. The paper does not report a complete reproduction against later Monero releases, heterogeneous real-world configurations or arbitrary targets without the required adversarial Tor position.

The ProxyMark research and its scope

The paper, Deanonymizing Monero Transactions in Tor Network, was submitted to arXiv on July 8, 2026 by Ruisheng Shi, Shihan Zhang, Yulian Ge, Lina Lan, Qingfeng Zhang and Qin Wang. An earlier and shorter version of the work appeared in the Companion Proceedings of The Web Conference 2024.

The expanded paper describes a framework called ProxyMark. According to the authors, it combines three operations:

  1. Node-role identification: Distinguishing a Monero Tor hidden-service node from a Tor client node and, where applicable, recovering the node’s onion address.
  2. Originated-transaction identification: Increasing the probability that adversarial hidden-service peers receive transactions created by the target.
  3. Node-location deanonymization: Using a traffic watermark and an adversarial Tor relay to associate a Tor-level identifier with a source IP address.

The researchers evaluated these stages through component-specific experiments involving Monero testnet, Monero mainnet, controlled hidden-service deployments and the live Tor network. This is not the same as measuring the ordinary end-to-end success rate of ProxyMark against randomly selected live Monero users.

The central finding is compositional: the claimed leakage arises where Monero’s application-layer behavior meets Tor’s connection and traffic model. It is not presented as a cryptographic break of Monero or Tor.

How Monero transactions are routed through internal Tor connections

Monero supports more than one way of using Tor. ProxyMark concentrates on nodes using Monero’s anonymity-network mode while maintaining outgoing connections to Monero peers operating as Tor hidden services.

Under the behavior analyzed by the researchers, a node continues to use public peers for blockchain synchronization and eventual clearnet propagation while using hidden-service peers as an initial protected route for transactions created locally by that node.

The paper reports that an originated transaction is initially sent to two selected outgoing Tor hidden-service peers, described as proxy nodes. Those peers subsequently introduce the transaction into clearnet propagation through Dandelion++.

Transactions that the node merely relays are treated differently. The researchers argue that this asymmetry allows a hidden-service peer receiving a transaction through an incoming internal-Tor connection to infer that the transaction was created by the peer on the other side, rather than merely forwarded by it.

Monero’s own anonymity-network documentation describes Tor and I2P integration as experimental and acknowledges configurations in which privacy can leak. It also explains that locally originated transactions can be directed specifically to anonymity-network peers.

How ProxyMark builds the attack chain

1. Identifying the node’s role

The first stage analyzes peer lists exchanged through Monero’s periodic Timed Sync messages.

According to the paper, a hidden-service node repeatedly includes its own onion address in a predictable position in responses sent to certain outgoing hidden-service peers. A Tor client node does not display the same self-advertisement behavior.

By comparing multiple responses, the researchers attempted to classify the remote participant as either a hidden-service node or a Tor client. In the hidden-service case, the same behavior could expose the onion address associated with the connection.

In a controlled experiment involving 300 independent connections, the researchers reported 100% precision and 100% recall for this classification stage. The authors characterize this result as arising from deterministic differences in protocol behavior within the tested configuration—not as a statistical result applicable to every possible Monero setup.

2. Increasing access to originated transactions

Identifying a target does not automatically reveal its transactions. An adversary must become one of the target’s outgoing hidden-service peers and then be selected as one of the two proxy nodes used for originated-transaction forwarding.

ProxyMark attempts to improve those odds through two mechanisms.

First, adversarial peers provide the target with numerous attacker-controlled onion addresses. The objective is to place these addresses into the target’s peer lists and progressively occupy a large share of its outgoing hidden-service connections.

Second, adversarial peers report artificially fresh blockchain heights. Because proxy eligibility is influenced by reported synchronization height, attacker-controlled peers may be selected as transaction proxies more frequently than they would under unbiased selection.

In the paper’s scaled connection-occupation experiments, adversarial identities reportedly occupied between 7 and 11 of 12 outbound hidden-service connections after repeated restarts. Under a separate periodic-replacement configuration, they occupied between 8 and 10 of 10 connections.

In the proxy-selection experiment, one adversarial connection among 12 outgoing hidden-service peers was selected as one of the proxies in 15.3% of baseline observations. After the adversarial peer reported a manipulated blockchain height, the observed selection rate increased to 35.7%.

These figures describe the authors’ configured experiments. They do not establish how frequently an adversary could obtain the required network position across the live Monero network.

3. Associating a Tor identifier with an IP address

Receiving an originated transaction from a target initially provides the attacker with a Tor-level connection or onion identifier—not necessarily the target’s underlying IP address.

ProxyMark’s third stage encodes an identifier into the timing and frequency of selected Monero P2P request messages. A malicious Tor relay positioned as the target’s entry guard observes the resulting traffic pattern and attempts to recover the watermark.

The paper reports 100% precision and average recall of 93.8% for hidden-service targets and 91.4% for Tor-client targets in its watermarking experiments.

Those results were measured with a controlled guard configuration in which the adversarial relay occupied the required Tor position. The experiment therefore tests watermark recovery and identifier-to-IP linking conditional on successful entry-relay placement. It does not show that the adversary will automatically become a target’s guard.

The complete attack requires all of the following:

  • The target uses the relevant Monero anonymity-network configuration.
  • Adversarial Monero peers interact with the target and influence its hidden-service peer lists.
  • One or more adversarial peers become outgoing connections and transaction proxies.
  • The adversary receives a transaction through a path that identifies it as locally originated.
  • A malicious or cooperating Tor relay is selected in the target’s entry-guard path.
  • The protocol behavior needed to transmit and recover the watermark remains available.

Without the required Tor-side position, the adversary may associate a transaction with an onion address or Tor-level identifier without learning the target’s underlying IP address.


Diagram showing the conditional stages required for the ProxyMark Monero-over-Tor deanonymization attack and how network-origin information may be combined with other evidence.

Click the diagram to view it full screen.

ProxyMark requires a chain of successful Monero peer-positioning and Tor relay conditions. Breaking any required link can prevent end-to-end attribution.

What ProxyMark does not prove

It does not break Monero’s transaction cryptography

ProxyMark does not recover private keys, reveal confidential amounts, undo stealth addresses or identify the true spend inside a ring signature through cryptographic analysis. Its objective is to associate a transaction’s initial network broadcast with the infrastructure from which it originated.

Network attribution can still be consequential. An adversary that associates a transaction with a particular IP address or server may obtain information about its creator even when the blockchain does not reveal conventional sender, receiver or amount relationships.

It does not decrypt Tor traffic

The proposed attack does not remove Tor’s encryption. It uses application behavior and traffic characteristics that can remain observable despite encryption.

The Tor Project’s documentation explains that low-latency anonymity systems cannot eliminate every form of timing and volume correlation. Tor’s original design also states that an adversary observing both relevant ends of a communication may confirm a relationship using distinctive timing or volume patterns, while an active adversary may attempt to create such patterns.

It does not establish universal Monero-over-Tor traceability

The target must use a relevant configuration. The adversary must obtain specific Monero peer positions, influence proxy selection and occupy or cooperate with a suitable Tor entry relay. The paper therefore presents ProxyMark as a feasibility result under stated adversarial capabilities—not automatic deanonymization of every Monero-over-Tor transaction.

The tested software version matters

The researchers used Monero v0.18.3.1 for target nodes in the role-identification, proxy-bias and watermarking experiments. Some of the mainnet measurements were conducted in 2024.

Monero v0.18.5.1 was released on July 8, 2026—the same date on which the expanded ProxyMark preprint was submitted. The study does not report reproducing its complete attack chain against that later release.

The paper therefore establishes the behavior of the versions and configurations tested by the authors. Determining which components remain reproducible requires updated source-code review, testing against current releases and independent technical scrutiny.

Probabilistic evidence is not deterministic proof

Privacy research frequently uses words such as “trace,” “identify” or “deanonymize” for findings with very different levels of certainty. Separating these categories is essential when evaluating both ledger analysis and network-layer attacks.

Type of conclusion What it means What it does not necessarily mean
Deterministic identification A protocol rule, cryptographic fact or valid elimination process leaves only one candidate under the stated assumptions. That the candidate has been associated with a real-world person.
Probabilistic ranking One candidate is assigned a higher likelihood than the alternatives. That all other candidates have been eliminated or that the highest-ranked candidate is certainly correct.
Network-origin attribution A transaction broadcast is associated with a node, connection, onion address or IP address. That the observer knows the transaction’s recipient, amount or complete on-chain history.
Identity attribution A node, wallet, account or transaction is associated with a known organization or person. That every transaction controlled by that identity can be reconstructed.
End-to-end tracing Multiple observations connect transaction construction, network origin, blockchain activity and an external identity. That a single privacy mechanism was cryptographically defeated.

ProxyMark contains both deterministic and probabilistic elements. The researchers describe node-role identification as arising from deterministic differences in protocol behavior within the tested setup. Peer occupation, proxy selection, Tor guard placement and watermark recovery, however, involve probabilities, resource assumptions and environmental conditions.

Precision and recall must also be interpreted in context. A detector can perform well in a controlled experiment in which the adversary already occupies the required observation position without demonstrating how often that position can be obtained against ordinary users.

Four separate layers of cryptocurrency privacy

ProxyMark demonstrates why cryptocurrency privacy should not be reduced to one feature, ring size or anonymity score.

Privacy layer Information it is intended to protect Examples of remaining risks
Ledger privacy Amounts, addresses, ownership relationships and transaction-graph information recorded on-chain Statistical heuristics, decoy-selection biases, implementation defects, disclosure by counterparties and weaknesses in the cryptographic construction
Wallet privacy Keys, balances, transaction construction, wallet queries and local user activity Malicious remote nodes, telemetry, device compromise, wallet fingerprints and query correlation
P2P broadcast privacy Which node first introduced a transaction and how it propagated through the cryptocurrency network Adversarial peers, topology inference, peer-set occupation, first-spy observations and asymmetric forwarding rules
Transport and traffic-analysis resistance Source IP addresses, communication timing, packet volume and relationships between endpoints Traffic correlation, malicious relays, watermarking, broad observation and active flow manipulation

A system may provide strong ledger privacy while exposing network metadata. Conversely, hiding an IP address through Tor does not correct information leaked by the cryptocurrency protocol operating through it.

Ground truth, data fusion and the unequal observer

A public blockchain observer and a participating exchange do not possess the same information. They may examine the same ring, transaction or network event while reaching different conclusions because one party holds private labels that the other does not.

The unequal-observer principle: An anonymity set is observer-relative. A public observer may see 16 possible ring members, while a sender, recipient, exchange or investigator may know facts that eliminate some candidates or assign them different probabilities. There is therefore no single universal “effective anonymity set” that applies equally to every observer.

This distinction is examined in the 2024 Cypher Stack review, History and State of Monero Security Analysis. The review describes adversaries that participate in the Monero economy and combine public blockchain data with information obtained through exchanges, counterparties, other blockchains or network observation.

Observer Potentially available information Possible analytical contribution
Public blockchain observer Ring members, key images, output creation times, transaction structure, fees and block timing Probabilistic heuristics and elimination of outputs independently established as spent
Transaction sender Recipient output, sent amount, transaction time, selected inputs and change information Ground truth about outputs created and spent in the sender’s own transactions
Transaction recipient Received output, amount and approximate payment time Ground truth about one side of a payment relationship
Exchange or payment service Customer records, deposits, withdrawals, amounts, times and outputs created for users Labelled data connecting selected transaction activity with accounts or external identities
P2P or transport observer Peer relationships, initial broadcast time, node identifiers, onion addresses or IP information Evidence concerning transaction origin and relationships among network broadcasts
Device or wallet investigator Keys, wallet records, transaction history, logs and application artefacts Direct ground truth capable of validating or rejecting other hypotheses

The exchange–Alice–exchange problem

The Cypher Stack review models one class of unequal-observer attack as the exchange–Alice–exchange, or EAE, game.

An exchange sends XMR to a customer and therefore knows the output it created for that customer, the amount and the withdrawal time. The customer subsequently conducts other activity. Later, the same customer—or another customer known to the exchange—deposits XMR back to the exchange.

The exchange then asks whether the returning funds may descend from the funds it originally sent. It can compare ring membership, transaction ancestry, known outputs, timing, fees and information from other transparent blockchains. Some conclusions may remain probabilistic. Other outputs may be eliminated deterministically when the exchange knows that they belong to a different customer or were already spent elsewhere.

This does not make the Monero blockchain globally transparent. It shows that a participant with extensive private transaction data may possess a substantial informational advantage over a passive public observer.

Key images do not reveal their source outputs by themselves

Monero publishes a key image for each spent input to prevent the same output from being spent twice. A key image does not, by itself, disclose which member of the associated ring was the real spend.

The difficult analytical step is establishing a reliable mapping between a key image and its source output. Such a mapping may come from deterministic historical conditions, wallet records, exchange data, a cooperating counterparty, a seized device or another source of ground truth. Merely observing a key image does not automatically provide that mapping.

Known-spent outputs can produce recursive elimination

Once an output is reliably known to have been spent in one transaction, it cannot be the true spend in any other ring in which it appears. It may therefore be removed as a candidate elsewhere.

This is the basis of known-spent-output elimination and historical chain-reaction analysis. A high-confidence identification can affect more than the transaction in which it was first made because the same output may appear as a decoy in other rings.

The recursive property also creates a major methodological risk. If an analyst incorrectly treats a probabilistic guess as a deterministic mapping, the false identification can contaminate downstream conclusions. A flawed label may cause valid candidates to be removed from other rings, creating an artificial chain reaction that appears more certain as it expands.

Confidence must not be upgraded by repetition: A hypothesis appearing in several dependent calculations is not equivalent to several independent confirmations.

Any claimed large-scale tracing method should therefore report more than selected examples or headline accuracy. It should disclose its ground truth, sampling method, precision, recall, false-positive rate, false-negative rate, confidence calibration and the effect of erroneous labels on later deductions.

Machine learning can rank hypotheses, but it cannot manufacture ground truth

Machine-learning systems can combine observable features such as output age, transaction structure, fees, periodicity, consolidation behavior and known service labels. They may then rank candidates or cluster transactions that appear statistically related.

A 2020 study, Simulated Blockchains for Machine Learning Traceability and Transaction Values in the Monero Network, created simulated Monero economies with known ground truth and extracted structural features from their public transaction graphs. The researchers reported that machine learning could assist with identifying individuals or groups in the simulations and used labels leaked through the ShapeShift API to identify likely ShapeShift-related activity on the real Monero blockchain. The method did not recover hidden transaction values.

The study demonstrates the importance of labels. A model can learn patterns from simulated or externally identified activity, but it does not transform an unlabelled, ambiguous blockchain into a fully known transaction history. Its output remains conditional on its training data, assumptions and validation procedure.

Different adversaries create different privacy risks

Privacy claims should identify the adversary against which they apply. A system resistant to a public passive observer may be weaker against an adversary that actively participates in the network or controls an exchange.

Adversary class Capabilities Principal limitation
Public passive observer Observes public blockchain data without privileged labels or a special network position Usually lacks ground truth needed to validate uncertain transaction relationships
Participating observer Sends or receives transactions and therefore knows selected amounts, outputs and counterparties Direct knowledge is initially limited to its own transactions
Active P2P adversary Runs peers, manipulates connections, advertises false information, changes message timing or attempts watermarking Must obtain a useful position in the target’s peer or routing environment
Ecosystem adversary Operates an exchange, merchant, swap service, mining pool, remote node or wallet infrastructure Its knowledge depends on the scale and quality of its service-side data
Multi-source institutional adversary Combines blockchain data, exchange records, network observation, seized devices and conventional investigative evidence Must combine heterogeneous evidence without allowing false assumptions to cascade

ProxyMark is most consequential in the final two threat models. It could provide network-origin evidence to an adversary that already possesses exchange records, wallet information, counterparties or probabilistic ledger hypotheses.

How weak evidence can become stronger across layers

Consider three hypothetical observations:

  1. A ledger-analysis model ranks one ring member as more likely to be the true spend than the other members.
  2. A network observer associates the transaction’s initial propagation with a specific node or IP address.
  3. An exchange or merchant possesses private records connecting that IP address, withdrawal time or payment request to a known user.

None of these observations may be conclusive individually. Together, they may substantially narrow the set of plausible explanations.

This is where the Monero Project’s OSPEAD research becomes relevant.

