Researchers Publish ‘Zcash-Style’ Design for Private Bitcoin Transfers

Researchers at Bitcoin cryptography developer [[alloc] init] have revealed a design for “ZCash-style” non-public transfers that might disguise the sender, recipient and quantity of a cost whereas operating on the prevailing Bitcoin community.

The 56-page paper, dated September 24, 2026, is written by Clara Shikhelman, Mikhail Komarov and Aleksei Moskvin.

The staff has “put numerous work into considering fastidiously in regards to the safety of Shielded Bitcoin and about what data the protocol reveals,” Shikhelman tweeted. Komarov called it “ZCash-style privateness on the Bitcoin L1 through PIPEs v2.”

Scott Odell, chief working officer of [[alloc] init], tweeted that the agency had been “cooking on this for fairly some time,” and described it as a contribution to creating Bitcoin “non-public, with out altering Bitcoin.”

Worth in Shielded Bitcoin is held as encrypted “notes,” and every switch carries a zero-knowledge proof that the sender controls the notes being spent and that inputs and outputs stability. A public marker known as a nullifier lets software program reject double spends with out revealing which observe was used.

Zcash enforces these guidelines by way of its personal blockchain. Shielded Bitcoin publishes transfers as knowledge on Bitcoin, which information them with out checking them, whereas separate software program known as indexers verifies the proofs and rebuilds the shielded state.

The paper contrasts this with Shielded CSV, a 2025 Bitcoin proposal during which coin homeowners should preserve their very own transaction knowledge, which usually can’t be recovered from the chain.

Timing, charges and the variety of inputs and outputs stay public, the authors write. “Like Zcash and Monero, Shielded Bitcoin preserves the privateness of who paid whom and the way a lot, not {that a} shielded switch occurred,” the paper states.

Peg-in and peg-out

The paper covers solely transfers contained in the system. How BTC enters and leaves is left to a separate paper constructed on Bitcoin PIPEs v2, earlier [[alloc] init] analysis that encrypts a Bitcoin signing key so it may be recovered solely with a legitimate proof, in accordance with the agency’s web site.

The present model makes use of the Groth16 proof system, whose safety will depend on an truthfully run trusted setup ceremony. It publishes every switch in an OP_RETURN output, which involves 625 vbytes for a switch with two inputs and two outputs, in accordance with the paper.

That depends on the bigger OP_RETURN default in Bitcoin Core v30, a contested change that node operators can reverse, so relay will depend on sufficient nodes and miners retaining it, the paper notes.

An appendix sketches an optionally available compliance layer during which a “Belief Authority” certifies accredited deposits, letting establishments confirm a observe’s origins with out exposing the switch graph. Notes with out that proof would stay legitimate.

Zcash, whose design Shielded Bitcoin borrows, now trades by way of regulated funds within the U.S. and Europe. Grayscale’s Zcash ETF started buying and selling on NYSE Arca on August 25, and 21Shares listed Europe’s first Zcash exchange-traded product on Euronext Paris and Amsterdam on September 22.

ZEC was buying and selling at $1,592 on September 25, up 4% over the previous 24 hours, with a seven-day excessive of $1,658.86, per CoinGecko data.