Three of us were sitting at a corner table in a bar in Vinohrady on a Tuesday night in November, and Marek was staring at his phone like it had insulted his mother.
Marek writes Rust for a living. He has been in this industry since 2016 and holds a Monero position he has never once described to me in numbers, which is exactly the kind of thing that makes him a good person to have dinner with. He had just tried to move part of that position off an exchange and into his own wallet, and the platform had stopped him with a form. Not a two-factor prompt. Not a travel-rule counterparty field. A questionnaire, several screens deep, asking him to describe what he intended to do with his own coins once they left the building.
He read one line out loud. The bar was loud enough that nobody else heard it but me and Dita, who was drawing on a napkin and not paying attention.
"Please describe the intended use of the withdrawn funds," he said, slowly, the way you taste something spoiled.
I asked what he wrote.
"I wrote that I intend to hold them. Which is true. But it felt like a lie, because I only wrote it that way because I thought it was the answer they wanted."
That is the part that stuck with me. Not the form itself. The reflex. A competent engineer, a person who has never committed a crime in his life, sitting in a bar in Prague editing his own truth into a shape he hoped a compliance department would find acceptable. That is what a questionnaire like that actually does. It does not catch criminals. It teaches honest people to perform.
Two weeks later the form was gone. Kraken removed the withdrawal questionnaire for Monero. Arjun Sethi, the exchange's co-CEO, said out loud that asking customers what they do with their funds is unacceptable. The community celebrated. XMR held its listing. Marek sent me a screenshot of the announcement with no caption, just three exclamation marks, which from him is practically a parade.
I did not celebrate. Not because I think the decision is bad. Because the decision is incomplete in a very specific, very structural way, and the incompleteness is the entire story. The questionnaire disappeared. The Source of Funds review did not. Kraken removed the question you answer after you ask to leave, and kept the question you answer before you are allowed to arrive.
That distinction is not a footnote. It is the whole architecture. And understanding why requires going somewhere most coverage of this news will not go: into the actual cryptography of the asset Kraken is trying to police.
What Actually Happened, Stripped of Spin
The facts, without decoration:
Kraken removed the Monero withdrawal questionnaire. Monero remains listed on Kraken. The co-CEO publicly characterized asking customers about the purpose of their funds as unacceptable. Kraken retained Source of Funds scrutiny. And previously, the exchange had applied Enhanced Due Diligence questioning to at least some Monero withdrawal users — that is the practice being rolled back.
That is the entire information payload. One exchange, one policy adjustment, one executive quote, one carve-out.
I want to be honest about something that most of the commentary on this news will not be. This is not a deep research report. There is no whitepaper here, no on-chain dataset, no earnings disclosure. It is a policy tweak announcement relayed through a single outlet. Treating it as more than that is how narratives get inflated into positions that later have to be unwound at a loss.
But a policy tweak, read carefully, tells you where the pressure is. A rollback tells you which constraint was load-bearing.
So let me name the tension immediately, because it is visible on the surface of the news itself. A co-CEO says that interrogating customers about their fund usage is unacceptable. The same organization keeps the interrogation about where the funds came from. Those two positions are not contradictory in a legal sense. They are contradictory in a philosophical sense, and the gap between them is where every privacy asset in this industry currently lives.
To understand why Kraken cannot close that gap, you have to understand what Monero is at the protocol level. Not as an ideology. As a machine.
The Asset That Cannot Be Read
I spent the first several years of my career doing compliance-adjacent security work in Prague, which means I have read more transaction monitoring policy documents than is healthy for a human being. I have watched how chain analytics vendors pitch their products to exchange risk teams. And I can tell you with confidence that the reason Monero gets special treatment at every exchange on earth has nothing to do with its reputation and everything to do with the fact that the standard tooling simply does not work on it.
