The short answer
Two different bets on privacy
There is no honest one-word winner, and any page that gives you one is selling something. Monero makes privacy mandatory: every transaction is private, so no user can get it wrong. Zcash makes privacy optional but cryptographically stronger where it is used: a shielded spend proves membership in the entire pool rather than a fixed ring, and Zcash's newest pools need no trusted setup. That strength comes at a real cost — an adoption question Monero does not have, with only 25.8% of ZEC shielded today. The rest of this page is the design differences and the live numbers, not a verdict.
Monero's strength: nothing to opt into
Privacy is enforced by consensus, not user choice — minimum ring sizes were set “so that all transactions were private by mandate”. Nobody can leak their own history through carelessness, and there is no public subset of the supply to reason from. [1] [3]
Monero's cost: no transparency when you want it
Removing user error also removes user choice. Auditing depends on a view key that reveals incoming transactions only — Monero's docs warn the balance it shows “should not be relied upon”. Mandatory privacy has listing costs too: Binance delisted XMR effective February 20, 2024. [5] [7]
Zcash's strength: stronger proofs, real disclosure
A shielded spend is a proof against the whole pool, not a ring of decoys, so the anonymity set is not a tunable parameter. Halo 2 removed the trusted setup Sprout needed in 2016, and a full viewing key discloses incoming and outgoing activity.
Zcash's cost: optional privacy is often not taken
The fair critique, and it is measurable: 4.35M ZEC shielded, 25.8% of supply — so most ZEC sits transparent and is as public as Bitcoin. See what that percentage measures.
Side by side
Design differences that actually matter
The differences that matter are architectural, not marketing. The Zcash column is read live from the chain; the Monero column is a dated reference, cited line by line.
| Design dimension | Zcash (ZEC) — live | Monero (XMR) — dated reference |
|---|---|---|
| Privacy model | Optional. Transparent (t-) and shielded (z-) addresses coexist on one chain; shielded transactions use zk-SNARKs. | Mandatory. Sender, receiver and amount are hidden on every transaction by stealth addresses, ring signatures and RingCT. [1] |
| Transparent option? | Yes. t-addresses are fully public, and a large share of ZEC sits in them. | None. No transparent or opt-out transaction type; privacy is protocol-wide. [1] |
| Trusted setup | Historically yes — the 2016 Sprout ceremony. Halo 2 removed the requirement; Orchard (2022) and Ironwood (2026) need no ceremony. | Not required. Monero's range proofs are Bulletproofs, which “require no trusted setup”. [2] |
| Supply cap | 21,000,000 ZEC — a hard cap, enforced by the emission schedule this site tracks. | None. “The emission is infinite”: ~18.132M XMR by end of May 2022, then tail emission of 0.6 XMR per 2-minute block, described as <1% inflation trending to zero. [3] |
| Block time | 75 seconds (live target) | 120 seconds (DIFFICULTY_TARGET_V2 in the reference implementation). [4] |
| Anonymity set per transaction | The whole shielded pool — a shielded spend proves membership without naming a subset. | A ring of 16 outputs per input, the protocol floor since the August 2022 upgrade. [6] |
| Selective disclosure | Viewing keys split by capability: incoming reveals received transactions, full reveals incoming and outgoing. | A view key reveals incoming transactions only; Monero's docs warn the balance shown “should not be relied upon”. [5] |
| Exchange posture | Transparent addresses let venues integrate ZEC with ordinary public-address accounting. | No transparent fallback. Binance delisted XMR effective February 20, 2024. [7] |
| Protocol frontier | NU6.3 “Ironwood” activated July 28, 2026 at block 3,428,143: Orchard sealed, migrating to a fifth shielded pool. | FCMP++ (full-chain membership proofs), which would replace fixed-size rings, is listed “Coming Soon” on the official roadmap — not activated. [8] |
Monero sources. [1] getmonero.org — What is Monero? — official project site, accessed August 6, 2026. [2] Moneropedia — Bulletproofs — official project site, accessed August 6, 2026. [3] getmonero.org — About Monero — official project site, accessed August 6, 2026. [4] monero-project/monero — src/cryptonote_config.h — DIFFICULTY_TARGET_V2, read from source August 6, 2026. [5] Moneropedia — View key — official project site, accessed August 6, 2026. [6] monero-project/monero — network upgrade table — ring size 16 set at the v15 fork, August 13, 2022; read August 6, 2026. [7] CoinDesk — Binance to delist Monero — published February 6, 2024; delisting effective February 20, 2024. [8] getmonero.org — Roadmap — FCMP++ listed under "Coming Soon", checked August 6, 2026.
The honest part
Optional privacy has an adoption problem
Here is the number these comparisons usually bury. Of all ZEC in existence, 4.35M ZEC — 25.8% — is in a shielded pool; the rest sits transparent, as visible as a Bitcoin address. Monero has no such line item because there is nothing to opt into. [1] That is a real advantage of the mandatory model, and if your mental model is “Zcash is the private one”, this split is the correction.
- Shielded — 4.35M ZEC
- Transparent — 12.46M ZEC
Two caveats. The transparent share is dominated by exchange and custodial balances rather than users declining privacy — a statement about where ZEC is held, not about how strong shielded transactions are. And the percentage itself is defined differently by different trackers depending on whether you measure supply or transactions, and which pools you count; we take that apart in detail, and track total supply separately.
