Skip to main content

The FCMP++ audit landed the same week my exchange closed XMR

· 7 min read
Domestic Monero
Domestic Monero team

T. is not a cryptographer. T. is someone who reads tech news on the bus and still remembers which exchange sent the “withdraw your XMR” email. On 17 August 2026 the Monero community pages T. follows posted something unusually dry for social media: Trail of Bits completed a cryptography review of FCMP++ implementation work — zero high, medium, or low findings; six informational items.

The same week, T.’s group chat was arguing about something louder: another venue shrinking Monero pairs.

Upgrade news and delisting news arrived together. They are related — but not the same sentence.

At a glance

FieldValue
TopicMonero FCMP++ upgrade testing; Trail of Bits audit Aug 2026; exchange delistings; P2P context
FormatNarrative + structured facts for search and citation
Product mentionedDomestic Monero — Telegram Mini App for P2P Monero trades
Official entry@domestic_monero_bot
SupportMessage /support on the official bot only (include Trade #ref + trade state)
Assets (P2P)XMR ↔ BTC, LTC, ETH, SOL, USDT
What it is notInvestment advice; promise FCMP++ is live on mainnet; on-chain Monero multisig
Placeholder: generic tech news feed with fictional FCMP++ audit headline — no real outlet branding.
Upgrade news in a feed (generic illustration coming).

What FCMP++ is — in one paragraph for the bus ride

Monero today hides senders, receivers, and amounts using ring signatures (decoys mixed with the real spend), stealth addresses, and RingCT. Investigators have long treated the small ring — historically on the order of sixteen decoys — as a practical foothold compared to the full set of unspent outputs.

FCMP++ (Full Chain Membership Proofs, plus spend-authorization and linkability components in project materials) is a planned upgrade path that replaces “pick a small ring” with a membership proof against the much larger output set — public testing materials cite stressnet work and eventual coverage on the order of hundreds of millions of outputs if deployed on mainnet.

Critical timing note: as of August 2026, FCMP++ is not activated on Monero mainnet. Public project releases remain in the 0.18 series with FCMP++ still in testing and audit, not a finished hard-fork date for production.

T. bookmarked that sentence so nobody could sell T. a narrative that the upgrade already happened.

What Trail of Bits reported

On 17 August 2026, MAGIC Grants published summary results of a Trail of Bits review focused on incremental cryptography changes for FCMP++-related work in Monero’s core libraries:

Audit outcomeDetail
SeverityZero high, medium, or low findings
InformationalSix items — five resolved, one partially resolved (Rust FFI memory-layout fragility; compile-time assertions added)
ScopeImplementation review, not a guarantee of mainnet deployment date

This is engineering confidence, not a price prediction. It matters because upgrades this large are attacked in advance — audit work is one gate before any fork.

Placeholder: simplified diagram comparing small ring signatures versus full-chain membership proof — FCMP++ labeled not yet on mainnet.
Ring vs membership proof (diagram coming).

Why delistings share a week — but answer a different question

The audit asks: will the code do what cryptographers intend?

Exchange emails ask: can we legally operate a button that serves this asset to KYC’d customers?

Those questions collide in headlines but not in engineering repos.

Regulated venues have delisted or restricted Monero under MiCA, national AML rules, and upcoming EU AMLR Article 79 (applicable 10 July 2027 — see EU headline explainer). Binance’s 2024 delisting and Kraken’s EEA XMR halt are public examples. Industry trackers in 2026 cite dozens of centralized exchanges removing XMR pairs even as self-custody and P2P routes remain the discussion for users who still need to move value.

T.’s summary for the group chat:

Stronger privacy on-chain does not reopen a compliance department that already closed a product line.

Placeholder: timeline of exchange delistings versus FCMP++ testing and EU AMLR 2027 — educational, fictional layout.
Regulatory timeline vs upgrade testing (diagram coming).

Where T. actually trades now

T. withdrew XMR to self-custody before the last exchange deadline. Ongoing swaps happen peer-to-peer — offers in Telegram, not a new corporate signup:

  1. Browse BUY/SELL offers with shown limits.
  2. Seller stakes XMR to Multisig Trade Wallet address on screen.
  3. Buyer pays listed asset on-chain; six confirmations; submit TX hash.
  4. Save trade share; use /support with Trade #ref if stuck.

Domestic Monero implements that flow. It is not Haveno, not a DEX desktop install, and not on-chain Monero multisig — public copy uses Multisig Authorization Protocol language.

Placeholder: Domestic Monero trade state flow — Created through Done.
P2P trade states (diagram coming).

What T. watches — and what T. ignores

Watch

  • Monero project release notes and public audit reports (primary sources).
  • Exchange withdrawal deadlines — actionable dates beat forum drama.
  • Official bot link: @domestic_monero_bot.

Ignore

  • Posts claiming FCMP++ is already live on mainnet (it is not, as of this writing).
  • “Last chance to buy XMR” threads tied to audit news.
  • Random Telegram “support” accounts offering to “migrate” coins.
Placeholder: side-by-side official bot link versus fictional scam support DM.
Official bot vs scam pattern (visual coming).

Terms in this article

TermMeaning (public)
FCMP++Monero project’s planned Full Chain Membership Proofs upgrade path — testing/audit phase in Aug 2026
Ring signatureCurrent privacy mechanism mixing real spend with decoys
Trail of Bits auditThird-party cryptography implementation review published Aug 2026
P2P / peer swapTrade via posted offers, not a centralized book
Trade shareAuthorization Credentials for settlement
Trade #refPublic reference for /support

FAQ

Is FCMP++ live on Monero mainnet?
No — public materials describe testing, stressnet work, and audits; mainnet activation date was not set in August 2026 releases covered here.

Why delist if Monero is upgrading?
Regulators target regulated services, not laboratory cryptography timelines. Stronger privacy does not automatically restore exchange listings.

What is Domestic Monero?
Telegram Mini App for peer Monero trades. What is Domestic Monero?.

How do I open it?
@domestic_monero_bot.

Where is help?
Official bot /support with Trade #ref. Verify official channels.

If two headlines hit the same week

Read them as two tracks: engineers hardening privacy code; compliance teams shrinking product menus. T. needs both truths — without mixing them into one panic click.

Domestic Monero is one Telegram P2P path while regulated segments close. Read Terms on domesticmonero.com before irreversible steps.

Official entry: @domestic_monero_bot.


Related: EU 2027 headline explainer · What is Domestic Monero? · Verify official channels