- Published on
Researchers propose Zcash-style private Bitcoin transfers without a soft fork
- Authors
- Name
- DeepHorus
Researchers at cryptography firm Alloc Init have proposed Shielded Bitcoin, a system for private Bitcoin transfers without requiring a soft fork. The paper, published Thursday by Clara Shikhelman, Mikhail Komarov and Aleksei Moskvin, introduces a privacy layer built on Bitcoin rather than a replacement blockchain. It aims to conceal transaction amounts, senders, receivers and links to previously spent funds, but remains a research proposal rather than a deployed feature.
Bitcoinâs base layer normally records public transactions, exposing addresses, amounts and payment histories on the ledger. Shielded Bitcoin draws on Zcashâs zero-knowledge proofs, which demonstrate that a transfer is valid without revealing its contents. The design also uses encrypted notes to hold value and public nullifiers to mark notes as spent. These elements would hide transaction details and the link between spending an earlier note and creating a new one.
Bitcoin would serve as a neutral publication and ordering layer, with separate indexers verifying zero-knowledge proofs, preventing double-spending and reconstructing the shielded systemâs state. Miners would not enforce the privacy protocol, and the proposal introduces neither a separate blockchain nor a new consensus mechanism. Avoiding a soft fork could sidestep a contentious network upgrade, making it easier to deploy optional privacy software. Adoption would nevertheless depend on users, wallet developers and operators supporting the additional infrastructure.
The approach could strengthen privacy without changing Bitcoinâs consensus rules, but it does not automatically make every transaction confidential. Separate indexers raise practical questions about availability, consistent state and what happens if operators disagree or disappear. The announcement does not provide a release date, implementation roadmap or evidence of production readiness, so Shielded Bitcoin is best viewed as a potential privacy layer, not an immediate upgrade to the network.
Developer Vadim Zavodil questioned whether a new system could deliver meaningful privacy immediately, arguing that much of its cryptographic stack already exists in Zcash. He emphasized that privacy depends on a sufficiently large crowd, because a new shielded pool starts without the anonymity set Zcash has built over years. The researchers acknowledged this limitation, noting that large deposits do not create anonymity by themselves. If a small group creates most notes or wallets behave distinctively, observers may still identify relationships between transfers.
Pierre-Luc Dallaire-Demers, founder of post-quantum cryptography company Pauli Group, called the construction interesting but ânot quantum resistant at all.â He later said he was exploring a fully post-quantum version, assuming Bitcoin eventually adopts post-quantum signatures. Confidential transfers therefore need scrutiny of the cryptographic assumptions that protect them against future computing capabilities. Zerocash co-author and StarkWare CEO Eli Ben-Sasson was more supportive, saying he had not read the paper but wanted to see its privacy and scalability vision materialize on Bitcoin.
The proposalâs significance is that it frames Bitcoin privacy as an application that can be layered above an unchanged base network, rather than requiring validators to enforce a new privacy protocol. Its prospects will depend on independent review, working implementations and evidence that users can participate without trusted operators becoming obvious points of control or failure. Researchers may also need to address anonymity-set risks and quantum resistance before private transfers gain broad credibility. Shielded Bitcoin may not overcome Bitcoinâs privacy trade-offs, but it advances the debate over how zero-knowledge technology could fit around the existing chain.