At the time of the OSPEAD publication, Monero used a ring size of 16: one real spend and 15 decoys. A uniform guess would therefore have a 1-in-16 probability of selecting the true spend.

The OSPEAD article reported that differences between actual user spending patterns and Monero’s decoy-selection distribution could allow a Maximum A Posteriori decoder to rank the correct spend first with an estimated probability of approximately 1-in-4.2.

This does not mean that an analyst can deterministically eliminate approximately 12 ring members, or that Monero’s literal effective ring size is always 4.2. The highest-ranked candidate would still be incorrect in most individual cases. OSPEAD describes a probabilistic advantage over random guessing, not certainty, and the Monero Project noted that the research had not yet been formally peer-reviewed.

FCMP++ would change the ledger analysis—but not the network problem

Monero is developing Full-Chain Membership Proofs++, or FCMP++, as a major replacement for its current fixed-size ring-membership model. Instead of proving that the real spend is one member of a selected ring of 16 outputs, FCMP++ is intended to prove that the consumed output belongs to the full eligible set of outputs represented by the blockchain’s membership structure.

If successfully deployed, FCMP++ would substantially change the ledger-layer analysis discussed above. Decoy selection would no longer determine which 15 alternative outputs appear beside the real spend, removing the specific probability-distribution mismatch that OSPEAD is designed to address. Many conventional ring-member ranking, known-decoy and decoy-elimination techniques would therefore not apply to post-FCMP++ transactions in the same form.

FCMP++ would not, however, conceal where or how a transaction enters the peer-to-peer network. A transaction could possess full-chain sender privacy at the ledger layer while still exposing its originating node, onion identity, source IP address or traffic pattern through the network layer. ProxyMark therefore concerns a privacy problem that FCMP++ is not designed to solve.

As of August 2026, FCMP++ remains under development and integration rather than active on Monero mainnet. Its expected protections should therefore be described as planned properties until the final consensus implementation, wallet integration, deployment and independent review are complete.

The Monero OSPEAD article itself emphasizes that probabilistic guessing becomes more relevant when combined with other deanonymizing attacks. A network-origin signal could help an investigator validate, reject or reweight a probabilistic ledger hypothesis. Likewise, private exchange or merchant records may provide context unavailable from the public blockchain.

Cross-layer evidence fusion: A weak ledger signal plus a weak network signal may produce a stronger conclusion than either signal alone, particularly when combined with external identity, timing or counterparty data. This remains a probabilistic inference unless the combined evidence establishes a deterministic relationship.

This does not prove that combined analysis will succeed against arbitrary Monero transactions. It explains why privacy systems must minimize leakage at every layer rather than assuming that uncertainty in one layer will compensate for information exposed in another.

Where Dandelion++ fits—and where it does not

Dandelion++ was designed to make it more difficult for ordinary P2P observers to identify which node originated a cryptocurrency transaction. It separates propagation into a stem phase, in which a transaction follows a limited path, and a fluff phase, in which it diffuses more broadly.

This can improve origin privacy compared with immediate network-wide broadcasting. It is not equivalent to a general-purpose mixnet, and it does not eliminate every threat involving colluding peers, topology knowledge, connection manipulation or active attacks.

A 2023 NDSS analysis of P2P anonymity schemes modeled Dandelion, Dandelion++ and the Lightning Network using Bayesian inference. Its authors concluded that the evaluated configurations provided limited anonymity under adversarial observation and that increasing network size did not necessarily increase the effective set of possible transaction originators.

That research is not a reproduction of ProxyMark and should not be presented as evidence of the same attack. It instead demonstrates that lightweight transaction-propagation schemes have their own threat models and measurable limits.

A subsequent NDSS 2025 study of Monero’s P2P network introduced a connection-reset technique intended to replace a target’s benign connections with attacker-controlled connections. The researchers evaluated the method against Monero mainnet and reported that differences in Dandelion++ stem and fluff propagation could be used as part of the connection-reset process.

The eclipse study and ProxyMark are distinct attacks. Together, however, they show why connection management, peer diversity and application-layer message handling belong inside the network-privacy threat model.

A timeline of Monero traceability and network-privacy research

Research findings must be interpreted according to the protocol version and period studied. Early Monero results should not be applied directly to current transactions, while newer findings should not be assumed to affect configurations that were not tested.

Year Research development Correct interpretation
2017–2018 Empirical analysis of early Monero traceability documented chain-reaction analysis and temporal weaknesses in historical decoy selection. The findings applied heavily to Monero’s early transaction history and motivated protocol and decoy-selection improvements. Their headline percentages should not be applied directly to modern Monero.
2018–2019 Cross-chain traceability research examined information leaked through Monero forks and reassessed earlier heuristics. The researchers found only a small amount of cross-chain-traceable inputs and reported that known heuristics did not significantly outperform random guessing for then-recent transactions, indicating that earlier countermeasures had been effective.
2020 Simulation-based machine-learning research used known-ground-truth economies to classify entities and applied external ShapeShift labels to real Monero activity. Machine learning assisted classification under the study’s assumptions but did not reveal confidential amounts or establish universal transaction traceability.
2023 NDSS research on P2P anonymity schemes analyzed Dandelion and Dandelion++ under colluding-node observation. The work evaluated network-origin anonymity rather than Monero’s on-chain cryptography. It showed that network size alone does not guarantee a proportionally larger originator anonymity set.
2024 Research into wallet bugs, mining outputs, Mordinals and P2Pool-related heuristics measured the historical applicability of several methods through October 2023. Some heuristics achieved high precision in limited contexts, particularly where wallet behavior or identifiable output types created ground truth. This did not make every ring deterministically traceable.
2024 The initial conference version of the Monero-over-Tor deanonymization work was published in The Web Conference Companion. It introduced the node-location concept later expanded into the three-stage ProxyMark framework.
2024–2026 FCMP++ development progressed toward replacing fixed-size rings with full-chain membership proofs. FCMP++ is intended to remove decoy-selection and fixed-ring limitations at the ledger layer. It does not address transaction-broadcast origin, IP exposure or traffic-analysis attacks such as ProxyMark, and was not yet active on mainnet as of August 2026.
2025 OSPEAD estimated that temporal distribution differences could improve a best-candidate guess from approximately 1-in-16 to 1-in-4.2. This is a probabilistic ranking advantage, not proof that rings contain only 4.2 viable members or that the correct spend can usually be identified with certainty.
2025 NDSS eclipse-attack research demonstrated a connection-reset approach against Monero’s P2P network. The research concerned malicious control of node connections and showed that network-position attacks remain a distinct problem from ledger traceability.
2026 ProxyMark combined role identification, adversarial proxy positioning and Tor traffic watermarking. The work presents a conditional, multi-stage network-deanonymization framework. It does not establish universal transaction tracing or a cryptographic break of Monero.

The ProxyMark authors’ proposed mitigations

The researchers outline protocol changes intended to interrupt each stage of their framework.

  • Remove the repeated onion-address fingerprint: Advertise a node’s own onion address only during the initial handshake rather than repeatedly placing it in a predictable timed-sync position.
  • Make originated and relayed traffic less distinguishable: Extend stem-style forwarding across hidden-service connections so that a transaction arriving through an internal-Tor connection could be either originated or relayed.
  • Harden peer-list handling: Verify onion-address reachability and limit the number of addresses accepted through peer-list messages.
  • Verify synchronization claims: Compare heights reported by hidden-service peers with a network height independently verified through public peers.
  • Constrain message timing: Enforce fixed rates for messages used by the watermarking channel and disconnect peers that violate those limits.
  • Require completed handshakes: Reject relevant protocol messages before handshake completion, reducing opportunities for low-noise watermark injection.

The paper distinguishes between mitigations that remove a root cause and measures that only raise the attacker’s cost. Making originated and relayed transactions indistinguishable addresses the central forwarding asymmetry more directly than simply reducing the probability that an adversarial peer is selected.

What ProxyMark means for Ryo’s high-latency mixnet

Ryo’s planned privacy architecture separates ledger confidentiality from network-layer anonymity. Its proposed Halo 2 transition is intended to protect transaction information, while the proposed high-latency mixnet is intended to conceal broadcast origin, communication timing and routing metadata.

This architectural separation is technically justified. A zero-knowledge proof system may validate a transaction without exposing protected ledger information, but it does not determine how that transaction reaches the network. Transport and propagation remain separate sources of observable metadata.

Ryo’s earlier analysis, How Halo 2 and a Mixnet Protect Against Timing and Metadata Attacks, describes the intended complementary roles:

  • Halo 2: Protect transaction validity and concealed ledger information through zero-knowledge proofs.
  • High-latency mixnet: Disrupt observable relationships between transaction origin, network timing, routing and eventual broadcast.

ProxyMark supports the rationale for this layered design. It does not prove that Ryo’s eventual implementation will resist equivalent attacks.

The relevant question is therefore not whether Ryo plans to use a mixnet. The question is whether the completed design can demonstrate specific, testable security properties.

Testable engineering requirements for Ryo’s mixnet

Engineering requirement Question the implementation must answer Evidence required
Origin and relay indistinguishability Can an immediate mixnet peer determine whether a message was created by its predecessor or merely relayed through it? Protocol analysis, packet captures and adversarial classification tests showing that originated and relayed messages do not expose reliable role-specific differences
Message-size normalization Can packet length or fragmentation identify message type, transaction size or protocol state? A documented packet format, padding policy and measurements of residual size leakage under realistic traffic
Batching and delay distribution Does the system mix messages with other traffic, or does it merely add an independent random delay to each message? Published batching rules, delay distributions, simulation results and analysis against timing correlation
Active-watermark resistance Can a malicious peer encode a recognizable pattern by changing message frequency, direction, delay or protocol-control traffic? Adversarial experiments using timing, dropping, delaying, duplication and rate-modulation attacks
Sybil and route-concentration resistance How difficult is it for one entity to control a substantial share of a user’s entry routes, relay paths or candidate peers? A node-admission model, cost analysis, route-diversity rules and simulations under varying levels of malicious network participation
Entry-node protection Can repeated connections or route rebuilding help an adversary discover or monopolize a user’s first-hop relays? A documented entry-selection and rotation policy tested against predecessor, churn and repeated-route attacks
Cover-traffic indistinguishability Can an observer distinguish real transaction traffic from dummy traffic through timing, acknowledgement or relay behavior? Statistical classification tests comparing real and cover traffic from multiple network positions
Replay and tagging resistance Can an attacker modify, replay or selectively alter a message and recognize the result later in the route? Cryptographic packet integrity, replay protection and active-tagging security analysis
Protection of control traffic Do handshakes, synchronization messages, peer advertisements or error responses expose a separate fingerprint? Analysis covering the complete protocol—not only transaction payloads—with explicit rate limits and normalization rules
Behavior under churn and failure Does node failure, congestion or route timeout force a message onto a more identifiable fallback path? Failure-mode tests under node churn, delayed relays, partial partitions and denial-of-service conditions
Cross-layer data-fusion resistance Does residual mixnet metadata improve an adversary’s ability to classify, link or rank ledger transactions when combined with exchange, wallet or counterparty ground truth? Controlled experiments comparing ledger-only inference with ledger-plus-network inference, reporting precision, recall, false-positive rates and changes in adversarial uncertainty
Compromise containment If one transaction, wallet session, entry relay or route is identified, what additional past or future activity becomes linkable? Forward- and backward-linkability tests under compromised relays, exposed wallet records and known transaction-origin events
Evaluation calibration Do reported confidence scores correspond to actual success probabilities, particularly at network scale? Ground-truth test environments, confusion matrices, base-rate-aware evaluation and explicit measurement of false-positive propagation
Defined adversary model Is the system intended to resist local observers, malicious peers, colluding relays, autonomous-system observers or a global passive adversary? A public threat model stating which adversaries are covered, partially covered or outside the design scope
Independent reproducibility Can external researchers reproduce the claimed anonymity properties and attempt the same attacks? Open specifications, test tooling, simulation code, reproducible benchmarks and independent security review

These requirements move the discussion beyond promotional labels. “High latency,” “cover traffic” and “mixnet” describe design components, not measured security outcomes.

A credible implementation should publish the adversary it is designed to resist, the assumptions on which its protection depends and the conditions under which anonymity degrades.

The correct interpretation

The most accurate conclusion from the new research is neither “Tor has failed” nor “Monero is completely traceable.”

The stronger conclusion is that privacy can fail at the interfaces between otherwise valuable systems.

Tor may hide a node’s IP address from its Monero peers. Monero may conceal amounts and transaction relationships on-chain. Dandelion++ may make ordinary first-spy analysis more difficult. Yet the composition can still leak information if application roles, peer lists, control messages and forwarding paths remain distinguishable.

Likewise, a ledger heuristic may be too uncertain to identify a true spend by itself. A network-origin observation may be insufficient to reconstruct a payment. An exchange record may reveal only one endpoint. When these observations are combined, however, their joint evidentiary value may be substantially greater.

The practical privacy of a transaction therefore depends not only on what is publicly visible, but also on:

  • What the adversary already knows
  • Which network or economic positions the adversary controls
  • Whether the available signals are independent or derived from one another
  • How accurately uncertain evidence is calibrated
  • Whether an initial false attribution can contaminate later deductions

For cryptocurrency developers, ProxyMark reinforces several principles:

  • Encrypted traffic can still expose metadata.
  • Protocol-control messages belong inside the privacy threat model.
  • Origin privacy depends on peer selection as well as packet routing.
  • Locally originated and relayed traffic should not expose reliable behavioral differences.
  • A key image does not reveal its corresponding output without additional information.
  • Probabilistic evidence must not be described as deterministic identification.
  • Anonymity sets are observer-relative when some participants possess private ground truth.
  • Machine-learning outputs require ground-truth validation and false-positive measurement.
  • Improvements to ledger privacy do not automatically protect transaction-broadcast origin.
  • Anonymity claims should identify the adversary and assumptions against which they apply.
  • Findings against one software version should be retested against current implementations.
  • Privacy must be evaluated across the ledger, wallet, P2P and transport layers together.

Conclusion

ProxyMark presents a technically significant claimed attack against specific Monero-over-Tor behavior. Its experiments indicate that an adversary with suitable Monero peer positions and Tor entry-relay visibility may be able to identify originated transactions and associate them with a source IP address.

The research does not establish that all Monero-over-Tor transactions are traceable. It does not defeat Monero’s transaction cryptography or decrypt Tor circuits. Its experiments evaluate separate attack components under defined configurations, including controlled Tor guard placement, and use Monero v0.18.3.1 for several stages.

Nevertheless, the research exposes an important architectural concern: ledger confidentiality, wallet privacy, P2P propagation and IP-hiding transport are different security layers. Protection at one layer does not neutralize metadata leaked by another.

The OSPEAD findings provide a parallel lesson at the ledger layer. Ring members may remain cryptographically valid candidates while still receiving unequal probabilities from an analyst. A network-origin observation could then strengthen or weaken that probabilistic inference.

FCMP++ is intended to remove the fixed-ring and decoy-selection structure underlying that form of ledger analysis. It would not, however, prevent a network observer from studying where a transaction entered the network or how its traffic propagated. The distinction further demonstrates why ledger privacy and network anonymity must be engineered separately.

The ground-truth problem makes this more consequential. A public observer, exchange, recipient, network operator and device investigator may each possess different information about the same transaction. A privacy system must therefore be evaluated against unequal observers—not only against an outsider examining the public blockchain in isolation.

This is why full-stack privacy cannot be established through one headline metric, one anonymity network or one cryptographic primitive. It depends on ensuring that separate components do not expose signals that become decisive when combined.

For Ryo, ProxyMark supports the decision to treat network anonymity as a dedicated component of its future architecture. It also creates a demanding benchmark. Ryo’s eventual high-latency mixnet should be judged by a published threat model, originated-versus-relayed message indistinguishability, route-concentration resistance, active-watermark testing, cross-layer data-fusion experiments, compromise-containment analysis, reproducible simulations and independent review.

A privacy roadmap becomes credible when its security claims can be translated into tests—and when external researchers are able to try to break them.

Primary sources and further reading

Luminous Ryo Currency symbol drawing Bitcoin, digital infrastructure, governance nodes and a network-state city into a sovereign gravity field.

The Bitcoin Magnet: How Network Assets Create Economic Gravity

Article 2 of the eight-part “Building the Network State” series.

Executive Summary

A digital community can possess a shared identity without possessing economic independence. To build durable institutions, reward contributors, acquire infrastructure and withstand external pressure, it also needs an independently controlled capital layer.

