RingCT, short for Ring Confidential Transactions, is the Monero feature that hides how much is sent in a transaction. It lets the network confirm that a payment is valid, and that no coins were created out of thin air, without anyone being able to see the amount. It is the layer that keeps balances and payment sizes private.
Monero already hides who sent a payment and who received it. RingCT completes the picture by hiding the third piece, the amount, so a transaction reveals nothing useful to an outside observer.
To see why that third piece matters so much, it helps to start with what a visible amount would give away.
The problem: why hiding the amount matters
Hiding the sender and receiver is not enough on its own. If every payment's amount is visible, an observer can still learn a great deal: your balance, your income, how much a business takes in, and patterns that identify people even when names are hidden. A visible amount also weakens fungibility, since specific sums can be tracked.
On a transparent chain, the amount is simply part of the public record. Bitcoin, for example, records every transaction on a shared public ledger that anyone can read (source: Bitcoin project, how it works), and those records include the amounts, so payment sizes are open to analysis. Even if you never reveal your name, distinctive amounts act like fingerprints: a payment of an unusual, exact figure can be followed from one place to another, and a round number repeated on a schedule looks a lot like a salary. Amounts also let an analyst estimate wealth and cluster related activity, which is often enough to guess an identity without any name attached. Before RingCT, Monero was in a halfway state, hiding the sender and receiver but leaving amounts in the clear, which leaked more than it might seem. The generic question of what on-chain confidentiality tools do is covered in Bitcoin privacy tools; here the focus is Monero's answer. Hiding the amount closes the last obvious window into a transaction.
What RingCT is
RingCT, or Ring Confidential Transactions, is the mechanism that hides transaction amounts on Monero. It was added in January 2017 and made mandatory for every transaction in September 2017. The name combines ring signatures, which help hide the sender, with confidential transactions, the technique that hides the amount.
RingCT is not a bolt-on; it changed how Monero transactions are built. Monero's documentation describes it as introducing an improved ring signature, a multi-layered linkable spontaneous anonymous group signature, that allows hidden amounts, origins, and destinations with verifiable, trustless coin generation (source: Monero project, Moneropedia: Ring CT). The key phrase there is "trustless coin generation": the network can confirm that the money supply is correct, that no transaction invented coins, even though it cannot see the amounts. Making it mandatory in 2017 mattered, because privacy is only strong when everyone has it, and optional amount-hiding would have let the visible transactions stand out. RingCT is one part of the broader design covered in how Monero works. From that point on, every Monero payment has hidden its amount by default. The upgrade was significant enough that it effectively split Monero's history in two. Transactions from before 2017 have visible amounts and can be analyzed in ways that later ones cannot, which is one reason the network treats the switch to mandatory RingCT as a milestone. For any payment made since, the amount has simply not been part of the public record.
How it hides amounts: commitments
The trick that makes hidden amounts possible is a cryptographic commitment. A commitment lets you lock in a number so that it stays secret, while still letting others do useful checks on it. In particular, commitments can be added together, so the network can confirm that the amounts in a transaction balance without ever seeing them.
This is the heart of confidential transactions. Each amount is wrapped in what is called a commitment, a value that reveals nothing about the number inside it, but that behaves predictably under addition. Because commitments add up the way the hidden numbers would, the network can take all the input commitments and all the output commitments and check that they match, proving the transaction neither created nor destroyed value. The formal construction, including how the ring signature and the commitments fit together, is set out in the original RingCT paper by Shen Noether (source: Ring Signature Confidential Transactions for Monero, Shen Noether). You do not need the mathematics to grasp the idea: a commitment is a sealed envelope that anyone can weigh but no one can open, and the weights are designed to add up correctly. Part of what keeps the envelope sealed is a secret random number, mixed in when the commitment is created, so that two payments of the same amount still produce completely different-looking commitments. Without that randomness, an observer could guess an amount by comparing commitments; with it, the value is genuinely hidden. That is what lets Monero keep amounts both secret and honest at the same time.