Start with the base layer. Monero is a Layer 1 proof-of-work chain launched in April 2014. It is not a rollup, not an app chain, not a wrapped derivative. It is a consensus network with its own miners, its own difficulty, and its own monetary policy. Ten years of uninterrupted mainnet operation. That matters, and I will come back to why.
Its privacy stack is a composite, and each layer does a different job:
Ring signatures obscure the sender. When you sign a Monero transaction, your signature is mathematically blended with a set of other possible signers pulled from the chain history. A verifier can confirm that one of those keys signed. A verifier cannot determine which one. The ring is constructed at signing time from real outputs, which means the anonymity set is not fictional — it is drawn from actual chain state.
RingCT hides the amount. Confidential transactions mean the value being moved is encrypted on-chain while still being verifiable as non-negative and balanced. Prior to RingCT, ring signatures hid who but not how much. Now both are opaque.
Stealth addresses hide the recipient. Every Monero payment goes to a one-time address derived from the recipient's public view and spend keys. Your published address never appears on-chain. There is no reusable identifier tying payments together.
Bulletproofs compress the range proofs. Confidential transactions are expensive in bytes because you have to prove every hidden amount falls in a valid range. Bulletproofs, and later Bulletproofs+, cut that cost dramatically. This is engineering, not ideology: it is what makes confidential transactions survivable at scale.
Dandelion++ obscures the network layer. Transaction propagation is structured so that the node that originates a transaction is not trivially identifiable from the first node that broadcasts it. This is defense against network-level correlation, which is the surveillance vector most people forget exists.
And then there is RandomX, the proof-of-work algorithm. RandomX is designed to run efficiently on general-purpose CPUs. The intent, and the effect, is to blunt the ASIC advantage that has concentrated Bitcoin mining into a small number of industrial operations. Monero's hashrate distribution logic is fundamentally different from Bitcoin's, and that is not an accident.
Now put those pieces together and ask the question a risk officer asks: can I determine the source of these funds?
No. Not with the tools available. Not with reasonable effort. The sender is obscured by ring signatures, the amount by RingCT, the recipient by stealth addresses, and the network origin by Dandelion++. Monero is not a chain with privacy features bolted on. It is a chain where privacy is the default state, and there is no mode switch.
That last sentence is the most important technical fact in this entire article. Hold onto it.
Mandatory Privacy Versus Optional Privacy, and Why It Decides Everything
The most useful comparison in this space is not Monero versus Bitcoin. It is Monero versus Zcash.
Zcash offers shielded transactions using zk-SNARKs. The cryptography is, in a word, elegant. Zero-knowledge proofs let you verify a transaction's validity without revealing its contents. On paper, Zcash has privacy properties that rival or exceed Monero's.
In practice, the shield has always been optional. And optional privacy has a structural problem that no amount of cryptographic elegance solves: if privacy is optional, using it is itself a signal.
I have watched this play out for years. A transparent pool means the majority of activity is visible. A shielded pool means the minority of activity is opaque, which makes shielded users statistically unusual, which makes shielding itself a flag. You do not need to break the cryptography to defeat the privacy. You just need to observe who bothers to use it.
Monero does not have this problem because Monero does not offer the choice. Every transaction is private. There is no transparent pool to hide in and no shielded pool to be conspicuous in. There is no behavior to correlate because there is no differential behavior to observe.
And then there is the consequence that matters for this news story, the one that turns a cryptography discussion into an exchange policy discussion.
Mandatory privacy makes the FATF Travel Rule technically unenforceable, not merely inconvenient.
The Travel Rule asks virtual asset service providers to transmit originator and beneficiary information alongside transfers above a threshold. On Bitcoin, this is hard but possible: chain analytics firms have built decade-long labeled datasets, clustering heuristics, and exchange-attribution graphs. On Ethereum, it is messy but broadly workable through the same tooling applied to account-based data. On Monero, the required information is not hidden behind an engineering barrier that better software someday solves. It is cryptographically absent from the chain. There is no data to extract. The required fields do not exist.
