Bitcoin payments today are like paying with a check written in permanent ink: anyone can see who paid whom and how much. A new research paper proposes changing that — by bringing Zcash-style hidden payments to Bitcoin without touching the network’s rules at all.
By Marcus Johnson | September 28, 2026
The proposal, called Shielded Bitcoin, was published last week by researchers Clara Shikhelman, Mikhail Komarov and Aleksei Moskvin of cryptography firm [alloc] init, according to CoinDesk. It is a 56-page specification that describes how bitcoin-denominated value could move inside encrypted records — hiding the amount, the sender and the recipient — while ordinary Bitcoin keeps running exactly as it does today. For regular bitcoin holders, the idea touches a very real pain point: every bitcoin payment you have ever made is permanently public, and once one of your addresses is linked to your name, following the rest of your financial life becomes dramatically easier.
The Hook: Privacy Is Becoming a Business Problem, Not Just a Nerd Problem
Why should an ordinary investor care about a dense cryptography paper? Because privacy is quickly turning into a practical requirement for crypto’s next phase. Developers trying to use cryptocurrencies for payroll, business payments and everyday spending keep running into the same wall, CoinDesk reports: an ordinary bitcoin transaction permanently exposes amounts and addresses. A company paying salaries in bitcoin would effectively publish its entire payroll — and each employee’s balance history — to the world.
The timing also matters. Privacy coin Zcash has been on a remarkable run. By early September, ZEC had gained more than 2,300 percent over the preceding year and crossed the 1,000 USD mark, later extending its rally above 1,600 USD. Its shielded pools — the hidden portion of the network where private transfers happen — held about 4.9 million ZEC as of Friday, roughly 29 percent of all issued coins, per CoinDesk calculations using ZecStats data. Zcash recorded roughly 63,000 shielded transactions last week, its busiest week for private transfers since 2022. Investors are clearly voting for privacy with their wallets. The Shielded Bitcoin paper asks the obvious follow-up question: what if Bitcoin itself could offer something similar?
On-Chain Evidence: How the System Would Actually Work
Think of it as a set of sealed envelopes carried by the regular mail system. In the proposal, bitcoin-denominated value would be held in encrypted records called notes. When you spend one, you publish a small marker showing it has been used, plus a mathematical proof that you owned the funds and did not conjure new ones out of thin air. The amount, sender and recipient stay hidden.
- Bitcoin stores the data, but checks nothing — the encrypted transfer records ride along on the regular Bitcoin blockchain.
- Separate software verifies the proofs — anyone could run it, similar to how anyone can run a node.
- Viewing keys allow selective disclosure — you could show your transaction history to an accountant or auditor without handing over the power to spend your funds.
- Heavier transactions — a private transfer is estimated at roughly 700 virtual bytes, versus 100 to 200 for an ordinary bitcoin transaction, putting miner fees at roughly four times as much at an equivalent fee rate, according to researcher Mikhail Komarov.
Here is the crucial design difference from Zcash: on Zcash, the network itself validates the private-payment proofs. With Shielded Bitcoin, the checks happen outside Bitcoin’s consensus. That is both the genius and the gamble of the design — a Bitcoin transaction could be confirmed even if the private payment recorded inside it failed Shielded Bitcoin’s own checks.
The Core Conflict: Smart Idea, Big Gaps
The paper is honest about what it does not answer. The 56-page specification does not explain how ordinary BTC would enter the system, or how it could be withdrawn. The authors reserve those mechanisms for a separate paper built on a technique called PIPEs, designed to lock a Bitcoin signing key until specified conditions are met. Their claim that users stay in control of their funds explicitly excludes the deposit and withdrawal steps.
Critics have pounced on exactly those gaps. Mert Mumtaz, cofounder of Solana infrastructure firm Helius and a Zcash proponent, called the proposal “a synthetic ledger with significant tradeoffs” on X. He pointed to a trusted setup — a one-time cryptographic ceremony whose safety depends on at least one participant acting honestly — as well as no fee anonymization, meaning the wallet paying to publish a private transfer could still be visible. “There is no in-protocol mechanism for getting actual BTC in or out,” he wrote, “which means you are holding synthetics.” He added that he respects the work and that taking notes from Zcash is a welcome shift, but estimated the proposal would need years of additional research and development.
Zcash mining and holding company Cypherpunk was more welcoming, though it does not see the design as competition: “Privacy works best when built into the base layer. Not requiring Bitcoin changing is this design’s biggest selling point, and also its biggest drawback,” the company wrote, adding that “more privacy on Bitcoin is good for everyone.”
There is history here, too. The Zerocoin proposal in 2013 was originally conceived as a privacy extension for Bitcoin itself. It evolved into the Zerocash research and eventually launched as the separate Zcash cryptocurrency in 2016. Shielded Bitcoin is, in a sense, an attempt to bring that idea home. Meanwhile, Ethereum is reviewing its own proposal — EIP-8182 — for a shared private pool that would let people transfer ether and tokens without revealing payment details, with authors citing payroll, treasury management and donations as underserved use cases.
Market Implications: What This Means for Your Portfolio
First, temper your expectations on timing. There is no launch date for Shielded Bitcoin as of Friday, and the deposit-and-withdrawal mechanism — the part that decides whether you would hold real bitcoin or a synthetic claim on it — does not exist yet. This is research, not a product you can use next month.