Proving no cheating: balanced sums and range proofs
Hiding amounts creates a risk. If no one can see the numbers, how does the network stop someone from inventing coins or sending a negative amount? RingCT answers with two checks. It proves the inputs and outputs balance, so nothing is created, and it proves every amount is positive, so no one can forge money with negative values.
The first check is the balancing act from the previous section: the commitments must sum to zero, meaning the value going in equals the value coming out. The second is subtler. Without it, a cheater could hide a negative amount in one output and a large positive amount in another, and the sums would still balance while coins were conjured from nothing. To prevent that, RingCT includes a range proof, a proof that each hidden amount falls within a valid, non-negative range, without revealing the amount itself. Monero's documentation describes exactly this pair, one proof that the sum is zero and another that the outputs are positive numbers (source: Monero project, Moneropedia: Bulletproofs). Encryption of transaction amounts began with RingCT in 2017 and is enforced by default (source: Wikipedia, Monero). The early range proofs were effective but large, which bloated transactions, and that specific problem was later solved by a more compact technique, explained in Monero Bulletproofs. Together, the balancing check and the range proof are what make hidden amounts trustworthy rather than an honor system. Neither check would be enough alone: balancing without range proofs would allow negative-amount forgery, and range proofs without balancing would allow the total to drift. It is the pair, applied to every transaction, that keeps the supply honest.
What an observer sees, and what the network still checks
It helps to hold two views at once. To an outside observer, a RingCT transaction shows a set of commitments and proofs, but no readable amounts anywhere. To the network verifying the block, those same commitments and proofs are enough to confirm the transaction is valid. Secrecy and verification manage to coexist.
Picture the two roles side by side. A blockchain analyst pulls up a Monero transaction and finds commitments in place of amounts, a range proof attached to each output, and a signature over the inputs. None of it reveals a figure; there is nothing to read off. A validating node looks at the very same data and runs its checks: it adds the commitments and confirms they cancel to zero, it verifies each range proof, and it verifies the signature. If all pass, the transaction is accepted; if any fail, it is rejected. Notice what the node never does: it never learns an amount. That is the defining property of a confidential transaction, and it is why "the network cannot see the amounts" and "the network can catch cheating" are both true at once. The recipient, meanwhile, uses their own keys to recover the actual amount sent to them, which the public checks never expose.
RingCT and the rest of Monero's privacy
RingCT is the amount layer, and it works alongside two others. Ring signatures hide who sent a payment, stealth addresses hide who received it, and RingCT hides how much moved. All three are mandatory and apply to every transaction, which is what makes a Monero payment private in all three respects at once rather than only some of them.
No single layer is sufficient. A hidden sender and receiver with a visible amount still leaks, and a hidden amount with a visible sender and receiver leaks in a different way, so Monero requires all three together. The project describes the combined result as a currency where the sender, receiver, and amount of every transaction are hidden by default (source: Monero project, what is Monero). The three layers also lean on your account keys, whose roles are covered in Monero's view and spend keys; your view key, for instance, still lets you see the real amounts of your own transactions even though the network cannot. From the vantage of an exchange operator, hidden amounts are what make Monero balances and flows impossible to read off the chain, which is a large part of why it is treated differently from transparent assets for listing and compliance. That is a structural observation about the protocol, not a comment on price.
It is worth appreciating how much the amount layer carries. Sender and receiver privacy limit who can be connected to a payment, but the amount is often the most sensitive detail of all, the number that reveals a salary, a purchase, or an account balance. By hiding it as well, RingCT removes the figure that analysts most want to see, and it does so for every transaction by default rather than leaving it to individual discretion. That is why amount-hiding is not a minor add-on but one of the pillars the whole design rests on.
The honest limits and the road ahead
RingCT hides amounts reliably, and unlike some early privacy features it has not been the subject of a serious traceability break. Its real weakness was practical rather than cryptographic: the proofs were large and made transactions heavy. That has since been improved, and, as always, hiding the amount does nothing to protect you off-chain.