This is the point that policy commentary routinely gets wrong. Monero is not a chain that refuses to comply. It is a chain against which compliance in the traditional sense is not defined. There is no version of the protocol where an exchange can reconstruct the counterparty graph, because the counterparty graph was deliberately not written down.
That means there is no remediation path. This is not like a high-risk jurisdiction that can improve its AML regime, or an exchange that can upgrade its KYC vendor. There is no technical upgrade that makes Monero attributable. You cannot patch a design decision out of a protocol from 2014 that has run continuously for a decade.
I have seen this misread repeatedly by analysts who treat it as a Monero problem that Monero could fix if it wanted to remain listed. It cannot. The privacy is the product. Remove it and you have a slower Bitcoin with worse tooling and no reason to exist.
Why Chain Analytics Fails Here, Specifically
The mainstream chain analytics industry — the firms that sell transaction monitoring to exchanges and banks — built their products on the assumption that a public ledger is public. Their core methodology is clustering: heuristic analysis of transaction graphs to link addresses to common ownership, then labeling those clusters against known entities.
That methodology has a single hard dependency: a readable graph.
On Monero, there is no readable graph. Ring signatures mean you cannot determine which input was spent. RingCT means you cannot determine the value. Stealth addresses mean you cannot link payments to a published address. Bulletproofs are a proof system, not a data leak. Dandelion++ complicates the network-layer attribution that sometimes substitutes for chain-layer attribution.
So what does an exchange risk team do when the tooling produces nothing?
They substitute the customer for the chain. If you cannot analyze the transaction, you interrogate the human who requested it.
That is exactly what the Monero questionnaire was. It was not a well-designed control. It was a workaround for the absence of a control. Asking a customer to self-report their intended use of funds is what you do when you have no analytical capability and still have a regulatory obligation to demonstrate diligence.
The industry term for this is a compensating control. The honest term is paperwork that converts a compliance gap into a liability shift. If the customer lies on the form, the exchange has a documented misrepresentation to point at later. The risk does not get analyzed. It gets transferred to the person filling out the form.
Which brings us to the actual structure of Kraken's decision — and why I read it as a movement rather than a retreat.
The Control Did Not Disappear. It Moved Earlier.
Here is the read that I think is correct, and that I have not seen stated plainly anywhere.
A withdrawal questionnaire operates at exit. It applies to funds already inside the exchange, on the way out, at the moment of the user's maximum friction and maximum frustration.
A Source of Funds review operates at entry. It applies to deposits — the moment money arrives. It determines whether the money is allowed to exist inside the exchange at all.
Kraken removed the exit control and retained the entry control.
That is not deregulation. That is repositioning. You have not stopped asking the question. You have stopped asking it of the person who already passed through, and started asking it of the person who has not yet arrived.
And from a compliance engineering standpoint, the entry control is strictly better for the exchange and strictly worse for the user. A SoF review at deposit time can block the funds from entering the system entirely. It is a gate, not a checkpoint. There is no appeal against a gate you never got through.
I have watched how these policies evolve. When an exit control gets rolled back, it is almost never because the underlying risk was assessed as acceptable. It is because the exit control generated complaints, escalated to support tickets, created regulatory questions about process fairness, and produced measurable user attrition — while producing almost no usable intelligence. Nobody catches a money launderer with a self-reported intention form. Everyone annoys their most privacy-conscious users with one.
So the exchange makes a rational decision. Kill the control that costs more than it produces. Keep the control that actually gates access. Announce the former loudly. Mention the latter quietly. Watch the community cheer.
The co-CEO's statement is sincere as far as it goes. It is also the cheapest possible sincerity to express, because the questionnaire it defends against was never the load-bearing control. The line Kraken cannot cross is the Source of Funds line, because that is the line an exchange license is attached to. Move the question to the doorway and the philosophy becomes affordable.