Bitcoin demonstrated that a scarce, issuerless network asset could attract savings, miners, developers, businesses, infrastructure and culture without direction from a state. This self-reinforcing process is economic gravity.

Economic gravity, however, is not merely a market phenomenon. When capital concentrates around a network, it creates the material conditions for governance. A treasury can finance institutions; institutions can coordinate people; coordinated people can acquire territory and pursue recognition.

The stronger form of this process is sovereign gravity: the tendency of credible, independently controlled capital to attract not only economic activity, but the institutions and governance capacity of a self-organising political community.

Bitcoin proved that network money can exist. The next question is whether a capital layer can be architected for communities that must remain private, resilient and self-governing. Ryo Currency addresses that broader problem through default privacy and GPU-oriented distribution today, alongside an established roadmap encompassing Halo 2 zero-knowledge proofs, a high-latency mixnet, proof-of-stake and native on-chain DAO governance.

Ryo does not possess Bitcoin’s liquidity, recognition or institutional depth. Those are real limitations. Its strategic significance lies elsewhere: its architecture attempts to connect private money with private collective governance, extending monetary neutrality from issuance into observation and political coordination.


Conceptual continuity: This article continues the ryo.news framework developed across
The End of Free-Floating Fiat,
When Institutions Fail,
God, State, and Network,
Imagined Communities 2.0
and
Private From Washington, Visible to Beijing.
It introduces the capital layer of the Network State Stack and develops the concept of sovereign gravity.

Identity alone is not sovereignty.
A network that cannot fund itself cannot govern itself—and a treasury dependent on permission from outside institutions is not fully sovereign.

In Article 1, “Imagined Communities 2.0,” we examined how geographically dispersed people can acquire a shared narrative, common identity and sense of political membership through digital networks.

That is the first layer of the Network State Stack:

Identity → Capital → Coordination → Territory → Recognition

Identity answers the question: Who are we?

Capital answers the next one: What can we build together?

A community becomes durable only when it can convert shared belief into shared capacity. It must be able to maintain communications, compensate contributors, finance infrastructure, support members, defend institutional continuity and pursue projects that extend beyond the temporary enthusiasm of volunteers.

The earlier ryo.news series examined the demand side of this problem.
The Yuan Ultimatum
and
The End of Free-Floating Fiat
explored how geopolitical chokepoints, sanctions and competing monetary blocs can transform settlement infrastructure into an instrument of power.
The Human Chokepoint
examined what happens when financial access becomes conditional.
The Prophet and the Hedge Fund King
developed the argument that monetary fragmentation creates demand for assets no single bloc can freeze or dominate.

More recently,
Private From Washington, Visible to Beijing
examined why states, companies and emerging digital polities may need neutral and private capital as monetary sovereignty becomes increasingly inseparable from information sovereignty.

This article examines the supply side.

How is neutral network capital created? Why do some assets attract entire ecosystems while others remain speculative instruments? What characteristics must an asset possess when it is expected to support not only exchange and savings, but private and resilient self-government?

The central argument is:

A credible network asset can attract capital. Capital can finance infrastructure. Infrastructure can sustain institutions. Institutions can transform an online community into a political actor.

Bitcoin proved the first half of that sequence.

The full network-state problem begins with the second.


I. What the “Bitcoin Magnet” Means

This article takes its title from Sunil Aggarwal’s 2017 book
Bitcoin Magnet.[1]
Aggarwal used the image of a magnet to describe Bitcoin’s capacity to attract people, ideas, investment and infrastructure.

The metaphor is more significant than it initially appears.

Bitcoin was not adopted through a central development plan. No ministry instructed programmers to build wallets. No central bank ordered savers to hold it. No company controlled every application constructed around it.

Instead, a decentralised sequence unfolded:

  • Predictable scarcity attracted early holders.
  • Holders created demand for exchanges, wallets and merchant tools.
  • Mining attracted energy, hardware and technical expertise.
  • Infrastructure made participation easier.
  • Greater participation deepened liquidity and public credibility.
  • Deeper liquidity encouraged further investment and development.

Each layer reinforced the next. Capital attracted infrastructure, and infrastructure attracted more capital.

Bitcoin therefore became more than a payment network or speculative asset. It developed into an economic centre of gravity around which miners, developers, investors, companies, media organisations and political communities organised themselves.

The same general pattern appears elsewhere. Ethereum attracted developers and capital around programmable contracts. Stablecoins attracted payment activity by making digital representations of fiat currencies transferable across blockchain networks. Exchanges became liquidity hubs because assets, users and services accumulated around them.

Bitcoin remains the clearest monetary example because it showed that an asset without a state issuer could become the centre of a global economic ecosystem. Satoshi Nakamoto’s original proposal described a peer-to-peer system that could settle transactions without reliance on a financial institution.[2]

What followed was larger than the original technical description: an international monetary network with its own infrastructure, institutions, vocabulary, political philosophy and social identity.

This is the first meaning of the Bitcoin Magnet:

A credible network asset can become an anchor around which people coordinate economic life without being organised by a state.

That is economic gravity.

But a network state requires something more.


II. From Economic Gravity to Sovereign Gravity

Economic gravity should not be confused with price appreciation.

An asset can rise rapidly in price without developing durable institutions around it. It can attract speculators without attracting merchants, contributors or builders. Conversely, a functioning network may retain developers and infrastructure through long periods of low valuation.

Genuine economic gravity develops through a causal chain:

Credibility → Savings → Liquidity → Contributors → Infrastructure → Commerce → Treasury Capacity → Institutions

1. Credibility

Participants must believe that the network will continue operating and that its monetary rules will not be changed arbitrarily. Credibility can arise from decentralised consensus, predictable issuance, technical security, historical survival and a community willing to defend the network’s rules.

2. Savings

When participants expect an asset to retain future usefulness, some hold it beyond immediate transactional needs. This creates a committed economic base rather than a temporary stream of users.

3. Liquidity

Holders, miners, traders, market makers and merchants create opportunities to exchange the asset. Liquidity makes it easier to enter the network economy, price goods and convert economic activity into external resources.

4. Contributors

Developers, designers, researchers, miners, writers and organisers become more willing to accept the asset as compensation when it can be stored, exchanged and used.

5. Infrastructure

Recurring economic activity produces demand for wallets, marketplaces, exchanges, accounting systems, communications, education, custody arrangements and physical services.

6. Commerce

The asset begins to circulate within a community rather than existing solely as an object held in anticipation of future price movement.

7. Treasury capacity

A community that holds and earns a native asset can finance software, legal work, emergency support, property, research and public goods.

8. Institutions

Once funding and decision-making become regular rather than improvised, institutional structures emerge. Roles are defined. Budgets are established. Rules are adopted. Disputes require procedures. The community begins to acquire an existence that is not reducible to a social-media group.

Economic gravity therefore describes the conversion of monetary credibility into organised capacity.

Sovereign gravity is the stronger political form:

Sovereign gravity is the tendency of credible, independently controlled capital to attract not only economic activity, but the institutions and governance capacity of a self-organising political community.

Economic gravity attracts holders, liquidity and infrastructure.

Sovereign gravity attracts treasuries, constitutions, decision systems and durable collective organisation.

This is the distinction that separates a successful cryptocurrency from a potential network-state capital layer.


III. The Three Leviathans and the Political Evolution of Money

The Bitcoin Magnet reflects a deeper historical pattern explored in
God, State, and Network.

Every monetary order depends on some mechanism capable of enforcing its rules.

Leviathan Characteristic money Primary enforcement mechanism
God Gold, silver and bearer assets Shared belief, custom and internalised moral authority
State Fiat currency and regulated banking claims Law, taxation, institutional control and coercive authority
Network Cryptocurrency and cryptographically secured digital assets Distributed computation, consensus and cryptography

Gold did not require an issuing government, but it depended on physical possession, assay, transport and social recognition.

Fiat money gained extraordinary flexibility by embedding currency within state institutions. The same structure gave governments and regulated intermediaries significant powers over issuance, access, observation and freezing.

Cryptocurrency introduced a third model: monetary rules enforced by a distributed network rather than a sovereign decree.

Bitcoin was the first successful Network Leviathan. It proved that a monetary system could maintain issuance and settlement rules through computation, incentives and consensus rather than through a central issuer.

Yet the Network Leviathan is still evolving.

Bitcoin removes the state from issuance, but not from observation. Its ledger is public. Governments, companies and analysts can inspect the transaction graph and attempt to connect addresses with identities.

Bitcoin is therefore issuer-neutral, but not fully observer-neutral.

Privacy-by-default systems represent a further stage in the evolution of network money. They attempt to prevent any participant from receiving a privileged informational view of ordinary economic activity.

Ryo’s roadmap extends the principle again. It aims to combine private money with proof-of-stake and native DAO governance, allowing the Network Leviathan to enforce not only monetary rules, but selected forms of private collective decision-making.

In that sense, Ryo’s network-state thesis is not that Bitcoin was a mistake. It is that Bitcoin opened a political transition that remains incomplete.

Bitcoin demonstrated money enforced by the Network. Ryo’s roadmap asks whether private governance can also be enforced by the Network without making every participant politically transparent.


IV. Money as a Technology of Coordination

Money is commonly described through three functions: medium of exchange, store of value and unit of account.

For the network-state question, an earlier function is equally important: money allows people who do not personally know one another to coordinate across distance and time.

Carl Menger developed one of the most influential market-emergence theories of money. In “On the Origin of Money,” he argued that certain goods become widely accepted because their marketability makes them increasingly useful in exchange.[3]

Acceptance reinforces acceptance.

Friedrich Hayek later challenged the assumption that money must remain a state monopoly. In Denationalisation of Money, he argued for competition among monetary systems rather than exclusive government control over monetary choice.[4]

Nick Szabo examined the deeper history of monetary coordination. In “Shelling Out,” he argued that monetary precursors helped human beings solve problems of reciprocity, wealth transfer and cooperation beyond immediate trust relationships.[5]

These accounts differ in important respects, but they converge on a central point:

Money is not merely an object exchanged between institutions. It is itself an institution through which strangers coordinate.

In territorial states, monetary infrastructure developed alongside taxation, law, banking and political authority.

A network state begins in the reverse order.

It may initially possess no recognised territory, tax authority or central bank. Its monetary network can therefore become one of its first durable institutions.

The choice of capital layer determines:

  • who can participate;
  • what outsiders can observe;
  • whether transactions can be blocked;
  • how collective resources can be administered;
  • and where coercive pressure can be applied.

For a digital polity, monetary architecture is political architecture.


V. Network Effects, Hubs and Monetary Switching Costs

The value of a network often depends partly on how many people and compatible services participate in it.

Economists Michael Katz and Carl Shapiro described how systems can become more valuable as users, complementary products and compatible infrastructure accumulate around them.[6]

This dynamic is especially powerful in money.

A currency becomes more useful when:

  • more people accept it;
  • more merchants price goods in it;
  • more markets provide liquidity;
  • more applications support it;
  • and more institutions recognise it.

William Luther applied this problem directly to cryptocurrency. His research on network effects and switching costs explains why users may remain with an established monetary system even when an alternative possesses desirable technical properties.[7]

Switching is not an individual decision alone. It is a coordination problem.

A person may prefer private digital money, but that preference has limited practical value when employers, suppliers, customers and service providers continue using another system.

Technical superiority therefore does not automatically create economic gravity.

An alternative network must build reasons to:

  • hold the asset;
  • earn the asset;
  • spend the asset;
  • develop around the asset;
  • and organise institutions around the asset.

Network science supplies a related insight. Albert-László Barabási and Réka Albert showed how growing networks can develop through preferential attachment: new nodes tend to connect disproportionately to nodes that are already well connected.[8]

Cryptocurrency networks display a comparable tendency:

  • liquidity attracts more liquidity;
  • developers build where users already exist;
  • users choose assets supported by established infrastructure;
  • media attention concentrates on prominent networks;
  • and institutions favour assets with mature markets and custody systems.

This explains both Bitcoin’s strength and the difficulty facing smaller networks.

Bitcoin’s gravity does not arise solely from code. It includes accumulated liquidity, recognisability, infrastructure, historical credibility and social coordination.

Ryo cannot overcome that advantage merely by possessing a more privacy-oriented roadmap. It must convert architectural distinction into users, markets, applications, contributors and institutions.

Neutrality is a necessary property of sovereign capital.

Adoption is what turns that property into power.


VI. Bitcoin Proved the Thesis—But Not Every Use Case

Bitcoin accomplished something historically significant.

It demonstrated that a digital asset could maintain scarcity, transfer value and coordinate issuance through an open network without a central monetary issuer.

It also established the strongest existing example of cryptoeconomic gravity.

Capital attracted mining. Mining strengthened settlement assurances. Market depth attracted financial infrastructure. Infrastructure attracted more capital and participants.

None of the limitations discussed below diminish that achievement.

They do matter when Bitcoin is evaluated not only as reserve money, but as the operational treasury and governance foundation of a community facing sustained surveillance or political pressure.

Public transaction history

Bitcoin’s base-layer ledger is public. Addresses are pseudonymous rather than inherently attached to legal identities, but transaction flows remain available for analysis.

A network-state treasury using Bitcoin could expose balances, payment patterns, counterparties and strategic financial activity when addresses are identified or clustered.

Governance deliberately separated from the ledger

Bitcoin governance is distributed across software developers, miners, node operators, businesses and users. This arrangement has proved resistant to unilateral control.

Bitcoin does not, however, provide a native political system for membership, private voting, delegation or community treasury administration.

For Bitcoin itself, that separation may be a design strength. For a network state seeking an integrated governance layer, it means additional systems must be constructed elsewhere.

Specialised mining infrastructure

Bitcoin mining is dominated by specialised ASIC hardware and industrial operations. The network remains geographically and organisationally distributed, but direct participation at meaningful scale requires specialised capital, energy access and supply chains.

Privacy requires additional tools and practices

Bitcoin users can employ privacy-enhancing techniques and additional layers, but confidentiality is not enforced for every base-layer transaction.

A network state would therefore need to build its operational privacy around supplementary infrastructure.

Bitcoin proved issuer neutrality: no state possesses the authority to issue additional bitcoin outside the network’s consensus rules.

It did not establish observer neutrality.

This makes Bitcoin the first successful Network Leviathan, but a partial architecture for private political organisation.


VII. What a Network-State Capital Layer Requires

The capital layer is the engine that powers every later stage of the Network State Stack.

Without independent capital:

  • identity remains symbolic;
  • coordination lacks resources;
  • territory cannot be acquired or maintained;
  • and recognition cannot be pursued through durable institutions.

A network-state capital layer should therefore be evaluated against the following criteria.

1. Protocol-level censorship resistance

No single issuer, bank, exchange or government should possess the authority to freeze the asset throughout the underlying network.

Custodial balances can still be frozen, devices can be compromised and individuals can be coerced. “Unfreezable” should therefore be understood as a protocol property, not as a claim that every user is immune from seizure under every condition.

2. Self-custody

Members and institutions must be able to control assets directly through cryptographic keys rather than depending exclusively on a financial intermediary.

3. Privacy by default

Treasury movements, salaries, donations, membership payments and commercial relationships can reveal the internal structure of a community.

Privacy should therefore be a normal property of the system rather than an exceptional action that marks a transaction as sensitive.

4. Distributed issuance and control

The network should avoid a central issuer or privileged insider group whose cooperation could be compelled.

Distribution cannot eliminate inequality, but launch and consensus design should avoid unnecessary centres of control.

5. Liquidity and jurisdictional reach

Privacy and decentralisation are insufficient when an asset cannot support ordinary obligations.

A treasury must be able to pay contributors, acquire goods and manage volatility without overwhelming available markets.

6. Governance compatibility

A network-state community requires procedures for budgets, proposals, delegation, membership, constitutional changes and dispute resolution.

These mechanisms may reside within the protocol or in securely integrated systems.

7. Operational resilience

The currency, wallets, communications and governance mechanisms must remain usable through technical failures, legal pressure, exchange restrictions and hostile network conditions.

8. Institutional legitimacy

Cryptographic validity is not the same as political legitimacy.

Members must understand the rules, accept the procedures and possess meaningful ways to challenge abuse or exit the institution.

No major cryptocurrency satisfies every criterion at maximum strength.

The relevant question is not which asset is perfect. It is which architecture best matches the risks and objectives of a particular political community.


VIII. The Sovereignty–Neutrality Frontier

The capital-layer criteria outlined above are not merely technical preferences. They express a deeper monetary principle developed in
Private From Washington, Visible to Beijing:
the sovereignty–neutrality frontier.

