Monero, a leading privacy coin, has maintained stable on-chain transaction activity throughout 2024-2025, according to a report by TRM Labs. This activity remains higher than pre-2022 levels, despite major exchanges like Binance and Coinbase delisting or restricting Monero. While ransomware groups prefer receiving payments in Monero (XMR), most actual ransom payments continue to be made in Bitcoin (BTC).