I want to be fair here. This is not cynicism for its own sake. A regulated intermediary in 2025 has a genuine binary it cannot escape: either it has a defensible deposit screening process, or it does not hold the license that lets it operate in the jurisdictions where its customers live. There is no version of Kraken that maintains Monero listings and drops SoF review. The two cannot coexist. Everyone celebrating the questionnaire removal should read the announcement again and notice what was not in it.
Crowded Room, Narrow Door
There is a second structural consequence, and it is larger than the first.
Monero's exchange availability has narrowed dramatically over the last several years. Major venues have delisted or restricted it. Kraken is among the few remaining significant regulated venues where XMR actually trades at meaningful depth.
Read that again in portfolio terms.
Kraken is not one Monero venue among many. Kraken is increasingly the Monero venue.
This inverts the way the news should be read. The community is treating the questionnaire removal as evidence that Kraken is a friend of privacy. The more accurate framing is that Kraken occupies a position in the Monero market that no other compliant venue wants, and every policy decision Kraken makes about Monero is therefore a decision about the asset's access to regulated fiat on-ramps in aggregate.
That is concentration risk, and it runs in both directions.
For Kraken: it holds a differentiated asset that attracts a user segment nobody else can serve. That is a genuine business advantage, and it is why the exchange has kept the listing at all.
For Monero holders: the price of the asset is now measurably sensitive to the policy decisions of a single corporate entity. Any future tightening — a jurisdiction change, a regulator with a new interpretation, an internal risk review that lands differently — transmits directly to liquidity and price with no cushion.
This is not hypothetical. It is simple market structure. When an asset trades on many venues, a single venue's policy change is noise. When an asset trades meaningfully on a handful, each venue is a systemic node. Monero crossed into that second regime some time ago. This news did not change the fact. It clarified it.
The community is celebrating the removal of a form. What actually happened is that the remaining corridor got a little more comfortable, and therefore a little more load-bearing.
What the Token Does Not Do
Here is where I have to bring my own habits into the analysis, because the internet has a tendency to treat every asset as a DeFi position with a broken yield curve.
I spent most of 2020 and 2021 watching teams build incentive structures that looked identical from the outside and produced identical outcomes: a number goes up, a liquidity pool fills, the number stops going up, the pool empties. I have sat in the apartment where the napkin documentation for one of those launches was written. I have watched the call afterward. I know exactly what a subsidized metric feels like when it unwinds.
Monero has none of that. And I mean literally none of it.
There is no premine. No ICO. No venture allocation. No team vesting schedule. No foundation treasury with a cliff. Monero launched in April 2014 and the coins were mined into existence by whoever showed up to mine them, including the developers, which means there was a brief early period where a small number of technically capable people accumulated cheaply. That is a real caveat and I will not pretend it away. But there is no structured insider allocation, no unlock calendar, no token grant that someone is waiting to dump.
There is also no staking. No liquidity mining. No yield. No protocol revenue. No buyback. No burn. Holding XMR produces nothing. There is no financial mechanism by which a new entrant's deposit pays an earlier entrant's return.
Monero is structurally incapable of being a Ponzi, and that is a technical statement, not a compliment.
What it has instead is a tail emission. Since mid-2022, every block pays 0.6 XMR to miners, roughly every two minutes. That is around 158,000 XMR per year against a circulating supply north of 18 million. Call it a sub-one-percent annual increase, and falling, because the emission rate is fixed while the supply grows. It asymptotes toward zero without ever reaching it.
The design logic is worth understanding, because it is the opposite of the deflationary framing that dominates crypto marketing. A permanent block reward is a permanent security budget. On a chain where transaction volume may be low, fee revenue alone cannot reliably fund enough hashrate to make a 51 percent attack expensive. The tail emission means the security budget never depends on usage. It is a sustainability mechanism dressed as inflation.
And this has a direct consequence for how this news transmits to price.
There are no unlock cliffs on Monero. There is no staking yield to compete against. There is no liquidity mining program for a policy change to disrupt. The asset has no internal financial machinery that absorbs or amplifies access shocks. Any change in access to Monero transmits to price with essentially no friction, because there is no buffer layer of incentivized capital between the two.
