BTC/USD $68,420 +2.8%
ETH/USD $3,540 +1.4%
SOL/USD $142.80 -0.6%
BNB/USD $605.20 +0.9%
XRP/USD $0.62 -1.2%
DOGE/USD $0.18 +5.4%
BTC/USD $68,420 +2.8%
ETH/USD $3,540 +1.4%
SOL/USD $142.80 -0.6%
BNB/USD $605.20 +0.9%
XRP/USD $0.62 -1.2%
DOGE/USD $0.18 +5.4%
Bitcoin

Monero Privacy Update Targets Tor and I2P Timing Leak

The Monero privacy update under review would make it harder to link a transaction on the public network to the Tor or I2P connection that first carried it. The proposed change adds a randomiz

AnonymousCryptoCompass newsroom
November 15, 2026
6 min read
NEWS
Hero article visual / chart / editorial image
CryptoCompass editorial visual for bitcoin coverage.

The Monero privacy update under review would make it harder to link a transaction on the public network to the Tor or I2P connection that first carried it. The proposed change adds a randomized delay before those transactions are relayed, but the pull request is still pending and no release date has been confirmed.

  • Monero pull request 11743 was opened on November 13, according to U.Today.
  • The patch addresses transaction timing, not the full range of ways a user’s activity or identity might be exposed.
  • Nodes would accept the relevant transactions on incoming Tor and I2P connections, then delay them before using Dandelion++.
  • Nodes would ignore requests to broadcast immediately when the transaction arrives through Tor or I2P.
  • The proposal is labeled for a possible backport, but that does not confirm when or whether it will ship.

Timeline of the Monero privacy update

  1. November 8, 2026: An earlier proposal for a randomized relay delay dated from November 8. U.Today reported that the current patch was reworked after feedback from another Monero developer.
  2. November 13, 2026: Pull request 11743 was opened, according to U.Today. It proposes changing how nodes relay transactions received over Tor and I2P.
  3. November 15, 2026: U.Today reported that the pull request remained pending review. When the patch might land in a release had not been confirmed.
Separate fiber routes in a dim data-center corridor The proposal concerns how transactions pass from Tor or I2P to public network peers.

Background: what the Monero privacy update changes

The issue described by U.Today arises when a node receives a transaction through Tor or I2P and then passes it to Monero’s regular peer-to-peer network. The transaction uses an anonymity network on its way in, but an observer watching both the anonymity network and public peers may compare broadcast timing. If the transaction appears on public peers almost immediately, that timing could help connect the two events.

The Monero privacy update proposes a specific relay rule. Nodes would accept Tor and I2P transactions only on incoming anonymity-network connections. After acceptance, each transaction would wait for a random period before being relayed through Dandelion++, Monero’s existing protocol intended to obscure where a transaction originated. The patch also makes nodes ignore requests for an immediate relay on Tor and I2P connections, so the delay cannot be skipped that way.

That is a targeted adjustment, not a claim that all transaction activity becomes untraceable. The proposal addresses timing-based correlation between an anonymity-network transaction and its appearance on public peers; the source does not describe it as addressing other privacy risks.

The change is also distinct from Monero’s longer-term cryptography work. In its 2024 explainer, the project described FCMP++ as a planned full-chain membership proof approach, designed to avoid requiring a migration to Seraphis. The official Monero FCMP++ explainer discusses that separate development path. A proposed relay delay does not implement FCMP++.

Network switch and cable on a technical workbench beside an analog timer Randomized waiting time is the core relay change described in the pending patch.

Reactions and market context

U.Today characterized the code change as relatively small but relevant for people who use Tor or I2P to conceal their network location. Its report also noted an earlier proposal for a similar randomized delay. That history suggests the current pull request is a revision of an existing idea, not a confirmed protocol upgrade.

Meanwhile, Monero’s broader privacy roadmap remains under development. The FCMP++ and Carrot beta stressnet release notes say the test network forked from Monero testnet on October 5, 2026, and that beta v3.1 was released on October 26. Those notes describe test-network work, not activation on Monero mainnet. They also list hardware-wallet support, multisig and transaction proofs as not yet functional in the stressnet software.

There is no Monero price data in the supplied market snapshot, so it cannot establish an XMR-specific response to this news. For wider context, CoinGecko data at 11:13 UTC on November 15 showed Bitcoin down 2.92% over 24 hours and Ethereum down 4.25%. Alternative.me’s Crypto Fear & Greed Index was 10, classified as Extreme Fear, on November 15. Those figures describe a weak broad-market backdrop, not a demonstrated reaction to the Monero privacy update.

Measure Reading Timestamp Bitcoin 24-hour change -2.92% November 15, 2026, 11:13 UTC Ethereum 24-hour change -4.25% November 15, 2026, 11:13 UTC Crypto Fear & Greed Index 10, Extreme Fear November 15, 2026 Server rack in an empty testing lab representing Monero stressnet development The separate FCMP++ and Carrot work remains in test-network development.

Outlook: review and release are the next tests

The immediate question is whether reviewers accept the proposed connection rules and randomized delay, and whether the change reaches a software release. U.Today said the pull request is labeled for a backport, which leaves open the possibility of inclusion in the current release branch. That label does not confirm the outcome or provide a deployment schedule.

Separately, the developer-maintained FCMP++/Carrot plan calls itself a non-binding working draft and estimates activation in week 17 of 2027. That is a planning estimate, not a confirmed date. The beta v3.1 release notes list hardware-wallet support, multisig and transaction proofs as not yet functional in the stressnet software. They also say a detectable-inflation vulnerability was exposed for 24 hours after the initial stressnet hard fork.

For users, the practical significance of the Monero privacy update depends on the final implementation and when it becomes available. The proposed change targets a timing-based privacy weakness, and its release timing has not been confirmed. The supplied market data contains no Monero price figures, so it does not establish a market response to the patch.

FAQ

What does the Monero privacy update do?

It proposes delaying transactions received through Tor or I2P before nodes relay them to public peers. The random wait is intended to make timing comparisons less useful for linking the transaction to its original anonymity network.

Has the Monero privacy update been approved?

Not according to U.Today’s November 15 report. Pull request 11743 was still pending review, and no release date had been confirmed.

Is this the same as FCMP++?

No. The pending patch changes transaction relay behavior. FCMP++ is a separate proposed cryptographic approach to membership proofs, with development and testing still underway.

Sources

This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrencies are highly volatile; always do your own research before investing.

Read More:Monero Privacy Update Targets Tor and I2P Timing Leak">Monero Privacy Update Targets Tor and I2P Timing Leak