RingCT: Hidden Amounts

Hiding who sent and who received a payment is a huge achievement — but if the world can still see how much moved, a lot of privacy leaks back out. Amounts reveal salaries, balances, and spending patterns. Monero closes this last gap with RingCT, short for Ring Confidential Transactions. It conceals the amount of every transaction while still letting the entire network verify that no money was created out of thin air. In this lesson you will see how that apparent paradox actually works.

The Amount Problem

On a transparent ledger, every transaction shows its value in plain sight. Combined with traceable senders and receivers, that lets anyone build a detailed financial profile. Even after Monero hid the receiver and the sender, early versions of Monero still exposed amounts. RingCT, activated network-wide in 2017, fixed that and became mandatory for all transactions.

Confidential Transactions: Hiding Without Lying

The core idea comes from Confidential Transactions, which replace the visible amount with a cryptographic commitment. Think of a commitment as a sealed envelope: it locks in a specific number so it cannot be changed later, but no one can read the number through the envelope. The clever property is that these commitments can be added together. The network can check that the sealed inputs equal the sealed outputs plus the fee — proving the transaction balances — without ever opening any envelope.

So validators confirm a simple, vital fact: money in equals money out. No inflation, no coins conjured from nowhere, even though the actual figures stay hidden.

Range Proofs: Stopping Hidden Inflation

There is a subtle trap. Because amounts are hidden, a cheater might try to commit to a negative amount to magically inflate the supply. Monero prevents this with range proofs, which prove each hidden amount falls within a valid, non-negative range — without revealing the amount itself. Monero uses an efficient form of range proof called Bulletproofs (later improved to Bulletproofs+), which dramatically shrank transaction sizes and fees when introduced. This is part of why Monero transactions stay compact and cheap, a topic we expand on in Fees and Dynamic Block Size.

The Three Pillars, Complete

With RingCT in place, all three of Monero's privacy guarantees are active on every single transaction:

• Stealth addresses — hide the receiver.
• Ring signatures — hide the sender.
• RingCT — hides the amount while proving the transaction balances.

None of these is optional. There is no "transparent mode" to forget to turn on, which is a key reason Monero achieves genuine fungibility — every coin looks alike because none carries a visible amount or trail.

How You Still Verify Your Own Funds

If amounts are hidden from the public, how do you know what you have? Your wallet holds the secret values behind your own commitments, so it can decode and total exactly what you own. And if you ever need to prove a specific payment's amount to someone else — say a merchant — you can share a targeted payment proof without exposing your whole wallet. We cover that in Payment Proofs. This is the opposite of a transparent chain: privacy is the default, and disclosure is a deliberate choice you control.

For a formal definition, see Ring Confidential Transactions in the community Moneropedia.

Common Misunderstandings

• "Hidden amounts mean Monero's supply can't be audited." The total emission is still verifiable; range proofs guarantee no transaction creates extra coins.
• "RingCT also hides the sender." No — that is the job of ring signatures. RingCT is strictly about amounts.

RingCT is the final brushstroke that completes Monero's privacy picture: amounts vanish from public view, yet the network can still prove the math adds up. With sender, receiver, and amount all concealed by default, the on-chain layer is fully private. Next we will step off the chain and onto the network itself, where Dandelion++ hides which node a transaction came from.