Researchers have proposed a way to hide Bitcoin transfers without changing the network itself. The project is called Shielded Bitcoin and borrows its architecture from Zcash. For a network where anyone can see every transaction, that is a real shift.
What exactly did the researchers propose?
Every Bitcoin transaction stays on the public blockchain forever. Amounts, wallet addresses and the links between them can be viewed by anyone, from an analytics firm to an exchange to a random visitor on a block explorer.
On September 24, a team from the cryptography firm Alloc Init published a paper called Shielded Bitcoin. The authors, Clara Shikhelman, Mikhail Komarov and Aleksei Moskvin, described a system that hides transfer amounts, senders, receivers and links to previously spent funds.
To do this, they use encrypted records called notes and zero-knowledge proofs. In plain terms, such a proof confirms an action followed the protocol's rules without revealing the action itself. In the paper, the authors describe Bitcoin as becoming a neutral publication and ordering layer for the system.
How does the hiding mechanism work?
The main difference from Zcash lies in who checks the rules. In Zcash, that job belongs to miners built into the network's consensus. In Shielded Bitcoin, separate software called indexers takes over that role.
Each note is an encrypted record of a coin amount known only to its owner. When the owner spends it, a nullifier appears. It proves a specific note was already used, without revealing which one.
Indexers handle several tasks at once.
- Proof verification: they confirm that each zero-knowledge proof is valid and the transaction is genuine.
- They track shielded coins so the same one cannot be spent twice.
- They rebuild the current state of the shielded system using only Bitcoin's public data.
- They mark spent notes with nullifiers without revealing what those notes contained.
The design closely mirrors Zcash. It also uses encrypted notes, public nullifiers and proofs of transaction validity. The key difference is that Shielded Bitcoin runs no blockchain or consensus of its own.
Why doesn't this need a Bitcoin protocol upgrade?
Changing Bitcoin's rules normally requires a soft fork, an upgrade that miners and nodes must adopt. Shielded Bitcoin skips that step entirely.
Developers write encrypted notes directly into ordinary Bitcoin transactions, using capabilities the network already has. Bitcoin itself acts only as a notary, recording the order of events and when something happened, without knowing what is hidden inside the record.
All the verification logic, double-spend checks and state updates sit in a separate indexer layer outside the base protocol. That means the network never has to vote on a rule change or wait for a new consensus to activate.
Has anyone tried to hide Bitcoin before?
Attempts to add privacy to Bitcoin go back years. CoinJoin mixes coins from several users in one transaction, while Confidential Transactions hide the transfer amount but not always the sender or receiver. None of these approaches hides the amount, sender and receiver all at once.
Bringing Zcash-level privacy to Bitcoin isn't a new idea either. Even before Zcash itself existed, Eli Ben-Sasson worked on this exact goal in the Zerocash paper. Shielded Bitcoin is the first attempt in years to fully realize that idea without changing the network's consensus.
Why isn't everyone convinced?
Developer Vadim Zavodil criticized the proposal on X. He argued that most of the cryptographic stack already exists in Zcash, built years earlier, and questioned how much real privacy a newcomer could offer.
"Privacy is a function of the crowd. Zcash has a real shielded pool built over years. A brand new metaprotocol starts at zero, so your first private transfer hides in a crowd of one."
- Vadim Zavodil, developer, from a post on X, September 25, 2026
The Alloc Init researchers acknowledged a similar limit: large deposits alone do not guarantee a large anonymity set. Observers could still narrow down who is involved if a small number of wallets create most of the notes or behave in a distinctive way.
Pierre-Luc Dallaire-Demers, founder of the post-quantum cryptography firm Pauli Group, called the construction interesting but not quantum resistant at all. Eli Ben-Sasson, a Zerocash co-author and CEO of StarkWare, backed the direction instead, noting that bringing privacy to Bitcoin was the original goal behind the Zerocash paper that came before Zcash.
What does this mean for Bitcoin holders?
For now, Shielded Bitcoin exists only as a research paper, with no working code or live network. Anyone who wants to buy Bitcoin with hryvnia today will see no difference: the mechanism hasn't been audited or built into any wallet yet.
Even if the idea reaches production, practical questions remain. Encrypted notes are heavier than ordinary transactions, and verifying the whole system's correctness will depend on separate indexer software sitting outside Bitcoin itself.
Bitcoin still works as a public ledger where every transaction is visible on-chain. If indexers and the underlying cryptography reach a working state, users will get a choice between open transfers, as it works now, and hidden ones running through an extra layer on top of the familiar protocol.
Comments
Your email address will not be published. Required fields are marked *