A currency becomes more useful to its sovereign issuer as the issuer gains stronger control over:

  • identity;
  • issuance;
  • programmability;
  • transaction approval;
  • capital controls;
  • and supervisory access.

Those same powers make the currency less neutral to everyone else.

A foreign state, company or community must ask whether the issuer can:

  • freeze its reserves;
  • deny transactions;
  • change monetary rules;
  • inspect commercial relationships;
  • or grant domestic actors superior access.

The stronger the issuer’s sovereign controls, the greater the issuer’s strategic advantage—and the weaker the currency’s neutrality outside that sovereign system.

The reverse is also true.

Money becomes more neutral as no participant can:

  • freeze it unilaterally;
  • rewrite its issuance for private benefit;
  • deny ordinary transactions;
  • inspect every payment;
  • or grant itself a superior protocol position.

Neutrality therefore requires the limitation of sovereign privilege.

Neutral money is not money that no state uses. It is money within which no state can grant itself a superior position.

Bitcoin achieved a historic form of issuer neutrality. No state controls its monetary issuance.

Its transparency, however, leaves a second form of asymmetry intact.

Any sufficiently capable observer can inspect the same public ledger, but observers do not possess equal analytical resources. States and large corporations can combine blockchain data with exchange records, communications metadata, identity databases and physical surveillance.

Public data is formally equal but operationally asymmetric.

This produces a distinction between two forms of neutrality:

Form of neutrality Meaning
Issuer neutrality No state or organisation possesses unilateral control over issuance or protocol-level freezing.
Observer neutrality No state, company or participant receives a default protocol-level view of everyone else’s economic activity.

Privacy-by-default assets extend neutrality into the informational dimension.

They do not merely remove the state from issuance. They seek to remove privileged observers from the transaction graph.

This does not make users invisible under all circumstances. Endpoint surveillance, compromised devices, exchange records and human mistakes can still expose activity.

Observer neutrality is a protocol principle: ordinary transactions do not automatically create a public map available for permanent analysis.

For a community facing political surveillance, that distinction is fundamental.

A treasury is not neutral if every adversary can map its contributors, salaries, reserves and strategic relationships.

Privacy is therefore not an optional feature added to neutral money.

Under adversarial conditions, privacy is one of the conditions of neutrality itself.


IX. Comparing Candidate Network Assets

Bitcoin, Monero, Zcash and Ryo represent different answers to the capital-layer problem.

The comparison below does not identify a universally superior asset. It identifies architectural trade-offs relevant to network states.

Asset Principal strengths Network-state limitations
Bitcoin Liquidity, recognisability, mature infrastructure, credible scarcity and decentralised settlement. Public base-layer ledger, specialised mining and no native private DAO or community-treasury governance layer.
Monero Mature default privacy, established privacy-coin recognition and a currency-focused design. CPU-oriented RandomX keeps mining accessible to commodity hardware but also makes compromised general-purpose CPUs useful for cryptojacking and mining botnets; no native on-chain DAO governance.[21]
Zcash Advanced zero-knowledge technology, including Ironwood and Halo 2. Mixed transparent and shielded architecture rather than mandatory protocol-wide privacy; Equihash mining transitioned from a GPU-accessible launch model to specialised ASIC hardware; no native private network-state DAO layer confirmed.[22]
Ryo Currency Default privacy, consumer-GPU-oriented mining designed to reduce CPU-botnet and ASIC advantages, fair-launch safeguards and a roadmap connecting Halo 2, proof-of-stake and native DAO governance.[23] Much smaller liquidity, adoption and infrastructure; major roadmap components remain to be implemented and tested.

Bitcoin: monetary gravity at global scale

Bitcoin remains the strongest example of a network asset becoming an independent economic institution.

Its principal advantages are scale, liquidity, recognisability, historical credibility and a settlement network without a central issuer.

Its limitation for privacy-intensive network-state operations is not monetary credibility. It is visibility and governance architecture.

A network state could use Bitcoin as a reserve asset while conducting confidential operations and governance elsewhere. Bitcoin does not natively combine those functions.

Monero: mature private digital cash

Monero provides default transaction privacy through ring signatures, Ring Confidential Transactions and stealth addresses. Its official documentation emphasises that privacy is built into normal use rather than confined to a separate optional mode.[9]

This makes Monero a serious candidate for private payments and treasury transfers. Its mandatory privacy model also avoids the smaller anonymity sets and identifying signals that can arise when privacy is used only by a self-selecting minority.

Monero had no conventional premine, but its early launch was affected by a substantial performance asymmetry among miners. The public miner inherited from Bytecoin was severely deoptimised, while privately held optimisations enabled much faster mining. Computer scientist David G. Andersen reported an 11-fold speedup within a week, 45% of the network’s hash rate by 14 May 2014 and more than 60% at certain points; he argued that the original miner had been deliberately crippled. This episode is sometimes characterised as a de facto “stealth premine,” although the coins were mined after public launch rather than allocated before it. Andersen also stated that the later community developers who took over Monero appeared unaware of the inherited deoptimisation.[20]

Monero’s present RandomX proof-of-work is intentionally optimised for general-purpose CPUs to discourage ASIC specialisation and keep mining broadly accessible. That design has a genuine distribution benefit, but it also creates a distinct attack surface: malware operators can aggregate stolen CPU cycles across compromised desktops and servers. Threat-intelligence reporting and academic research have repeatedly documented botnets and cryptojacking campaigns deploying XMRig to mine Monero. Operation Endgame illustrates the possible scale. BitcoinBlog.de reported that Monero’s network hashrate fell from approximately 2.9 GH/s on 29 May 2024 to 1.78 GH/s on 31 May—about 39%—immediately after the Europol-led disruption of major botnet and dropper infrastructure. The timing supports, without proving, the inference that botnet-linked mining may have represented roughly two-fifths of the network at that time. Europol did not attribute that share to a single botnet. CPU mining does not cause botnets; the narrower point is that CPU accessibility lowers the hardware barrier for unauthorised mining and can permit large illicit fleets to accumulate material network share.[21]

Default privacy should not be interpreted as immunity from every form of analysis. Historical research has identified weaknesses in earlier decoy-selection methods, while exchange records, compromised endpoints, network metadata and distinctive user behaviour can still reduce privacy in particular circumstances.[19] These limitations demonstrate that transaction-layer privacy is one component of operational privacy rather than a complete substitute for it.

Monero’s architecture nevertheless centres on private currency rather than native political governance. Communities requiring private voting, delegation or integrated treasury proposals would need separate governance systems.

That separation may be considered a strength. Keeping political governance outside the monetary protocol can limit the degree to which holders control the currency through formal voting.

It is nevertheless a meaningful difference for a network-state project seeking an integrated capital and coordination layer.

Zcash: advanced zero-knowledge privacy with user choice

Zcash has made major contributions to practical zero-knowledge cryptography. Its NU6.3 Ironwood shielded pool reuses Orchard’s Action and Halo 2 proof system while maintaining shielded transaction activity without exposing transaction details in the same manner as a transparent ledger.[10]

Zcash also permits transparent activity.

This provides flexibility and compatibility, but it creates a different privacy model from a system in which confidentiality is mandatory for every ordinary transaction.

The relevant distinction is not strong cryptography versus weak cryptography.

It is mixed privacy architecture versus enforced privacy architecture.

Zcash’s mining history presents a separate distribution trade-off. Equihash was selected partly because its memory-oriented design was expected to keep commodity GPU mining competitive and make cost-effective ASICs unlikely. In May 2018, however, Bitmain announced an Equihash ASIC. The Zcash Foundation’s subsequent governance process rejected making ASIC resistance a priority, and Electric Coin Company later described long-term ASIC resistance as unsustainable. Zcash therefore moved from a GPU-accessible launch model to a mining market in which specialised hardware held the efficiency advantage. This was an openly debated protocol choice rather than a hidden launch allocation, but it narrowed direct mining participation relative to the original design expectation.[22]

Ryo: an integrated capital-and-governance thesis

Ryo’s present network uses RingCT with default privacy and a default ring size of 25. Its Cryptonight-GPU proof-of-work algorithm is designed for standard consumer GPUs rather than ASIC hardware. The project states that it launched with no premine, no speedmine and no privileged early launch, while distributing emission over a long-term schedule.[11]

Ryo’s GPU orientation should also be described precisely. Cryptonight-GPU is designed to make ordinary CPU mining inefficient and thereby reduce the advantage available to mass fleets of compromised low-powered devices, while remaining accessible to owners of consumer GPUs. It is more accurate to describe this as resistance to CPU-botnet economics than as being “botnet-proof”: compromised systems with suitable GPUs or stolen cloud GPU resources can still be abused for mining.[23]

These are current architectural characteristics.

Ryo’s
official roadmap
establishes a broader direction: Halo 2 zero-knowledge proofs, a high-latency mixnet, proof-of-stake and native on-chain DAO governance.[12]

Halo 2 and the mixnet address transaction and network-layer privacy.

Proof-of-stake and native DAO governance extend the architecture from private money toward private collective organisation.

Ryo is not presently a completed network-state operating system. It is a monetary network whose established roadmap is explicitly designed around requirements future digital polities may face.


X. Ryo on the Sovereignty–Neutrality Frontier

Dimension Bitcoin Monero Zcash Ryo
Issuer neutrality Strong Strong Strong Strong
Observer neutrality Limited by public ledger Default privacy Strong when shielded; privacy is optional Default privacy; Halo 2 planned
Network-metadata protection Requires additional tools Requires additional protections Requires additional protections High-latency mixnet on roadmap
Native political governance No No No native private DAO layer announced Native DAO governance planned
Consensus ASIC proof-of-work CPU-oriented RandomX proof-of-work; broad commodity-hardware access, with exposure to CPU cryptojacking and mining botnets[21] Equihash proof-of-work; launched for commodity GPU mining, later transitioned to ASIC-specialised mining[22] GPU-oriented Cryptonight-GPU proof-of-work, designed to reduce CPU-botnet and ASIC advantages; proof-of-stake planned[23]
Launch and issuance design No premine; early issuance and later ASIC industrialisation No conventional premine; early launch affected by an inherited crippled public miner and privately optimised mining, sometimes characterised as a de facto “stealth premine” Founder and development funding; GPU-accessible launch, followed by public Equihash ASICs in 2018 and no fork to restore ASIC resistance[22] No premine, no speedmine, no privileged launch; long-term emission
Current liquidity and infrastructure Very strong Established Established Limited

The table reveals Ryo’s central trade-off.

It is weak where Bitcoin is strongest: liquidity, recognition, infrastructure and accumulated network effects.

It is architecturally ambitious where Bitcoin is intentionally limited: mandatory privacy, metadata resistance and integrated political governance.

Ryo is not Bitcoin.

It does not possess Bitcoin’s market depth, recognition or institutional ecosystem. Those are real limitations that must be stated plainly.

But Ryo’s roadmap addresses a question that Bitcoin does not:

How can a digital community privately govern not only individual transactions, but also its shared treasury and collective political decisions?

This is the difference between economic gravity and sovereign gravity.

Economic gravity attracts capital.

Sovereign gravity attracts governance.

Ryo’s architecture—default privacy, Halo 2 zero-knowledge proofs, a high-latency mixnet, proof-of-stake and native DAO governance—is designed around the latter problem.


XI. Private Capital Requires Private Governance

Private money protects the economic activity of individual participants.

Private governance protects the political relationships behind that activity.

A public governance system can expose:

  • which participants possess political influence;
  • how members vote on controversial proposals;
  • who delegates authority to whom;
  • which groups support particular treasury allocations;
  • and how financial power maps onto political factions.

For an ordinary online association, this exposure may be acceptable or even desirable.

For a community operating under political repression, sanctions or sustained surveillance, it can become a direct security risk.

Public voting can allow an adversary to identify:

  • leaders;
  • major contributors;
  • internal factions;
  • financial dependencies;
  • and members who oppose a particular state or policy.

Ryo’s private DAO thesis is therefore more significant than the phrase “governance on a blockchain” suggests.

Its potential value lies in combining verifiability with confidentiality:

  • a participant could prove eligibility without disclosing a public identity;
  • a member could cast a valid vote without exposing political alignment;
  • a community could approve treasury expenditure without publishing its entire financial graph;
  • delegation could occur without creating a public map of political relationships;
  • and governance rules could be enforced without making every participant transparent to outsiders.

These are technically demanding objectives.

The wider cryptographic field nevertheless demonstrates that the underlying concepts are practical research and engineering problems rather than purely theoretical ambitions.

Semaphore, for example, allows a person to prove membership in a group and submit a valid signal or vote without revealing identity.[13]

Research into private DAO delegation has also described methods through which voting power could be delegated, revoked and redelegated without publicly exposing the relationship between delegator and representative.[14]

These systems are not Ryo implementations and should not be presented as such.

They demonstrate that private governance has identifiable cryptographic components:

  • anonymous membership proofs;
  • private eligibility verification;
  • confidential ballots;
  • verifiable tallying;
  • private delegation;
  • and selective disclosure.

The strategic objective is not secrecy without accountability.

It is governance in which the validity of a decision can be verified without automatically exposing the identity, wealth and political behaviour of every participant.


XII. A Treasury Is Not Yet a Government

Cryptocurrency communities sometimes treat a token and voting contract as sufficient to create decentralised governance.

Experience suggests otherwise.

Elinor Ostrom’s work on polycentric governance demonstrated that communities can successfully manage shared resources, but durable self-government depends on institutional design: meaningful boundaries, legitimate collective-choice procedures, monitoring, accountability and accessible conflict resolution.[15]

A network-state treasury is a form of digital commons.

Its assets may be cryptographically secured, but the rules governing them remain social and political.

The community must still answer:

  • Who qualifies as a member?
  • Who may submit proposals?
  • How is voting power distributed?
  • Should capital, contribution, reputation or proof of personhood determine influence?
  • How are minorities protected?
  • How can corruption be investigated without destroying privacy?
  • What happens when formally valid rules produce an unjust outcome?
  • Who can respond during a technical emergency?
  • How can emergency powers be prevented from becoming permanent?

Native DAO governance does not automatically answer these questions.

It provides infrastructure through which a community can encode and enforce its chosen answers.

Existing DAOs also demonstrate the danger of equating token voting with decentralised control.

Ian Appel and Jillian Grennan examined 10,639 proposals across 151 DAOs and found that control was frequently exercised by a very small number of entities.[16]

Privacy alone does not prevent oligarchy.

A private DAO could conceal concentrated power as easily as it could protect ordinary members from retaliation.

A credible network-state governance system must therefore combine privacy with:

  • capture-resistant voting design;
  • auditable rules and outcomes;
  • constitutional limits;
  • delegation and revocation procedures;
  • conflict-resolution systems;
  • constrained emergency controls;
  • and institutional checks beyond simple one-coin-one-vote.

Research into “modular politics” similarly argues that online communities require richer governance components than the limited moderator and administrator structures supplied by conventional platforms.[17]

The long-term opportunity is not one universal DAO constitution.

It is a governance layer through which different communities can adopt different institutions while sharing a neutral monetary and privacy infrastructure.

This is where Ryo’s network-state relevance becomes clearest.

The roadmap does not merely propose a private asset to be held by a community.

It proposes an architecture through which communities could build private institutions around that asset.


XIII. Where Economic and Sovereign Gravity Can Fail

A serious theory of network capital must examine failure modes as carefully as opportunities.

Those risks become more consequential when the asset supports a political community rather than a speculative market alone.

Liquidity risk

A network-state treasury cannot meet substantial obligations when ordinary transactions overwhelm available markets.

Ryo’s present liquidity is far smaller than that of Bitcoin, Monero or Zcash. This is a central constraint.

A community using a less liquid native asset would require conservative treasury management, diversified reserves and realistic expenditure limits.

Volatility risk

A treasury concentrated in one volatile asset can lose operating capacity even when the underlying community remains healthy.

Monetary independence does not eliminate the need for asset and liability management.

Speculation without productive activity

Price appreciation can attract holders without attracting builders, merchants or institutions.

This produces speculative gravity rather than sovereign gravity.

The meaningful test is not how many people monitor the price. It is how many people earn, spend, build and coordinate through the network.

Governance capture

Proof-of-stake and token voting can concentrate authority among large holders.

Private voting may protect participants, but it may also make political coalitions more difficult to scrutinise.

The architecture must preserve ballot secrecy without eliminating institutional accountability.

