Researchers have proposed Shielded Bitcoin, a privacy system that would enable encrypted transfers on Bitcoin's blockchain without requiring changes to the network's consensus rules. The proposal, published by cryptography researchers Clara Shikhelman, Mikhail Komarov, and Aleksei Moskvin of firm [alloc] init, adapts the encrypted payment design used by Zcash.
Under the proposed system, bitcoin-denominated value would be held in encrypted records called notes. When spending a note, the sender would publish a marker showing it had been used, along with a mathematical proof of ownership and that no new funds were created. The transaction amount, sender, and recipient would remain hidden.
The key difference from Zcash lies in how verification works. Zcash's blockchain verifies payment proofs itself, whereas Shielded Bitcoin would publish transfer data on Bitcoin while leaving verification checks to separate software that anyone could run. This means a Bitcoin transaction could be confirmed even if the private payment failed Shielded Bitcoin's own verification checks.
Current Privacy Challenges
Bitcoin transactions currently expose amounts and addresses permanently. Once an address is linked to a company or individual, other payments associated with it become easier to trace. Privacy has emerged as a practical concern as developers pursue use cases like payroll, business payments, and everyday spending.
Zcash has recently seen increased adoption of its privacy features. Its shielded pools held approximately 4.9 million ZEC on Friday, representing roughly 29% of issued coins. Zcash recorded approximately 63,000 shielded transactions in its busiest week for private transfers since 2022.
Significant Unresolved Issues
The 56-page specification leaves critical questions unanswered. The proposal does not explain how ordinary BTC would enter the system or be released during withdrawals. The authors reserve those mechanisms for a separate paper using a technique called PIPEs, designed to lock a Bitcoin signing key until specified conditions are met.
Critics have raised several concerns. Transaction fees would be substantially higher than standard Bitcoin transfers, estimated at roughly four times the cost. The proposal also maintains visible fee payments that could reveal the wallet paying to publish a private transfer. Additionally, the system requires a cryptographic setup whose security depends on at least one participant acting honestly.
Mert Mumtaz, cofounder of Helius and a Zcash proponent, described the proposal as "a synthetic ledger with significant tradeoffs" and noted the absence of an in-protocol deposit and withdrawal mechanism, effectively creating synthetic rather than direct BTC holdings.
There is no launch date for Shielded Bitcoin as of the proposal's publication date.