Second, the market signal is worth watching. Bitcoin is trading around 84,500 USD as this research circulates, and the privacy theme is clearly hot — ZEC’s more-than-2,300-percent yearly gain and its multi-year highs in shielded activity show where speculative attention is flowing. If a credible path to private bitcoin payments ever materialized, it could strengthen Bitcoin’s case for the payments and payroll use cases that stablecoins currently dominate.
Third, keep an eye on the regulatory weather. Privacy technology in crypto sits under permanent scrutiny — mixers have been sanctioned, and privacy coins have been delisted from major exchanges in various jurisdictions. Any system that hides bitcoin sender, amount and recipient at scale would inevitably attract the same attention, whatever its technical merits.
The Verdict
Shielded Bitcoin is a genuinely clever idea: bolt Zcash-grade privacy onto Bitcoin without asking the world’s most conservative blockchain to change a single rule. It is also, by its authors’ own admission, incomplete — no way in, no way out, a trusted setup, higher fees and visible timing all remain unsolved or acknowledged limitations. For everyday bitcoin holders, nothing changes today. What the paper really represents is proof that serious cryptographers are now competing to fix Bitcoin’s privacy problem — and that the demand driving Zcash’s rally is not going unnoticed by the largest crypto network of all. Watch this space, but do not rearrange your portfolio around it.
The cryptocurrency market remains highly volatile. This article is for informational purposes only and does not constitute financial advice.
A 56 page spec from [alloc] init and somehow no soft fork needed. Hiding amounts and senders without touching consensus rules sounds great until you remember someone still has to operate the shielded pools. Curious what the fee premium ends up being.
Same question here. Monero and Zcash both took years to get usable wallets for shielded transfers. If Shielded Bitcoin needs special tooling anyway it lands closer to a sidechain with extra steps.
disagree on the sidechain framing, it settles back on mainchain with proofs attached. the tooling point stands tho, zcash took forever to make shielded sends one click
proofs attached doesnt change that you still trust the operator set to include your tx. if inclusion runs through two or three wallet providers the mainchain settlement is doing less work than you think
the spec does let you exit to mainchain if operators stall, so worst case is delay not theft. still agree that two wallet providers running inclusion is fragile
delay not theft holds until operators stall often enough that people stop opting in. griefing an exit lane is cheaper than stealing from it
Fair point, though the spec settles back to mainchain with proofs attached, so operators can censor you into a delay, they cannot touch the funds. The inclusion problem running through two wallet providers is real concentration tho.
took zcash roughly six years to get one click shielded sends. if wallet teams treat this as optional tooling it stays a research paper just as long
six years is generous tbh, zcash only got there after endless wallet churn. bitcoin wallet devs move even slower when anything consensus adjacent is involved
six years is the optimistic case too. shielded sends only got usable once wallets bundled them by default. if this stays behind an advanced flag it never leaves the spec page
opex is the part nobody prices in. someone has to run those shielded pools and that entity becomes a de facto gatekeeper, we literally watched this play out with zk-rollup sequencers. bet the fee premium ends up way higher than the paper estimates
56 pages and the operator question still lands in the too hard pile. if the answer were three companies the paper would say so loudly
The permanence angle is what gets me. One address linked to my name years ago and every purchase since is public forever. Would happily pay extra for encrypted records even at a few more sats per tx.
a few extra sats per tx is underselling it, zcash shielded sends ran way pricier than transparent ones for years. but yeah, id still take the option
same, and its not even about hiding anything sketchy. my landlord, my employer, whoever runs a chainalysis subscription, they can all reconstruct my spending from one leaked address. optionality is worth paying for
Same boat. Ran my old addresses through a free explorer once and reconstructed two years of my spending in about ten minutes. That should not be possible by default.
56 pages and still no answer on who runs the shielded pools. if its three companies holding the keys thats just banks with zk lipstick
spec says shielded pool operators only see encrypted notes, they cant touch balances like a custodian. the real question is whether anyone besides two or three wallet providers actually implements the tooling
wallets are the bottleneck not the math. shikhelman and the team wrote the spec, now someone has to ship the boring UX half
the boring UX half is the whole product tho. if sparrow or electrum dont ship it day one, 99 percent of users never even see it
spec says pool operators rotate and cant move funds, so more coordinator than custodian. still agree the operator set concentration is the thing to watch
4.9M ZEC already sitting in shielded pools, 29 percent of supply. the demand exists, bitcoin just needs an implementation the wallet teams dont quietly ignore
the no rule change part is doing heavy lifting here. an overlay means no fork drama, but opt-in privacy has a cold start problem zcash knows all too well
4.9M ZEC sitting in shielded pools proves the demand is real. if bitcoin ships this as a default checkbox instead of a dev tool it actually moves the privacy baseline
default checkbox is everything. 4.9M ZEC in shielded pools came after wallets made it one click, nobody toggles privacy on manually
The no rule change framing is doing a lot of heavy lifting. No soft fork, fine, but miners relaying transactions whose amounts they cannot validate is a policy change in everything except name. Shikhelman and team obviously know this, would love a follow-up on the relay incentive question
no soft fork means no miner veto, which is the quiet win here. the tradeoff is nobody can force operators to include your tx either. opt in cuts both ways