Technical risk

Halo 2 integration, proof-of-stake, mixnet infrastructure and private DAO governance each introduce significant engineering and security requirements.

The complete system must be implemented, independently reviewed, tested and maintained.

Roadmap ambition is not equivalent to completed security.

Operational-security risk

Strong protocol privacy cannot compensate for compromised devices, insecure backups, exposed identities, poor key management or careless communications.

A network state requires institutional operational security, not only private transactions.

Infrastructure centralisation

A decentralised protocol can still depend heavily on a small number of wallets, developers, exchanges, websites or service operators.

The surrounding ecosystem must become distributed as well.

Regulatory and access pressure

Exchanges and service providers may restrict privacy-focused assets.

A community relying on such an asset must be capable of peer-to-peer exchange, direct custody and independent infrastructure rather than assuming permanent access to regulated platforms.

Legitimacy failure

A technically valid vote can still lack political legitimacy.

Members may reject procedures they consider unfair, captured or inconsistent with the community’s founding principles.

Code can enforce a decision.

It cannot, by itself, create consent.

Failure to create external economic relationships

A network economy cannot survive indefinitely by circulating value only among committed insiders.

It must acquire external revenue, productive capacity, property, services and trade relationships.

Economic gravity becomes sovereign gravity only when internal coordination can be converted into real-world institutional capacity.

Despite these risks, the demand for network-state capital layers is not theoretical. The next section examines why.


XIV. Network States Are the Demand Side

The network-state framework developed by Balaji Srinivasan and explored throughout this series provides the political demand side of the Bitcoin Magnet.

Srinivasan defines a network state as a highly aligned online community capable of collective action that crowdfunds territory and eventually seeks diplomatic recognition from existing states.[18]

The sequence reverses the historical order of state formation.

Traditional states generally begin with territory and organise the people located within it.

A network state begins with people and attempts to organise territory around them.

This is the reverse sovereignty stack:

Traditional state formation Network-state formation
Territory Identity
Population Capital
Institutions Coordination
Monetary and legal systems Distributed territory
External recognition Diplomatic recognition

The capital layer is what makes this reversal possible.

A community with an independently controlled treasury can:

  • finance infrastructure before receiving state recognition;
  • compensate contributors before possessing a tax system;
  • acquire property before holding contiguous territory;
  • build institutions before receiving a legal charter;
  • and coordinate internationally before becoming a recognised sovereign entity.

This is why the path described in
From Network Union to Network State
begins with an aligned online community rather than a border.

It is also why
When Institutions Fail
treated cryptocurrency not merely as an asset class, but as institutional fallback infrastructure.

A network state must operate across jurisdictions whose governments may disagree with its goals.

Its treasury must therefore resist unilateral freezing. Its transactions may require confidentiality. Its governance must resist capture. Its infrastructure must remain usable when a particular state, bank or company withdraws cooperation.

Privacy-preserving capital is not merely convenient for network states.

Under adversarial conditions, it is structurally necessary.

A community cannot claim meaningful economic sovereignty when the very institutions it seeks to exit retain unilateral control over its treasury.

This is the deeper significance of the capital layer.

It is not simply about storing value.

It is about creating the material conditions for political independence.


XV. From Economic Gravity to Political Capacity

The history of money is inseparable from the history of coordination.

A community with an independently controlled treasury can do things an informal online group cannot.

It can plan beyond the next donation campaign. It can retain skilled contributors, maintain infrastructure, acquire shared assets and support members during crises.

Capital does not automatically produce legitimate governance.

Identity, trust, norms and institutions may begin forming before a treasury exists.

Capital and governance are better understood as mutually reinforcing.

Identity creates the community. Capital gives it continuity. Governance determines what that continuity is used to build.

This is why private DAO governance matters to the Ryo network-state thesis.

Bitcoin demonstrated that a network could possess money without a state.

Ryo’s roadmap asks the next question:

Can a network also administer capital, delegate authority and make collective decisions without exposing its members’ financial and political relationships to outside surveillance?

If that architecture is successfully implemented, Ryo would not merely function as private digital cash.

It could provide part of the institutional substrate through which digital communities organise themselves.

That possibility does not eliminate present limitations.

Ryo must still expand liquidity, strengthen infrastructure, complete major protocol development and demonstrate that private governance can remain secure, decentralised and legitimate.

The defensible conclusion is neither that Ryo has already solved the network-state problem nor that architectural design is irrelevant until mass adoption arrives.

The stronger conclusion is this:

Ryo represents one of the clearest attempts to connect default-private capital with native private governance. Its roadmap addresses the full sovereignty problem rather than the monetary problem alone.

Bitcoin proved that network money can exist.

Ryo is architected to test whether network governance can exist around that money without sacrificing privacy.

This is the deeper meaning of the Bitcoin Magnet: not price appreciation alone, but the gravitational pull that transforms a credible digital asset into the material foundation of a political community.

Economic gravity attracts capital.

Sovereign gravity builds a polity.

The next article in the “Building the Network State” series,
“The Anatomy of a Network State,”
will examine the political structure that emerges around this foundation: the progression from network union to network archipelago and, eventually, recognised network state.


References

  1. Sunil Aggarwal, Bitcoin Magnet, Notion Press, 2017.
    Publisher page.
  2. Satoshi Nakamoto, “Bitcoin: A Peer-to-Peer Electronic Cash System,” 2008.
    Bitcoin white paper.
  3. Carl Menger, “On the Origin of Money,” The Economic Journal, Vol. 2, No. 6, 1892, pp. 239–255.
    Oxford Academic.
  4. F. A. Hayek, Denationalisation of Money, Institute of Economic Affairs, 1976.
    Institute of Economic Affairs.
  5. Nick Szabo, “Shelling Out: The Origins of Money,” 2002.
    Satoshi Nakamoto Institute.
  6. Michael L. Katz and Carl Shapiro, “Systems Competition and Network Effects,” Journal of Economic Perspectives, Vol. 8, No. 2, 1994, pp. 93–115.
    American Economic Association.
  7. William J. Luther, “Cryptocurrencies, Network Effects, and Switching Costs,” Contemporary Economic Policy, Vol. 34, No. 3, 2016, pp. 553–571.
    Wiley Online Library.
  8. Albert-László Barabási and Réka Albert, “Emergence of Scaling in Random Networks,” Science, Vol. 286, No. 5439, 1999, pp. 509–512.
    Science.
  9. Monero Project, “How Is Monero’s Privacy Different From Other Coins?”
    Official Monero FAQ.
  10. Zcash Foundation, “Zebra 6.0.0 Release,” 10 July 2026.
    Official NU6.3 Ironwood release documentation describing its reuse of Orchard’s Action and Halo 2 proof system.
    See also Zcash protocol contributors, The Orchard Book,
    official Orchard protocol documentation.
  11. Ryo Currency, “Why RYO?”
    Official Ryo Currency website.
  12. Ryo Currency, “What Is the Roadmap for Ryo, and Who Is Leading Development?”
    Official Ryo roadmap, FAQ #4.
  13. Privacy and Scaling Explorations, “What Is Semaphore?”
    Official Semaphore documentation.
  14. Kamilla Nazirkhanova, Vrushank Gunjur, X. Pilli Cruz-De Jesus and Dan Boneh, “Kite: How to Delegate Voting Power Privately,” 2025.
    Research paper.
  15. Elinor Ostrom, “Beyond Markets and States: Polycentric Governance of Complex Economic Systems,” American Economic Review, Vol. 100, No. 3, 2010, pp. 641–672.
    American Economic Association.
  16. Ian Appel and Jillian Grennan, “Control of Decentralized Autonomous Organizations,” AEA Papers and Proceedings, Vol. 113, 2023, pp. 182–185.
    American Economic Association.
  17. Nathan Schneider, Primavera De Filippi, Seth Frey, Joshua Z. Tan and Amy X. Zhang, “Modular Politics: Toward a Governance Layer for Online Communities,” Proceedings of the ACM on Human-Computer Interaction, 2021.
    ACM Digital Library.
  18. Balaji Srinivasan, The Network State, 2022.
    Official online edition.
  19. Malte Möser, Kyle Soska, Ethan Heilman et al.,
    “An Empirical Analysis of Traceability in the Monero Blockchain,”
    Proceedings on Privacy Enhancing Technologies, 2018.
    Research paper.
    See also the Monero Project’s
    post-mortem on decoy-selection bugs.
  20. David G. Andersen, “Minting Money with Monero … and CPU Vector Intrinsics,” 28 August 2014.
    Firsthand account and technical analysis of the early crippled-miner episode.
    See also the
    archived inherited slow-hash implementation.
  21. Monero Project, “RandomX.”
    Official Monero documentation describing RandomX as CPU-optimised.
    See also Microsoft Threat Intelligence, “Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment,” 20 May 2021,
    documenting XMRig-based Monero mining within a botnet;
    and Sergio Pastrana and Guillermo Suarez-Tangil, “A First Look at the Crypto-Mining Malware Ecosystem: A Decade of Unrestricted Wealth,” 2019,
    large-scale academic study of mining malware.
    For Operation Endgame, see Europol,
    “Largest ever operation against botnets hits dropper malware ecosystem,” 30 May 2024.
    On the contemporaneous Monero hashrate decline, see Christoph Bergmann, “Europol’s massive blow against botnets – Monero hashrate drops significantly,” 5 June 2024,
    reporting a fall from approximately 2.9 GH/s to 1.78 GH/s and presenting botnet disruption as the likely explanation.
    For additional Ryo-focused analysis, see
    “The Hidden Cost of Botnets: Monero, Mining Algorithms, and the Rise of Ryo Currency”.
    Neither Europol nor the contemporaneous hashrate report established that one identified botnet controlled the entire decline.
  22. Electric Coin Company, “Why Equihash?”, 15 April 2016,
    explaining the original expectation that Equihash would resist cost-effective ASICs.
    See also the Zcash Foundation’s
    May 2018 discussion following the announcement of Bitmain’s Equihash ASIC,
    its
    July 2018 governance results,
    and Electric Coin Company’s
    November 2018 mining strategy update.
  23. Ryo Currency, “Why RYO?”
    Official description of Ryo’s GPU-oriented mining design.
    For the limits of the term “botnet-resistant,” see Microsoft Threat Intelligence, “Cryptojacking: Understanding and defending against cloud compute resource abuse,” 25 July 2023,
    documenting the abuse of both CPU and GPU cloud resources for unauthorised mining.

Further Reading From ryo.news

This article is part of the broader ryo.news intellectual project examining monetary fragmentation, digital sovereignty and the institutional architecture of network states.


This is Article 2 of the eight-part “Building the Network State” series.

Article 1:
Imagined Communities 2.0: How Digital Networks Are Reshaping National Identity

Article 3:
The Anatomy of a Network State — forthcoming.


Editorial note: This article examines monetary and governance architecture. It is not financial or investment advice. Roadmap features describe officially stated development objectives and should be distinguished from capabilities currently deployed on the Ryo network.

Chinese surveillance and monitored payment networks face an encrypted blue privacy network across a strategic shipping corridor.

China · Capital Controls · Privacy Coins · Neutral Money

Private From Washington, Visible to Beijing: China, Privacy Coins and Financial Sovereignty

China is building digital money that can move beyond Washington’s financial reach without moving beyond Beijing’s control. That contradiction reveals a wider monetary paradox: the more completely a state controls its currency, the less neutral that currency becomes to everyone else. In a fragmenting world, the search is no longer only for another sovereign currency. It is for money that no sovereign can privilege itself within.

China is not retreating from digital money. It is drawing a harder boundary around who may issue it, who may supervise it and who may move it beyond the state’s view.

In February 2026, the People’s Bank of China and seven other authorities reinforced the country’s prohibition on virtual-currency business, classified related commercial activity as illegal financial activity and prohibited unauthorized offshore issuance of yuan-linked stablecoins. At the same time, the authorities distinguished prohibited private currencies from state-approved tokenization and continued expanding the digital yuan, or e-CNY.[1]

China’s state-backed digital-currency infrastructure is no longer a minor experiment, although it has not displaced the country’s established retail-payment networks. By the end of September 2025, official figures placed cumulative e-CNY activity at 14.2 trillion yuan across 3.32 billion transactions and 225 million personal wallets. Reuters reported in May 2026 that the latest official data, measured as of November 2025, placed cumulative activity at approximately 16.7 trillion yuan. By comparison, China’s UnionPay network processed 279 trillion yuan in card transactions during 2025 alone.[2]

China is simultaneously developing payment infrastructure intended to reduce exposure to dollar-based correspondent banking, foreign sanctions and political pressure from the United States. Yet its domestic monetary design is built around legal identity, regulatory access, transaction limits and the preservation of state control over capital movement.

China’s preferred monetary system is private from foreign adversaries, selectively private from commercial platforms and ultimately visible to the Chinese state.

Privacy coins offer a fundamentally different arrangement. They do not merely move visibility from one government to another. They attempt to remove the assumption that any government, corporation or privileged institutional observer should automatically receive the complete financial graph.

The conflict is therefore not simply between China and cryptocurrency.

It is a conflict between sovereignty over money and sovereignty within money.

This article develops that distinction into a broader framework: the sovereignty–neutrality frontier. A currency becomes more useful to its issuing state as identity, programmability, capital controls and supervisory access become stronger. The same features can make it less trustworthy to foreign states, companies and communities that do not want the issuer to retain a unilateral advantage.

The reverse is also true. Money becomes more neutral as no participant can freeze it, rewrite its issuance, inspect every payment or grant itself superior access. But a system that offers that neutrality necessarily limits the power of every state—including the state that hopes to use it against its rivals.

That is China’s dilemma. It is also the defining monetary problem of the emerging multipolar order.

Conceptual continuity: This article extends the ryo.news framework developed across The End of Free-Floating Fiat, God, State, and Network, When Institutions Fail, and Imagined Communities 2.0.

I. The State Leviathan Perfected

China’s cryptocurrency restrictions are sometimes described as evidence that the country rejected blockchain technology. That interpretation is incorrect.

In October 2019, Xi Jinping told a study session of the Chinese Communist Party’s Politburo that blockchain should be treated as an important breakthrough in indigenous technological innovation. He identified applications spanning digital finance, supply chains, industrial systems and public services.[3]

The state’s objection was never that distributed ledgers were technologically useless. The objection was that public cryptocurrency networks could create monetary issuance, asset markets, information channels and capital flows outside authorized institutions.

Chen Chun, a member of the Chinese Academy of Engineering and director of Zhejiang University’s Blockchain Research Center, articulated this distinction through his work on consortium blockchains and blockchain supervision. Chen argued that regulatory technology should develop alongside blockchain technology, including node tracking, visualization, penetrating supervision and active detection of activity on public chains.[4]

Cai Weide, formerly a professor at Beihang University and a researcher on blockchain-based financial infrastructure, developed the principle further at the system-design level. Cai and his co-authors proposed dual-chain architectures separating account information from transaction activity. Related patents attributed to Cai describe automated regulatory systems that store financial transaction records on blockchains, apply configurable rules and generate supervisory reports by reading ledger data in real time. The regulatory engine can operate beside the blockchain or execute through on-chain smart contracts.[5]

The significance is not that Cai designed a privacy coin with a concealed government master key. It is that supervision becomes a native function of the financial architecture rather than an investigation conducted only after suspicious activity has occurred.

Wang Yongli, a former vice-president of the Bank of China, has expressed the monetary principle beneath this design. Wang argues that modern money rests on sovereign law and national credit, and that decentralized digital assets cannot simply replace the state-issued unit around which taxation, accounting, debt and economic policy are organized.[6]

This fits a conceptual lens developed in God, State, and Network. Money has historically been enforced by the dominant organizing power of its era:

  • God and tradition: precious-metal money reinforced by moral belief, custom and inherited legitimacy.
  • The State: fiat currency enforced through taxation, law, banking regulation and ultimately territorial power.
  • The Network: digital scarcity and transaction rules enforced through distributed computation and cryptography.

The digital yuan is the State Leviathan perfected. It does not merely digitize fiat money. It allows code to reinforce the state’s control over identity, circulation, policy implementation and financial information.

Privacy coins represent the opposing direction of the Network Leviathan. Their purpose is not to make sovereign administration more precise. It is to make certain monetary guarantees independent of sovereign discretion.