It is worth separating the cryptography from the plumbing. On the cryptography, RingCT does what it claims: amounts are hidden and the supply stays verifiable. The genuine problem in the early years was size. The original range proofs were bulky, which made Monero transactions large and costly, and that was fixed by Bulletproofs, a more compact proof adopted in 2018. The change cut typical transaction sizes and fees sharply while proving exactly the same thing, which is a good example of privacy and efficiency improving together rather than trading off. So the history here is one of engineering refinement rather than a privacy failure. The usual caveats still apply, though. Hiding the amount protects the on-chain record, not your identity elsewhere: an exchange that knows you, a reused public address, or careless behavior can still expose you, and none of that is RingCT's job to fix. For the fuller real-world picture of what is and is not private, whether Monero is safe is the right next step, and the general landscape of on-chain confidentiality is in Bitcoin privacy basics.
Frequently asked questions
What does RingCT hide?
RingCT hides the amount of a Monero transaction. The sender and receiver are hidden by separate mechanisms, ring signatures and stealth addresses, so RingCT is specifically the layer that conceals how much was sent. It does this while still letting the network confirm the payment is valid, which is the part that makes hidden amounts practical rather than just a way to obscure a ledger.
Can the network verify a transaction if the amount is hidden?
Yes, and this is the clever part. Using cryptographic commitments, the network checks that the hidden inputs and outputs balance, so no coins are created, and that every hidden amount is a positive number, so nothing is forged with negative values. It confirms the transaction is honest without ever learning the actual figures. That combination of secrecy and verifiability is the whole point of a confidential transaction.
When did RingCT become mandatory?
RingCT was implemented in January 2017 and became mandatory for all Monero transactions in September 2017. After that point, every transaction hides its amount by default. Making it compulsory was important, because optional privacy tends to be weak privacy: if amount-hiding had stayed a choice, the transactions that opted out would have stood out, and the ones that used it might have looked suspicious by comparison.
What is a Pedersen commitment, in simple terms?
It is a way to lock in a number so that it stays secret but can still be checked in limited ways. Think of it as a sealed envelope that anyone can weigh but no one can open. Crucially, these envelopes can be added together, and the weights add up the way the hidden numbers would, which is how the network confirms that a transaction's hidden amounts balance without ever seeing them.
Does RingCT hide the sender and receiver too?
No. RingCT hides the amount only. The sender is hidden by ring signatures, and the receiver is hidden by stealth addresses. All three run together by default on every Monero transaction, but each solves a different part of the privacy problem, and RingCT is specifically the amount piece. It is a common mistake to assume one feature does everything; in Monero, privacy is deliberately split across three cooperating layers.
What do Bulletproofs have to do with RingCT?
Bulletproofs are a more compact kind of range proof, the part of RingCT that proves hidden amounts are positive. When RingCT launched, its range proofs were large and made transactions heavy and expensive. Bulletproofs, adopted in 2018, shrank them dramatically, cutting transaction size and fees without weakening the privacy. They are an upgrade to a component of RingCT, not a replacement for RingCT itself.
Did Monero invent RingCT?
Yes, in effect. RingCT was designed for Monero by the Monero Research Lab, in a paper by Shen Noether, building on the earlier ideas of ring signatures and confidential transactions. It was one of the significant privacy advances Monero contributed to the field, and it has been part of every Monero transaction since it became mandatory in 2017. Other projects have since drawn on the same ideas.
Researched and written by the BloFin Academy editorial team with AI-assisted drafting. Updated July 2026. Sources: the official Monero Moneropedia at getmonero.org, the Bitcoin project documentation at bitcoin.org, the Monero entry on Wikipedia, and Shen Noether's "Ring Signature Confidential Transactions for Monero" paper. All facts independently verified against cited documentation current as of July 2026.
This article is educational and general in nature, not financial, legal, or tax advice. Cryptocurrencies like Monero carry real risks, including price volatility and regulatory changes, and privacy technology is strong but never an absolute guarantee of anonymity. Nothing here is a recommendation to buy, sell, or hold any asset. BloFin offers the XMRUSDT perpetual contract for trading; to get started, create a BloFin account, fund it with cryptocurrency, and open the XMRUSDT perpetual contract trading page. Do your own research and consider a licensed professional before making financial decisions.