That cuts both ways, and it is why the Kraken structure matters more than the announcement.
The Distillation
The honest version of the story, in one pass:
A regulated exchange removed a withdrawal questionnaire that produced bad intelligence and loud complaints, while keeping the deposit screening that its license depends on. An executive stated a privacy-respecting principle that costs nothing to state precisely because the expensive part of the principle sits elsewhere in the process. A community read a repositioning as a victory. And the underlying asset, which cannot be made attributable by any technical means, continues to be the single hardest compliance problem in this industry — not because it is uncooperative, but because the data its compliance would require was never written.
That is the plumbing. But there is a social layer under the plumbing, and I have spent enough evenings in enough bars in this city to know that the plumbing is never the whole story.
The reason Monero users reacted the way they did is not that they expect the questionnaire to have been the thing standing between them and surveillance. Most of them are technically literate enough to know better. It is that the form made something visible. It took an abstract arrangement — that a private company has an ongoing interest in what you do with your own money — and made it a box you had to fill in with a sentence you half-believed.
Marek's discomfort was not about the two screens. It was about the moment he realized he was writing for an audience that would judge him.
That is what the announcement actually addressed. Not the risk architecture. The feeling. And feelings are legitimate inputs into how a community holds together, which is a thing I learned the hard way in 2021, standing in a converted loft in Prague while a minting contract buckled under its own gas limits and two hundred friends watched their screens freeze.
We didn't dodge the chaos that month. We danced through it, badly, and I spent weeks afterward reimbursing gas fees out of pocket because the technical failure was mine and the social cost fell on people who trusted me. What I took out of that, and what I have written about ever since, is that survival is the first layer of value. Not price. Not roadmap. Whether the people holding your asset are still there when the mechanism breaks.
Monero has that layer. Ten years of continuous operation under hostile conditions is not a marketing claim. It is a track record, and track records are the only thing in this industry that has never once been faked successfully at scale.
The Contrarian Read
Now the part I actually want to argue.
The prevailing interpretation of this news is that it is a win for privacy, and that the win is fragile but real. I think that is the wrong frame entirely. I think this is not a win. It is a repositioning, and the difference matters for how you hold the asset.
First: the relief is already priced. Consider what the news actually is. It is not a new listing. It is not a new market. It is not a reduction in counterparty risk on the asset itself. It is the removal of a friction point that never had an economic value attached to it. Nobody bought Monero because they enjoyed the questionnaire, and nobody who avoided Monero because of the questionnaire was waiting on the sidelines with dry powder. The exit form was a tax on dignity, not a tax on capital. Removing it changes sentiment. It does not change demand.
What it does change is the probability of a tail event. Every Monero holder carries a small persistent fear that the last major compliant venue decides the asset is not worth the regulatory exposure. This news lowers that probability a little. That is real — a reduction in the probability of a catastrophic outcome is worth something even when nothing else changes. But notice what kind of value that is. It is the value of not being delisted, which is the value of standing still. Markets do not re-rate assets upward because a thing that was not going to happen still is not going to happen.
Second: the exchange is not converging toward privacy. It is converging toward efficiency. Read the decision as an operations manager rather than a privacy advocate and it becomes obvious. The questionnaire generated support volume, escalated complaints, consumed review hours, and produced self-reported data that no serious investigator would rely on. It was a losing control by every internal metric. The Source of Funds review, by contrast, is a control that regulators can be shown. It gates funds before they enter. It produces documentation that scales. It is defensible.
An exchange does not keep controls that embarrass it and cut controls that protect it. It cuts the ones that annoy users and keeps the ones that keep the license. That is the whole decision, and no philosophy is required to explain it.