Monetary architecture Source of authority Primary advantage Primary vulnerability
Digital yuan Chinese sovereign law, central-bank issuance and authorized operators Policy integration, domestic settlement, controlled anonymity and enforceable capital rules Foreign users remain exposed to Chinese policy and supervisory privilege
Permissioned institutional blockchain Approved consortium members and embedded regulatory rules Efficient coordination with identifiable participants and auditable activity Participation and visibility depend on institutional permission
Transparent decentralized cryptocurrency Open protocol and distributed consensus Issuer independence and censorship resistance Permanent public transaction intelligence
Privacy-by-default cryptocurrency Open protocol, cryptography and distributed consensus Issuer neutrality, fungibility and protection from universal transaction surveillance Lower institutional liquidity, regulatory pressure and greater difficulty enforcing comprehensive capital controls
The digital yuan and a privacy coin are not merely different payment technologies. They encode opposing answers to the question of where ultimate monetary authority should reside.

II. Privacy With a Ceiling

This political architecture finds its technical expression in the concept of controllable anonymity, sometimes translated as managed anonymity.

Yao Qian, the former director of the People’s Bank of China’s Digital Currency Research Institute, was one of the principal architects of China’s early central-bank digital-currency research. His work described a system in which privacy could exist between ordinary participants while authorized state institutions retained the ability to identify parties and trace transactions under defined conditions.[9]

The objective was to preserve selected cash-like properties without allowing digital currency to become an uncontrolled channel for corruption, money laundering, tax evasion, gambling or capital flight.

The People’s Bank of China later formalized the principle as anonymity for lower-value activity and legal traceability for higher-value transactions. Its model combines tiered wallets, varying identification requirements, transaction limits and risk-monitoring capabilities.[10]

The e-CNY is not designed as a public ledger on which every citizen can examine every payment. China argues that it can reduce the personal information exposed to merchants, payment platforms and unrelated commercial intermediaries.

This can be a genuine privacy benefit. A merchant should not automatically receive a customer’s complete identity profile merely because it processes a small retail purchase.

But controllable anonymity separates privacy into different relationships:

Form of privacy Protection from whom? Position within the e-CNY model
Horizontal privacy Merchants, counterparties and unrelated private actors Partially supported through data minimization and tiered wallets
Platform privacy Payment companies and commercial data aggregators Potentially strengthened by reducing the information held by private platforms
Foreign-state privacy Foreign governments, sanctions authorities and external intelligence systems A strategic objective of sovereign Chinese payment infrastructure
Vertical privacy The issuing state and authorized supervisory institutions Conditional rather than absolute

In summary: controllable anonymity promises horizontal privacy—protection from peers and platforms—while preserving vertical visibility for the state. This is a coherent design for domestic monetary governance, but it is not neutral money. Neutrality requires that no participant, including the state, possess a unilateral advantage.

China does not demand that every participant see every transaction. It demands that the state preserve a lawful path to visibility.

Privacy is therefore not an unconditional property of the currency. It is a limited status that can end when transaction value, wallet tier, risk analysis or legal authority activates greater scrutiny.

Controllable anonymity does not ask whether a transaction is private. It asks who possesses the authority to terminate that privacy.

A system in which privacy can be terminated by a sovereign authority is only as protective as that authority’s present rules, future intentions and institutional restraints. Those conditions can change while the accumulated financial record remains.

Controllable anonymity may protect users from merchants and private platforms without creating neutral money. Neutrality requires that no participant possess a unilateral technical privilege unavailable to every other participant.

III. The Reverse Sovereignty Stack

Balaji Srinivasan’s theory of the network state begins from the opposite political direction.

Balaji defines a network state as an aligned online community capable of collective action that eventually acquires territory and diplomatic recognition. His broader model includes an integrated cryptocurrency, a collectively governed treasury, an on-chain census and a social structure that begins online before acquiring a physical footprint.[7]

Traditional states begin with territory and organize the people located within it. A network state begins with people and attempts to organize territory around them.

As developed in Imagined Communities 2.0, the network-state stack can be represented as:

Identity → Capital → Coordination → Territory → Recognition

A community first develops a shared narrative and membership. It then requires capital that cannot be casually frozen by an external institution. Capital enables coordination. Coordination creates durable institutions. Those institutions may eventually acquire territory and recognition.

China’s state network builds the stack in reverse.

Network-state construction China’s state-network construction
Identity: a voluntary community forms around a shared narrative. Territory and recognition: an existing sovereign state begins with internationally recognized authority.
Capital: the community adopts a network-native treasury asset. Authority: law determines the permitted institutions and payment infrastructure.
Coordination: digital institutions organize collective action. Identity: wallets and legal persons are integrated into the state’s administrative system.
Territory: the network acquires physical locations or an archipelago. Capital: the digital currency encodes monetary policy and capital controls.
Recognition: established states acknowledge the new polity. Coordination: code extends state administration into commerce and cross-border settlement.

The network state builds sovereignty upward from identity and capital. China projects sovereignty downward from territory and law into identity and capital.

That difference explains why privacy-preserving money occupies such an important position in the network-state model. A digital community cannot claim meaningful exit if its treasury can be frozen by the institutions it seeks to exit or if every internal relationship remains visible to political rivals.

In 1998, cryptographer Wei Dai proposed b-money, a system through which pseudonymous participants could exchange value and enforce contracts without relying on conventional government institutions.[8]

What was once a thought experiment is now a functioning financial category. Open monetary networks settle value across borders, survive the prohibition of individual governments and provide the capital layer around which digital communities can organize.

This is the source of what ryo.news has called sovereign gravity:

Sovereign gravity is the tendency of credible, difficult-to-seize capital to attract not only savings and commerce, but infrastructure, membership and eventually governance.

A sovereign currency creates gravity inside the jurisdiction of its issuer. Neutral network money can create gravity across jurisdictions because participation does not require political trust in the issuer.

IV. Capital Controls as a Monetary Perimeter

China’s position on privacy coins cannot be understood without its capital controls.

China permits international payments connected to legitimate trade and other current-account activity, but controls continue to apply to much of the capital account. Residents’ overseas investments, foreign participation in domestic markets, currency conversion and cross-border transfers remain subject to regulated channels and administrative limits.[11]

These restrictions serve several purposes:

  • Limiting sudden and destabilizing capital flight.
  • Protecting foreign-exchange reserves.
  • Reducing pressure on the renminbi during periods of uncertainty.
  • Preserving greater autonomy over domestic interest rates and liquidity.
  • Preventing uncontrolled substitution into foreign currencies.
  • Maintaining state knowledge of large cross-border financial movements.

Capital controls are part of China’s macroeconomic defence system. They can insulate domestic monetary policy from external shocks, but they also limit the international attractiveness of the renminbi because foreign holders may remain uncertain about convertibility, liquidity and the ability to move funds freely.

The restrictions create an incentive to search for alternative exits.

A 2026 working paper by Maggie Hu, Adrian Lee and Tālis Putniņš used blockchain and market data to estimate that capital flight accounted for more than one-quarter of Chinese Bitcoin exchange volume during the period studied. The researchers found that activity increased during periods of greater economic-policy uncertainty and produced a Bitcoin premium against the renminbi.[12]

Bitcoin can facilitate capital movement, but its public ledger creates investigative opportunities. Once an address is connected to an exchange, device, business or real-world identity, related transactions can be clustered and followed.

Centralized stablecoins provide another path. They can move rapidly across borders, but issuers may freeze addresses, enforce blacklists and cooperate with regulators. Stablecoins also pass through centralized exchanges where identification and transaction records may be obtained.

Privacy coins reduce both forms of control.

When sender information, recipient information and transaction amounts are concealed at the protocol level, an observer may be unable to reconstruct capital movement merely by examining the blockchain. When conversion also occurs through peer-to-peer or decentralized markets, the state’s ability to identify the entry and exit points weakens further.

This does not make privacy coins perfectly invisible. Exchange records, compromised devices, counterparties, network metadata and user mistakes can still reveal information.

But they change the economics of surveillance.

Instead of receiving a permanent public transaction graph and attempting to identify its participants, an investigator may need to acquire information from endpoints, infiltrate services, correlate network traffic or compel disclosure from individual users.

For China, the problem with privacy coins is not only that they can move capital. It is that they can move capital without generating the standardized evidence required to preserve an effective capital-control system.

The balance is dynamic rather than fixed. Improvements in zero-knowledge proofs, decentralized exchange infrastructure and network-layer anonymity reduce the information exposed by each stage of a transaction. States can respond through gateways, endpoint investigations and stronger enforcement, but those measures operate around the protocol rather than restoring a universal view inside it.

This creates an asymmetry. A capital-control system must identify a sufficiently large proportion of unauthorized flows to remain credible. A private monetary system does not need to defeat every investigation. It needs only to make comprehensive monitoring technically and economically impractical.

China’s broader doctrine of cyber sovereignty follows the same logic. Fang Binxing and Chinese policy documents treat networks, data and digital infrastructure as domains of national authority.[13][14] A public blockchain challenges exclusive administration. A privacy coin challenges both administration and automatic visibility.

V. Who Holds the View Key?

Almost every modern digital-currency system uses cryptography. The decisive difference is not whether encryption exists.

It is whether privacy is optional or mandatory, whether disclosure makes the underlying transaction public, and who possesses the authority to reveal financial information.

In the e-CNY model, the state defines the institutional hierarchy through which transaction information can be obtained. Privacy may exist between ordinary participants, but authorized state access remains a system requirement.

Bitcoin removes the central issuer but publishes its transaction graph. Anyone can inspect the movement of funds, while specialized analytics can attempt to connect addresses and transaction clusters to real-world actors.

Zcash supports transparent and shielded transaction environments. Transparent addresses expose transaction information publicly in a manner comparable to Bitcoin. Shielded addresses use zero-knowledge proofs to conceal the sender, recipient and amount.

Zcash therefore offers optional privacy at the protocol level. The practical default depends on the wallet, exchange and address type. Some wallets support or encourage shielded activity by default, while transparent addresses remain part of the protocol. Users of shielded Zcash can share viewing keys, and Zcash has documented a draft payment-disclosure mechanism for proving details of a specific payment.[15]

Privacy Pools, proposed by Vitalik Buterin, Ameen Soleimani and their co-authors, explore whether users can prove that funds do not originate from a designated prohibited set without exposing their complete transaction histories.[16]

Monero applies privacy protections across ordinary transactions by default. Its protocol uses ring signatures, stealth addresses and Ring Confidential Transactions to conceal the sender, recipient and amount, although exchange records, endpoint information, network observation and user mistakes can still expose information.[17]

Ryo Currency also applies privacy by default, but its disclosure model differs from Zcash’s dual transparent-and-shielded structure. Ordinary Ryo transactions conceal origins, destinations and amounts. A user can create a view-only wallet to disclose incoming activity without surrendering spending authority and can use transaction, spend or reserve proofs for defined verification purposes.[31][33]

This is better described as optional disclosure than optional transparency. The underlying transaction does not become part of a permanently public transaction class. The user supplies the cryptographic information required to reveal or prove a defined fact.

System Privacy model Default visibility Disclosure or audit mechanism Neutrality implications
Digital yuan Controllable anonymity within a state-authorized system Limited visibility to ordinary counterparties; institutional traceability preserved Authorized operators and state institutions obtain information under system rules and law Sovereign and efficient, but not neutral between the state and other participants
Bitcoin Public pseudonymous ledger Addresses, amounts and transaction relationships are publicly visible No special disclosure is required because the ledger is already public Issuer-neutral, but strategic activity remains globally observable
Centralized stablecoin Usually public-chain settlement with centralized asset administration On-chain activity is normally publicly visible Issuers and regulated gateways may connect identities to transactions or act on funds Liquid and convenient, but exposed to issuer, jurisdiction and freezing risk
Zcash Dual transparent-and-shielded architecture Depends on address and wallet use; transparent activity is public, shielded activity is concealed Viewing keys and draft payment-disclosure mechanisms for shielded activity Can provide strong neutrality when shielding is used, but privacy is not universal across the protocol
Privacy Pools Private activity combined with proof-based association-set compliance Transaction details remain concealed User proves selected properties without disclosing the complete history Shows that privacy and rule-based verification need not require a universal observer
Monero Privacy by default Origins, destinations and amounts are concealed across ordinary transactions Targeted auditability depends on viewing information, wallet records and endpoint evidence Strong protocol-level fungibility; institutional liquidity and compliance integration remain constraints
Ryo Currency Privacy by default with selective disclosure Origins, destinations and amounts are concealed; there is no equivalent transparent transaction pool View-only wallets, transaction proofs, spend proofs and reserve proofs Strong alignment with confidential bearer money, but reserve-scale liquidity and infrastructure are not yet present

The Chinese model places the power to reveal within the sovereign legal hierarchy.

Zcash allows value to move through either a transparent or shielded structure. For shielded activity, the holder can provide selected viewing access without giving away spending authority.

Ryo reverses the default. The transaction remains private unless the user deliberately supplies viewing information or cryptographic proof for a defined purpose.

Rejecting universal privileged access therefore does not mean rejecting auditing or accountability in every form. A business can maintain a view-only wallet. A sender can prove that a transaction occurred. A reserve holder can prove a defined balance. A zero-knowledge system can prove that rules were satisfied without publishing the user’s complete financial history.

The decisive design question is not whether a currency can reveal information. It is whether every transaction begins visible, whether privacy must be actively chosen, and whether the state or the holder controls what is revealed.

The progression from public ledgers to optional shielding and then to privacy by default with selective disclosure can be understood as an evolution in digital bearer money.

Bitcoin demonstrated that ownership could be verified without a central issuer. Zcash demonstrated that validity could be verified without publicly exposing all of the information being verified. Privacy-by-default systems attempt to make that confidentiality the ordinary condition rather than a special transaction path.

This does not prove that one architecture will replace every other system. State currencies, transparent ledgers and regulated stablecoins each serve functions private currencies may not. But where fungibility, geopolitical neutrality and protection from economic intelligence are the principal requirements, default privacy is a more complete design than permanent public visibility.

VI. The Hard Trade-Off

The Strongest Case for State Visibility

A serious analysis should not dismiss China’s concerns as mere authoritarian hostility toward privacy.

Highly private digital money creates genuine enforcement problems. Governments investigate fraud, theft, corruption, sanctions evasion, terrorist financing, tax offences and organized crime through financial records. Transaction analysis can identify related accounts, locate stolen assets and reveal criminal networks.

A globally transferable privacy coin can also move more efficiently than physical cash. A private key can represent substantial value and cross a border without the monetary asset physically passing through a customs checkpoint.

China faces additional macroeconomic risks. Rapid capital flight could weaken the renminbi, accelerate reserve depletion, reduce liquidity within domestic financial institutions and force disruptive policy intervention. The expectation of depreciation can become self-reinforcing as residents attempt to move money abroad.

China can therefore make a rational state-security argument:

  • Money is a public institution whose integrity affects the entire economy.
  • Large anonymous capital flows can destabilize exchange-rate and banking systems.
  • The state cannot enforce financial law without access to relevant evidence.
  • Digital payments should protect users from commercial exploitation without creating immunity from targeted investigation.
  • A sovereign government should not allow private protocols to displace its monetary authority without public consent.

Nor are such concerns unique to China. The Financial Action Task Force requires jurisdictions to impose anti-money-laundering controls on virtual-asset service providers and identifies anonymity-enhancing technologies and peer-to-peer activity as areas of heightened risk. The European Union’s 2024 anti-money-laundering regulation restricts anonymous crypto accounts and services designed to increase transaction obfuscation.[18]

Democratic governments may provide stronger judicial review, political competition and legal protections than China, but they also seek identity-linked gateways, transaction records and investigative access.

The Strongest Case for Financial Privacy

The privacy argument begins from a different understanding of financial data.

A transaction history can reveal political donations, religious associations, medical treatment, journalistic sources, business relationships, travel patterns, personal networks and economic distress.

A complete payment history is not merely an accounting record. It is a map of a person’s life.

Privacy advocates therefore reject the assumption that the state should possess universal financial visibility merely because targeted investigations are sometimes legitimate. They distinguish disclosure after due process from surveillance by design.

A conventional investigation begins with a suspected offence and seeks relevant evidence. A universally traceable digital-currency system can reverse that order by collecting the complete financial graph first and determining its future uses later.