The relevant recent change is Ironwood. NU6.3 activated July 28, 2026 at block 3,428,143, sealing Orchard: shielded ZEC can no longer stay put, and every coin must exit through a public turnstile into Zcash's fifth shielded pool. That migration is 32.8% complete. It does not change the optional/mandatory trade-off, but it is the clearest evidence Zcash's shielded cryptography is still being upgraded rather than frozen. Trackers publish different Ironwood numbers because they publish different quantities; all three are reconciled here.
Decide
Which should you use?
The two designs fail in opposite directions, so answer by use case rather than by winner.
If you want privacy with zero configuration, Monero's model is the safer default.
When this is the right call
Mandatory privacy removes the failure mode where someone forgets to shield, uses a wallet defaulting to transparent, or deanonymizes themselves moving between the two. [3] If the user is not going to think carefully every time, a design that does not ask them to beats a stronger proof they might not use.
If you have to prove what you did, Zcash's viewing keys are the stronger tool.
When this is the right call
Auditors, accountants and regulated businesses need to disclose selectively — private from the public, provable to one party. Zcash splits that by capability: an incoming viewing key reveals received funds, a full viewing key reveals incoming and outgoing. Monero's view key covers incoming only, and its docs warn the resulting balance “should not be relied upon”. [5] For an audit trail, that gap decides it.
If you are judging the cryptography itself, Zcash's shielded pool is the stronger construction.
When this is the right call
A shielded Zcash transaction proves membership in the entire pool; a Monero transaction proves membership in a ring of 16. [6] Ring size is a parameter that has been raised over time, and Monero's roadmap lists full-chain membership proofs (FCMP++) under “Coming Soon” to close exactly this gap — but as of August 6, 2026 it is not activated. [8] Zcash also no longer needs a trusted setup: Halo 2 removed it, making the 2016 Sprout ceremony history rather than a live assumption.
If you need to move value through regulated venues, the transparent option is the practical difference.
When this is the right call
Zcash's t-addresses let exchanges and custodians handle ZEC with ordinary public-address accounting, separate from the shielded pool. Monero has no such fallback, and that has had consequences — Binance delisted XMR effective February 20, 2024. [7] This is the clearest case where Zcash's compromise is the point rather than a weakness, and also why so much ZEC sits transparent: 25.8% shielded is partly a measure of where coins are custodied.
Questions
Frequently asked questions
Is Zcash more private than Monero?
Not as a blanket statement. Per transaction, Zcash is stronger: a shielded spend draws its anonymity set from the entire shielded pool, while Monero hides each input in a ring of 16 outputs (the protocol floor since August 2022). But Zcash privacy is optional and only 25.8% of ZEC (4.35M ZEC) is shielded, whereas Monero applies privacy to every transaction with no opt-out. Stronger where used, versus universally applied.
Is Monero or Zcash better for privacy?
It depends whether you value the default or the ceiling. Monero is better if you want privacy that cannot be misconfigured, since it is mandatory. Zcash is better if you want the strongest cryptography for the transactions you do shield, and if you may need to disclose activity selectively to an auditor later. Any comparison that picks a winner without naming that trade-off is not being straight with you.
Does Zcash have a max supply?
Yes — Zcash is hard-capped at 21,000,000 ZEC, the same cap Bitcoin uses, enforced by a halving emission schedule. ZecStats tracks issuance against that ceiling live.
Does Monero have a max supply?
No. Per getmonero.org (accessed August 6, 2026), "the emission is infinite": roughly 18.132 million XMR had been issued by the end of May 2022, after which tail emission of 0.6 XMR per 2-minute block began, which the project describes as under 1% inflation trending toward zero. It is a deliberate choice to keep paying miners after the main emission curve ends, and one of the clearest structural differences between the two coins.
Why is only part of Zcash shielded?
Because Zcash privacy is opt-in: transparent (t-) and shielded (z-) addresses coexist on one chain, and coins become private only when moved into a shielded pool. Right now 4.35M ZEC — 25.8% of supply — is shielded; the rest is as publicly visible as Bitcoin. Much of that transparent balance is exchange and custodial holdings rather than users declining privacy, but the number is real and is the standard critique of Zcash's model.
Did Zcash have a trusted setup?
Yes, originally. The 2016 Sprout ceremony generated the parameters for Zcash's first shielded pool; had every participant colluded, they could in principle have forged proofs. Zcash has since removed the requirement — the Halo 2 proving system needs no trusted setup and underpins both the Orchard pool (2022) and the Ironwood pool that activated in July 2026. The original ceremony now applies only to the legacy Sprout pool, which is closing.
Did Monero ever have a trusted setup?
Monero does not require one. Its range proofs are Bulletproofs, which the project's own documentation describes as "short non-interactive zero-knowledge proofs that require no trusted setup" (Moneropedia, accessed August 6, 2026). Because Monero uses ring signatures rather than zk-SNARKs, there is no structured reference string and no "toxic waste" to destroy.
Which is harder to trace, Zcash or Monero?
A fully shielded Zcash transaction encrypts amounts, addresses and the transaction graph — nothing is observable beyond the pool boundary, which is at least as opaque as Monero and arguably more so, since the anonymity set is the whole pool rather than a ring of 16. But unshielded Zcash activity is as traceable as Bitcoin, and Monero has no equivalent traceable mode. So Monero is harder to trace on average across all activity, while a shielded Zcash transaction is the harder individual target.