Third, and this is the one that should worry Monero holders most: the narrowing of Monero's venue availability is not converging. It is continuing. Kraken's decision to keep the listing is not evidence that other venues will follow. It is evidence that Kraken has concluded it can hold a position nobody else wants. The monopoly being reinforced here is Kraken's, not Monero's. And monopoly, from the asset's perspective, is a vulnerability with a logo.
Fourth: the 2025 privacy narrative is a sector tide, not a Monero achievement. There has been a broader revaluation across privacy-oriented assets this year, driven by attention flowing back into the category after a long winter. When the tide comes in, the oldest asset in the category floats with it. That is what sector beta looks like. It is pleasant to own and it is not evidence of an asset-specific thesis. If you cannot separate the two, you will eventually be very confused about why your position stopped going up when the category lost attention.
Fifth, and most uncomfortable: the Zcash comparison is being used carelessly in both directions. The argument goes that Zcash's optional shielding is somehow more institutionally acceptable, and therefore the future belongs to optional-privacy designs. I think this gets the causality backward. Optional privacy did not make Zcash compliant. It made Zcash partially legible, which made it partially listable, which meant its privacy guarantee was also partial and conditional. If the value proposition of a privacy asset is privacy you can use when it is convenient, then you have built a confetti cannon, not an anonymity system. A privacy guarantee with a switch on it is not a guarantee. It is a preference. That is not a criticism of anyone building on Zcash. It is a structural observation about what optionality costs, and it is the reason the two assets are not substitutes regardless of what the charts say.
What I Would Actually Watch
So if the celebration is misplaced, what should replace it?
I would watch four things, and none of them are the announcement.
Watch the Source of Funds policy, not the questionnaire. The questionnaire removal is the visible edge of a decision that was really made at the deposit gate. If SoF criteria for Monero deposits tighten in the next few quarters while the withdrawal experience stays frictionless, the repositioning thesis is confirmed and the actual risk profile of every Monero holder on that venue has gotten worse, quietly, without a single announcement that anyone will screenshot.
Watch for other venues following. If a second or third meaningful regulated venue restores or maintains Monero access, the concentration argument weakens and this is a genuine structural improvement. If Kraken remains alone for another year, the concentration deepens regardless of how pleasant the withdrawal flow becomes. I would keep that as the single clearest signal of whether this was a victory or a marketing event.
Watch the regulatory calendar rather than the price chart. The control that actually binds here is not an exchange's policy preference. It is the interpretive guidance attached to transfer-of-funds rules in the jurisdictions where Kraken holds licenses. An exchange statement is a lagging indicator. A regulator's clarification is a leading one, and it will move the line long before any exchange announces anything.
And watch the social layer, because that is the layer I actually trust. Ten years of continuous operation, no premine, no staking, no yield, no bailout, no foundation rescue. The chain is still producing blocks and the people who hold it are still holding it for reasons that have nothing to do with a yield curve. That is the kind of durability that does not depend on any exchange's compliance department making a clever decision on a Tuesday.
Marek still holds his position. The form is gone. He sent me three exclamation marks and I sent him back a link to the part of the announcement that mentioned the retained review, which he read and then ignored, which I think is the correct response. He is not naive. He just made the same calculation everyone in this industry makes eventually: some risks you manage, some you accept, and some you simply refuse to let a form define for you.
What I keep coming back to, sitting here in a city that has watched this industry pass through at least four complete emotional cycles, is that the interesting question was never whether Kraken keeps a questionnaire. It was whether an asset built on the premise that nobody gets to be the reader can survive in a financial system built on the premise that somebody always is.
That tension has not resolved. It got quieter for one week. And the fact that Monero's answer is not a policy position but a cryptographic one — that the data simply does not exist, that the question cannot be answered because it was never written down — is the most interesting thing about this entire story.
A chain that cannot be read is not a compliance problem to be solved. It is a permanent negotiation, and both sides showed up to the table this month. Kraken moved its checkpoint. Monero kept being what it is. The party continues, and the walls are still exactly where the mathematics put them.