David Chaum and his co-authors have demonstrated that a central bank could theoretically issue digital currency while using cryptography to protect transaction privacy.[19] Geoffrey Goodell, Hazem Al-Nakib and Paolo Tasca have similarly proposed a regulated digital-currency architecture using non-custodial wallets and privacy-enhancing cryptography.[20]

Alex Gladstein of the Human Rights Foundation extends the argument from design to political consequence. His work describes how banking access, account freezing and payment surveillance can be used against activists, journalists and civil-society organizations.[21]

Bitcoin offers censorship resistance and self-custody, but its public ledger remains traceable. Privacy-coin advocates argue that censorship resistance is incomplete when an adversary can map donors, counterparties and organizational activity.

There is also a narrower monetary argument that does not depend exclusively on human-rights commitments.

Money that can be frozen by an issuer contains counterparty risk. Money whose complete history is public exposes its holder to commercial, political and sanctions risk. Money whose transfer depends on another state’s infrastructure cannot be completely neutral between geopolitical blocs.

Privacy is not merely a civil liberty attached to money. In a fragmented international system, it can become a component of monetary neutrality.

This does not make every privacy coin a suitable reserve asset. Reserve managers require deep liquidity, reliable custody, operational resilience, legal authority, price stability and the ability to mobilize assets during a crisis. Privacy coins presently satisfy some elements of neutrality more convincingly than they satisfy conventional reserve-management requirements.

VII. Russia and Iran: Who Receives Sovereign Privacy?

The contradiction becomes geopolitical when China’s strategic partners seek protection from Western financial power.

Russia and Iran have both faced extensive sanctions, restrictions on banking access and pressure on their ability to settle international trade. Both have incentives to develop financial channels that are harder for the United States and its allies to interrupt.

But “using cryptocurrency” can describe several politically different systems.

Level of use Primary objective Most valuable properties Why the state may support or resist it
State and strategic settlement Oil exports, reserve movement, sanctions resistance and official cross-border trade Liquidity, reliable counterparties, large transaction capacity and protection from foreign seizure The state may support alternative settlement while requiring domestic auditability and approved gateways
Business and institutional use Supplier payments, shipping, insurance, procurement and settlement beyond conventional banks Commercial confidentiality, fungibility and censorship resistance Businesses benefit from privacy, while governments demand reporting and control at conversion points
Citizen use Savings protection, remittances, private commerce and movement beyond capital restrictions Self-custody, accessibility, privacy and resistance to account freezing The same properties that protect citizens from foreign pressure can protect them from their own government

Russia’s Progression From Transparent Crypto to the Privacy Question

Russia changed its legal framework in 2024 to permit experimental cryptocurrency use in international settlements. In December 2024, the Russian finance minister confirmed that companies had begun using Bitcoin and other digital assets in foreign trade.[22]

Reuters later reported that cryptocurrency had been used in parts of Russia’s oil trade with China and India. Intermediaries converted local-currency payments into digital assets and then into the currency ultimately required by the Russian exporter.[23]

Transparent cryptocurrencies can work in this role because they possess global liquidity and can move beyond conventional correspondent banks. But they do not provide financial confidentiality.

Once an address is attributed to an oil company, trading intermediary, bank or state-linked institution, an external observer may be able to examine transaction timing, balances, related addresses and movement between counterparties. A public blockchain can remove the banking intermediary while creating a permanent source of economic intelligence.

Centralized stablecoins introduce another vulnerability. After Tether froze Russia-linked USDT associated with the sanctioned Garantex exchange, a Russian Finance Ministry official argued that Russia should develop domestic stablecoins linked to currencies other than the dollar.[24]

A domestic stablecoin could remove dependence on a foreign issuer. It would not necessarily solve transaction visibility. If it circulates on a transparent ledger, foreign analytics firms and intelligence services may still reconstruct relevant financial relationships.

This creates a logical case for privacy-preserving settlement at the business or state level. It could conceal commodity buyers, strategic procurement, shipping relationships, reserve movements and the routes through which funds are converted and repatriated.

Privacy coins would nevertheless create difficulties for the Russian state. They generally possess less institutional liquidity than Bitcoin or major stablecoins and are harder to integrate into conventional accounting and compliance systems. More importantly, a protocol that hides Russian trade from Washington can also hide Russian capital from Moscow.

Russia has a strategic reason to seek privacy for external settlement and a political reason to resist privacy that remains equally available to businesses, officials and citizens inside Russia.

Iran: Crypto Access Becomes Part of the Sanctions Battlefield

Iran has developed a substantial cryptocurrency economy under sanctions and severe pressure on the rial.

In April 2026, US Treasury Secretary Scott Bessent publicly described Iran’s access to cryptocurrency as one of the channels targeted through the Treasury Department’s Economic Fury campaign. In June, the US Treasury sanctioned Nobitex and three other Iranian digital-asset exchanges, alleging that the platforms had supported sanctions evasion and state-linked financial activity.[34][25]

Cryptocurrency is therefore no longer being treated as a marginal escape channel. Washington increasingly treats access to exchanges, stablecoins, wallets and digital-asset liquidity as part of the same sanctions battlefield as oil tankers, exchange houses and correspondent banks.

The campaign also demonstrates the limitations of transparent and centralized rails. Public blockchain activity can be followed, exchange infrastructure can be sanctioned and centralized issuers can be pressured to freeze identified assets.

At the same time, privacy coins are not merely theoretical or inaccessible inside Iran.

Monero is offered to Iranian users through at least three Iran-facing exchanges. Bit24 provides direct XMR purchase and sale services, OK Exchange maintains a Monero market and Tabdeal lists XMR among its available cryptocurrencies.[35]

This does not establish that the Iranian government, the Central Bank of Iran or the Islamic Revolutionary Guard Corps uses Monero.

It establishes something different: domestic infrastructure through which citizens and businesses can acquire a privacy-by-default currency already exists.

For the Iranian state, cryptocurrency can protect sanctioned commerce from foreign pressure. For an Iranian citizen, Monero can protect savings and counterparties from both foreign surveillance and domestic observation.

The state may welcome the first use while fearing the second.

Iran’s access to cryptocurrency is targeted from outside because it can weaken sanctions. Privacy coins create an additional problem for Tehran because they can also weaken the state’s visibility inside Iran.

The Strait of Hormuz and the Zcash Signal

The Strait of Hormuz demonstrates how quickly the difference between cryptocurrency and private cryptocurrency can become strategically relevant.

During the 2026 conflict, reports indicated that Iran and IRGC-linked intermediaries were demanding or negotiating payments for vessel passage through the strait. Reported mechanisms included Chinese yuan, stablecoins and Bitcoin. The US Treasury later warned that passage payments made in fiat currency, digital assets, swaps or other forms could create sanctions exposure.[36]

Ryo.news followed the development through The Yuan Ultimatum and Strait of Crypto.[37]

Zcash rose sharply during ceasefire and Hormuz-payment speculation. Market discussion connected the rally with the possibility that privacy-preserving assets could become useful for strategic shipping payments. Contemporary market analysis also linked the move to broader risk sentiment and renewed demand for privacy coins rather than to a confirmed Zcash-specific adoption event.[38]

No reliable evidence established that Iran accepted ZEC for passage. The strongest public reporting identified yuan, stablecoins or Bitcoin. Iran’s central bank later claimed that toll payments had been made in cash rather than cryptocurrency, contradicting some earlier reports.[39]

The ZEC rally should therefore be treated as a market signal, not evidence of state adoption.

Its relevance lies in what the market recognized:

  • A yuan payment remains visible to participating banks and governments.
  • A stablecoin payment can be traced and potentially frozen by its issuer.
  • A Bitcoin payment can be followed across a permanent public ledger.
  • A properly shielded private payment can conceal the commercial relationship itself.

For a shipping company, privacy could protect cargo information, insurance arrangements, counterparties and negotiated transit terms. For Iran, it could conceal revenue and weaken sanctions analysis. For a ship owner or flag state, it could complicate auditing and proof of compliance.

The Strait of Hormuz revealed the strategic logic of privacy coins even without proving that one was used.

The Protocol Does Not Check Passports

China, Russia and Iran may attempt to reserve strong financial privacy for approved companies, state institutions and strategic trade while preventing citizens from using the same systems independently.

Regulated gateways can partially enforce that distinction. Governments can license exchanges, identify corporate wallet holders, require internal accounting records and demand transaction proofs or viewing information.

But the protocol itself cannot reliably distinguish a state-owned exporter from a private business, journalist or citizen moving savings abroad.

A system private enough to frustrate American transaction analysis is capable of frustrating Chinese, Russian or Iranian analysis. A zero-knowledge proof does not alter its privacy properties according to the nationality or political status of the person generating it.

The protocol does not grant privacy according to geopolitical rank. States can regulate access, but they cannot make neutral cryptography loyal to one sovereign.

This is why privacy coins can become more valuable to sanctioned states and more threatening to their domestic systems at the same time. Their strategic utility and political danger arise from the same neutrality.

VIII. China’s Sovereignty Trilemma

China’s international monetary strategy must reconcile three objectives that cannot be fully maximized at the same time.

Objective One: Reduce Foreign Financial Leverage

China benefits from payment channels that reduce dependence on dollar clearing, Western correspondent banks and infrastructure exposed to American sanctions.

In June 2025, People’s Bank of China Governor Pan Gongsheng called for a more multipolar international monetary system and announced the creation of an international e-CNY operations centre in Shanghai.[26]

Objective Two: Internationalize Chinese Monetary Infrastructure

The renminbi’s role in international trade has grown, but restrictions on foreign participation, resident investment abroad, offshore liquidity and convertibility continue to constrain broader adoption.[11]

China is attempting to overcome part of this limitation through payment infrastructure.

Project mBridge began as a collaboration among the BIS Innovation Hub, the People’s Bank of China’s Digital Currency Institute, the Hong Kong Monetary Authority, the Bank of Thailand and the Central Bank of the United Arab Emirates. It was designed as a shared multi-CBDC platform through which central and commercial banks could conduct direct cross-border settlement.[27]

The BIS withdrew from the project in late 2024, after which participating central banks continued its development. By January 2026, cumulative mBridge transactions had surpassed US$55 billion, with the e-CNY accounting for approximately 95% of reported volume.[28]

China’s e-CNY international operations centre, launched in Shanghai in September 2025, added cross-border payment, blockchain-service and digital-asset platforms intended to advance international cooperation and interoperability.[29]

Objective Three: Preserve Domestic Monetary Control

China must simultaneously enforce capital controls, manage bank liquidity, prevent uncontrolled currency substitution and maintain the renminbi’s role as the domestic unit of account.

A system that allows money to leave the country privately and permissionlessly weakens each objective.

Chinese objective Preferred infrastructure Why privacy coins create tension
Protection from foreign sanctions State-controlled cross-border settlement, e-CNY and mBridge Privacy coins can provide stronger sanctions resistance, but the state cannot control who else uses them
Renminbi internationalization Digital-yuan platforms, regulated banks and approved trade corridors Independent private currencies compete with national units rather than expanding the renminbi
Capital-control enforcement Identity-linked wallets, regulated exchanges and traceable transfers Private transaction graphs make unauthorized capital movement harder to identify
Domestic financial stability Centralized policy and observable systemic flows Permissionless assets can accelerate currency substitution and capital flight
Information sovereignty Financial data protected from foreign powers but available to Chinese authorities Privacy coins deny privileged visibility to both foreign and domestic authorities
China seeks cross-border opacity from rival powers combined with domestic visibility for the sovereign state. Privacy coins offer opacity from both.

China’s preferred answer is therefore not anonymous international money. It is a state-governed international network in which participating governments replace foreign intermediaries without surrendering their own supervisory access.

The stability of that answer depends on participating states agreeing about who may observe, censor and reverse transactions.

China can construct corridors with Russia, Iran and other partners, but each state enters those corridors with different sanctions exposure, capital controls and security priorities. Western governments are unlikely to join infrastructure designed partly to reduce their financial leverage. Private commodity traders, shipping companies and manufacturers will continue comparing systems according to cost, liquidity, speed and confidentiality.

A state-governed network can become an important alternative without becoming universally neutral.

IX. The Sovereignty–Neutrality Frontier

China’s predicament is not unique. It reveals a structural tension at the centre of digital money.

The stronger the sovereign controls embedded in a currency, the more useful that currency becomes to the issuing state. Programmability can enforce policy. Identity can reduce fraud. Transaction limits can support capital controls. Supervisory access can assist investigations.

But the same properties reduce the currency’s neutrality to outsiders.

A foreign government knows that access may be restricted after a diplomatic rupture. A company knows that payments may be inspected or reversed. A reserve manager knows that the issuer can change rules. A dissident knows that privacy exists at the discretion of an authority whose future conduct cannot be guaranteed.

Conversely, an asset becomes more neutral as no participant can grant itself special powers. Gold is not the liability of another state. Bitcoin has no issuer capable of changing its maximum supply or freezing an address. Privacy coins extend the principle by reducing the informational advantage available to every state.

Neutrality is not binary. It is a frontier along which monetary systems trade sovereign control against equal treatment.

Asset or system Sovereign control Issuer neutrality Transaction confidentiality Current institutional readiness
Digital yuan Very high Low for foreign users because China retains policy privilege Limited user privacy with preserved sovereign traceability High inside approved Chinese and partner infrastructure
Dollar stablecoin Shared among dollar policy, private issuer and regulatory jurisdiction Low Normally low on public ledgers High market liquidity, but issuer and sanctions exposure remain
Gold Low when held directly High Holdings and transfers can be private outside custodial systems Deep reserve tradition, but physical transfer and mobilization are costly
Bitcoin Low at protocol level High Low because the ledger is public Growing institutional infrastructure and liquidity
Privacy coin Low at protocol level Potentially high High when privacy is correctly implemented and used Currently limited by liquidity, custody, legal access and volatility
The more completely a CBDC expresses the sovereignty of its issuer, the less completely it can function as neutral money between sovereigns.

This is the global monetary paradox.

A multipolar world can build multiple sovereign payment blocs. It cannot eliminate the need for a bridge between parties that do not fully trust one another.

That bridge must either be governed by a negotiated institution—or embodied in an asset whose rules do not privilege any participant.

X. The Strange Convergence: Central Banks and Network States

The most unexpected implication is that central banks and network states—institutions at opposite ends of the political spectrum—can converge on similar monetary requirements.

A sanctioned central bank wants reserves that cannot be frozen by a rival government. A network state wants a treasury that cannot be frozen by the territorial state it is attempting to exit.

A state-owned exporter wants strategic trade hidden from foreign intelligence. A digital community wants donors, salaries and internal relationships hidden from political adversaries.

A reserve manager wants an asset that remains usable when custodial relationships fail. A network polity wants capital that remains usable when platforms de-bank it.

Requirement Why a central bank may want it Why a network state may want it
No foreign issuer Reduces sanctions and counterparty exposure Prevents dependence on an external sovereign or corporation
No issuer-level freeze Keeps strategic reserves usable during conflict Keeps the community treasury usable during political exclusion
Confidential settlement Protects reserves, procurement and trade counterparties Protects membership, salaries, donations and internal coordination
Selective auditability Allows internal controls without global disclosure Allows treasury accountability without exposing the entire community
Global transferability Enables settlement beyond correspondent banks Allows a geographically distributed community to transact

The political motivations are different. The central bank seeks to preserve state power. The network state seeks to construct power outside the existing state.

But the capital layer can converge.

This is where sovereign gravity becomes important. Credible, hard-to-seize capital attracts the infrastructure needed to hold, trade, lend, insure and govern it. As infrastructure deepens, the asset becomes more useful. As usefulness grows, the surrounding network gains institutional weight.

The sequence described in From Network Union to Network State depends on that gravity. Identity without capital remains a community. Capital without coordination remains a market. Capital that attracts coordination can become the foundation of a polity.

Central banks and network states do not agree on who should rule. They may nevertheless compete for the same kind of money: capital that remains usable when another sovereign says no.

XI. Could Privacy Coins Become Central-Bank Reserve Assets?

No publicly disclosed central-bank reserve portfolio identified in the sources reviewed includes Monero, Zcash, Ryo or another privacy coin.

The present evidence is more limited—but still significant.

In March 2025, the United States government established a Strategic Bitcoin Reserve capitalized primarily with forfeited bitcoin. This is a federal strategic holding rather than an asset held by the Federal Reserve, but it established the principle that a major government may retain decentralized digital assets for strategic purposes.[40]

In November 2025, the Czech National Bank created a US$1 million test portfolio containing Bitcoin, dollar stablecoins and a tokenized dollar deposit. The bank explicitly stated that the portfolio was experimental and did not form part of its international reserves. Its purpose was to build operational knowledge concerning custody, transactions, security and compliance.[41]

These cases do not demonstrate privacy-coin adoption. They show public institutions moving from theoretical discussion toward direct operational experience with decentralized digital assets.

What Reserve Managers Actually Require

Central-bank reserve managers traditionally balance safety, liquidity and return. Official reserves must remain controlled by and readily available to the monetary authority for foreign payments, intervention or emergency liquidity.[42]

Privacy coins possess several potential reserve-like properties:

Reserve characteristic Potential privacy-coin advantage Present limitation
Issuer neutrality No foreign central bank, corporation or sovereign borrower controls issuance Protocol governance, developer concentration and market structure still create dependencies
Protection from freezing No centralized issuer can blacklist or reissue the asset Exchanges, custodians and conversion points can still be sanctioned
Confidentiality Strategic balances, transfers and counterparties need not be public Reserve managers require secure internal audit and disclosure procedures
Fungibility Units do not carry an easily visible history that divides them into acceptable and unacceptable coins Institutions may still discriminate according to gateway, source or jurisdiction
Cross-border transferability Assets can move without correspondent banks or foreign custodians Market depth remains far below major sovereign currencies and gold
Self-custody A central bank can hold keys without relying on another state Key loss, insider compromise and succession procedures create new operational risks
Predictable issuance Foreign monetary policy cannot discretionarily expand the supply Price volatility complicates valuation and intervention use

The Digital-Gold Comparison

Gold is the closest established example of neutral reserve money.

Physical gold held domestically is not the liability of a foreign government or institution. It can protect against external reserve freezes. The trade-off is mobility: gold kept beyond foreign legal reach becomes harder to mobilize rapidly for international payments or currency intervention.[43]

A mature privacy-preserving digital asset could theoretically offer a different combination. It could be held directly, transferred internationally and settled without publicly revealing the balance, transaction or counterparty.

Today, however, privacy coins remain more volatile than established reserve assets, possess smaller markets, face legal restrictions and lack the custody, derivatives and institutional infrastructure required for large official portfolios.

The strongest reserve thesis is therefore not that central banks are about to replace dollars or gold with privacy coins.

It is that geopolitical fragmentation increases demand for an asset with the following combination:

  • No foreign sovereign issuer.
  • No centralized freezing authority.
  • No publicly visible reserve balance or settlement graph.
  • Strong fungibility.
  • Global digital transferability.
  • Selective disclosure for internal audit and proof.

Very few assets attempt to provide all six.

A Plausible Adoption Sequence

If privacy coins enter public-sector reserve management, adoption is unlikely to begin with large allocations in the liquid foreign-exchange tranche.

  1. Technical experimentation: central banks and finance ministries test custody, proofs, accounting and market access.
  2. Strategic government holdings: states retain seized or acquired assets as long-term stockpiles.
  3. State-linked settlement: approved companies use private assets for commodity, shipping or sanctions-sensitive trade.
  4. Emergency reserves: governments maintain small holdings outside foreign custody as insurance against exclusion.
  5. Investment-tranche allocation: a central bank or sovereign fund adds a limited position after liquidity and infrastructure improve.
  6. Broader reserve recognition: only after market depth, price resilience, custody standards and international convertibility become sufficient.
The reserve case for privacy coins does not begin with secrecy. It begins with neutrality: an asset that remains usable when political alliances, sanctions regimes and foreign custodial relationships fail.

China may resist this development more strongly than many states because privacy coins threaten its capital controls. Yet China also has one of the strongest strategic incentives to reduce dependence on assets and payment channels exposed to American authority.

That contradiction may eventually force Beijing—and other central banks—to distinguish between privacy coins as unrestricted domestic money and privacy-preserving decentralized assets as externally neutral strategic reserves.

XII. The Two-Layer Monetary Internet

The future monetary system is unlikely to produce a total victory for either state-controlled digital currencies or permissionless privacy coins.

It is more likely to divide into two interacting layers.

Layer Likely components Governing principle Probable sphere of strength
State-network layer CBDCs, regulated stablecoins, tokenized bank deposits, institutional wallets and cross-border central-bank platforms Monetary activity remains connected to sovereign law, licensed institutions and enforceable supervision Taxes, salaries, government disbursements, domestic retail payments and regulated banking
Permissionless privacy layer Privacy coins, zero-knowledge payment systems, decentralized exchanges, peer-to-peer settlement and network anonymity Users transact without granting a state or corporate intermediary universal visibility or veto power Sanctions-sensitive trade, capital preservation, confidential commerce and communities requiring political neutrality

The permissionless layer will not exist entirely beyond government reach. Users interact with devices, internet connections, exchanges, merchants and real-world counterparties.

Network observation can also undermine ledger privacy. Research has shown that peer-to-peer transaction broadcasts may expose IP-related and timing information, allowing observers to correlate blockchain activity with network origin.[30]

Governments can regulate commercial gateways, investigate endpoints and prosecute unlawful conduct.

But privacy systems can make universal financial surveillance technically, economically and legally more difficult.

The state-network layer will probably dominate domestic payments for the foreseeable future. The privacy layer becomes most valuable where the cost of political visibility is highest.

Its growth is not guaranteed. Liquidity, usability, legal access and infrastructure will determine which systems survive. But the demand it addresses is structural rather than ideological: counterparties who do not trust one another still require a way to settle.

Ryo Currency: A Prototype for Neutral Network Money

China’s controllable-anonymity model preserves a privileged observer inside the monetary system. Ryo Currency approaches privacy from the opposite direction: confidentiality is the normal condition, while disclosure occurs for a defined purpose.

Ryo currently applies privacy by default through Ring Confidential Transactions, stealth addresses, concealed amounts and a default ring size of 25. It supports view-only wallets and transaction, spend and reserve proofs. It launched without a premine or conventional ICO, while its Cryptonight-GPU design and extended emission were intended to keep distribution accessible through general-purpose graphics hardware.[31][33]

Its roadmap proposes moving from RingCT to Halo 2 zero-knowledge proofs. Ryo.news has also examined a planned high-latency mixnet intended to protect timing, IP relationships and transaction propagation at the network layer.[32]

These distinctions matter because a credible neutral asset requires more than a private ledger. It requires issuer neutrality, fungibility, selective auditability, broad distribution and protection from network-level observation.

Neutral-money requirement Ryo status Editorial assessment
No foreign issuer or issuer-level freeze Current Protocol issuance is not controlled by a state or stablecoin administrator
Privacy by default Current through RingCT architecture Ordinary transactions do not enter an optional transparent pool
Selective disclosure Current View-only wallets and cryptographic proofs support defined audit and verification needs
Broad-based distribution design Current design No premine or ICO and long GPU-oriented emission improve the entry path
Halo 2 zero-knowledge privacy Planned Removes trusted setup and opens development avenues and path to full quantum-resistance
High-latency mixnet Planned Would address metadata risks that ledger privacy alone cannot solve
Governance layer for network polities Planned A move to proof-of-stake consensus will allow for fully private DAOs
Reserve-scale liquidity and custody Not yet present Market depth, institutional custody, legal access and operational resilience require substantial development

Ryo should therefore not be described as an existing central-bank reserve asset or a completed network-state platform.

Its significance is architectural. It combines several properties that neutral digital money would require while making its present limitations visible rather than hiding them.

In the network-state stack, Ryo is intended to occupy the capital layer. In the Three Leviathans framework, it belongs to Network money. In the sovereignty–neutrality frontier, it represents an attempt to maximize protocol neutrality without abandoning targeted proof.

China’s model conceals information until sovereign authority requires access. Ryo’s design seeks to reveal only what is cryptographically necessary to prove validity. That difference separates state-controlled privacy from neutral network money.

Conclusion: Money That Privileges No Sovereign

China wants a monetary system capable of operating beyond Washington’s control.

It does not want a monetary system capable of operating beyond Beijing’s control.

The digital yuan resolves this distinction by creating limited privacy at the user level while retaining traceability within the sovereign institutional structure.

MBridge and the e-CNY’s international infrastructure extend the same logic across borders. They can reduce reliance on Western-controlled settlement without abandoning central-bank issuance, approved participation or national authority.

Russia and Iran reveal the attraction and the limit of that model. Both benefit from payment channels that are harder for the United States to interrupt. Neither government has shown an equivalent desire to make domestic financial activity invisible to itself.

Privacy coins refuse that division.

They do not provide one cryptographic standard for governments and another for citizens. The same protocol protects the exporter and the dissident, the central bank and the network community, the sanctioned state and the person escaping its capital controls.

That neutrality creates genuine regulatory problems. It can conceal criminal activity, capital flight and sanctions evasion. It can also protect commercial secrets, lawful association, strategic reserves and human autonomy.

The mistake is to treat this only as a conflict between privacy and law enforcement.

It is also a conflict between two architectures of sovereignty.

The state network begins with territory, recognition and law, then extends authority into identity, capital and coordination.

The network state begins with identity, capital and coordination, then attempts to acquire territory and recognition.

Both require money. Both require reserves. Both require settlement that remains functional when an adversary attempts to exclude them.

This is the strange convergence at the centre of the article.

The digital yuan is the State Leviathan perfected: money whose code strengthens sovereign power.

Privacy coins are an expression of the Network Leviathan: money whose code limits every sovereign’s privileged access.

No privacy coin presently has the liquidity, custody infrastructure, legal recognition or price stability required to displace major reserve assets. That limitation is decisive and should not be romanticized.

But reserve systems evolve when their political assumptions fail.

The freezing of sovereign reserves, sanctions against exchanges, the surveillance of public ledgers and the fragmentation of payment systems all increase the value of assets that are not liabilities of another state.

Gold supplied that neutrality to an earlier monetary order. Bitcoin supplied issuer independence to the first generation of decentralized digital money. Privacy-preserving systems add the missing property of confidential settlement.

Neutral money is not money that no state uses. It is money within which no state can grant itself a superior position.

China’s contradiction will not be resolved by choosing between the dollar and the yuan. It will be resolved by whether the emerging world of monetary blocs can function without a settlement asset outside every bloc.

The state-network layer will continue to process taxes, salaries, regulated banking and domestic commerce.

The permissionless privacy layer will grow wherever the cost of political visibility exceeds the value of sovereign supervision.

Its first large users may be citizens escaping unstable currencies, companies protecting counterparties and sanctioned states defending trade.

Its later users may include public institutions that once regarded privacy coins only as a threat.

That outcome is not inevitable. Privacy currencies must still solve liquidity, custody, governance, usability and institutional access. Projects that fail to build durable networks will remain marginal regardless of the quality of their cryptography.

But the direction of the monetary problem is now visible.

China is building money sovereign enough to resist Washington. The next monetary order may require money neutral enough to resist everyone.

References

  1. Reuters: China steps up cryptocurrency restrictions and prohibits unauthorized offshore yuan-linked stablecoins, February 6, 2026.
  2. State Council of the People’s Republic of China: Digital RMB transactions exceed 14.2 trillion yuan, October 29, 2025; see also Reuters: China broadens the digital yuan’s domestic and cross-border footprint, May 30, 2026.
  3. Xinhua and the Central Commission for Discipline Inspection: Xi Jinping calls for accelerated blockchain innovation, October 25, 2019.
  4. Chen Chun: Consortium-blockchain technology and the regulatory challenges of blockchain, 2019; see also First Financial interview on strengthening blockchain regulatory technology.
  5. Cai Weide, Yu Lian, Wang Rong, Liu Na and Deng Enyan: Blockchain Application Development Techniques, Journal of Software, 2017; see also Cai Weide: Real-Time Automated Regulatory Reporting System Based on Blockchain.
  6. Wang Yongli: The sovereign and legal foundations of modern credit money, February 26, 2026.
  7. Balaji Srinivasan: The Network State in One Sentence; see also On Network States.
  8. Wei Dai: B-Money, November 1998.
  9. Yao Qian: Central-bank digital-currency design and controllable anonymity, International Telecommunication Union, 2018.
  10. People’s Bank of China: E-CNY—Main Objectives, Guiding Principles and Inclusion Considerations, published by the Bank for International Settlements.
  11. International Monetary Fund: People’s Republic of China—2025 Article IV Consultation, Informational Annex, 2026; see also the full staff report.
  12. Maggie R. Hu, Adrian D. Lee and Tālis J. Putniņš: Evading Capital Controls via Cryptocurrencies—Evidence from China, working paper posted May 21, 2026.
  13. Fang Binxing, Peng Zou and Shibing Zhu: Research on Cyberspace Sovereignty, Chinese Academy of Engineering, 2016.
  14. Cyberspace Administration of China: Sovereignty in Cyberspace—Theory and Practice, Version 2.0, November 2020.
  15. Zcash: Private Shielded and Transparent Transactions; see also Zcash: The Difference Between Shielded and Transparent Zcash, ZIP 316: Unified Addresses and Unified Viewing Keys, and Draft ZIP 311: Zcash Payment Disclosures.
  16. Vitalik Buterin, Ameen Soleimani, Jacob Illum, Matthias Nadler and Fabian Schär: Blockchain Privacy and Regulatory Compliance—Towards a Practical Equilibrium.
  17. Monero: Privacy technologies and privacy by default; see also the Monero technical specifications.
  18. Financial Action Task Force: Updated Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers; see also Regulation (EU) 2024/1624, Article 79.
  19. David Chaum, Christian Grothoff and Thomas Moser: How to Issue a Central Bank Digital Currency.
  20. Geoffrey Goodell, Hazem Danny Al-Nakib and Paolo Tasca: A Digital Currency Architecture for Privacy and Owner-Custodianship.
  21. Alex Gladstein: Why Bitcoin Is Freedom Money, Journal of Democracy, October 2025.
  22. Reuters: Russia is using Bitcoin and other digital assets in foreign trade, December 25, 2024.
  23. Reuters: Russia uses cryptocurrency within parts of its oil trade with China and India, March 14, 2025.
  24. Reuters: Russian official calls for domestic stablecoins after Tether freezes Russia-linked wallets, April 16, 2025.
  25. US Department of the Treasury: Treasury sanctions Nobitex and other Iranian digital-asset exchanges, June 2, 2026.
  26. Reuters: China promotes the digital yuan within a multipolar international currency system, June 18, 2025.
  27. Bank for International Settlements: Project mBridge—Connecting Economies Through CBDC.
  28. Reuters: China-led cross-border digital-currency platform surpasses US$55 billion in transactions, January 16, 2026.
  29. State Council Information Office: China launches the international operations centre for the digital RMB, September 26, 2025.
  30. Alex Biryukov, Dmitry Khovratovich and Ivan Pustogarov: Deanonymisation of Clients in the Bitcoin P2P Network.
  31. Ryo Currency official website: Current privacy architecture, launch and roadmap; see also Cryptonight-GPU and Fair GPU Mining and the Ryo Currency source-code repository.
  32. Ryo.news: Enhancing Privacy With Halo 2 and a High-Latency Mixnet; see also Ryo Currency’s High-Latency Mixnet vs. Tor and VPNs.
  33. Ryo Wallet Atom: View-Only Wallet Support; see also the Ryo Wallet RPC API: Transaction, Spend and Reserve Proofs.
  34. Al Jazeera: How the United States and Iran Are Playing a Crypto Cat-and-Mouse Game Over Sanctions, April 29, 2026; see also the US Treasury action against Iranian digital-asset infrastructure.
  35. Bit24: Monero Purchase and Sale Services; OK Exchange: Monero Market; and Tabdeal: XMR Listed Among Tradable Proof-of-Work Cryptocurrencies.
  36. US Treasury OFAC FAQ 1249: Sanctions Risk of Payments for Passage Through the Strait of Hormuz.
  37. Ryo.news: Strait of Crypto—Ceasefire, the Silver-Oil Ratio and the Quiet Rise of Privacy Money, April 8, 2026.
  38. CoinMarketCap: Zcash market coverage during the Iran ceasefire, April 2026.
  39. Iran International: Iran’s Central Bank Says Hormuz Tolls Were Paid in Cash Rather Than Cryptocurrency, April 23, 2026.
  40. The White House: Establishment of the Strategic Bitcoin Reserve and United States Digital Asset Stockpile, March 6, 2025.
  41. Czech National Bank: First Test Portfolio of Digital Assets at the CNB, November 13, 2025; see also the CNB Digital Assets Pilot.
  42. Bank for International Settlements: Central-Bank Reserve Management and Services; see also the IMF Guidelines for Foreign Exchange Reserve Management.
  43. International Monetary Fund: Gold in Central Bank Reserves—Strategic Considerations, Market Risks and Practical Guidance, July 2026.