Researchers Propose Shielded Bitcoin for Enhanced Privacy Without Protocol Changes

Three cryptography researchers want to bring serious privacy to Bitcoin — and they think they can do it without touching a single line of Bitcoin’s core code.

Clara Shikhelman, Mikhail Komarov, and Aleksei Moskvin from Alloc Init put forward a system they’re calling Shielded Bitcoin. The idea is pretty straightforward on the surface: use zero-knowledge proofs to hide transaction amounts, senders, and receivers, all without requiring a soft fork. No protocol change. No miner vote. No years-long political battle inside the Bitcoin developer community. The proposal leans hard on Zcash’s architecture — encrypted notes, public nullifiers to mark coins as spent, and ZK proofs for validation — but it doesn’t try to clone Zcash. Bitcoin stays Bitcoin.

No new blockchain needed.

How the Shielded Layer Actually Works

The core mechanic here is that Bitcoin gets used as what the researchers call a neutral publication layer. Transactions get recorded and ordered on Bitcoin’s existing chain, but the sensitive details — who sent what to whom — stay hidden inside the shielded system. Separate actors called indexers handle the heavy lifting of verifying zero-knowledge proofs and making sure nobody double-spends inside the shielded pool. Bitcoin miners don’t need to do any of that. They just keep doing what they’ve always done.

It’s a clever separation of concerns. Miners handle ordering and finality. Indexers handle privacy validation. And users get a shielded experience without waiting for a consensus-level change that might never come. The researchers clearly designed it this way on purpose — getting any privacy feature merged into Bitcoin’s base protocol is notoriously hard, and the Shielded Bitcoin approach basically sidesteps that entire fight.

The Zcash comparison is unavoidable. Shielded Bitcoin borrows the encrypted notes model and the nullifier mechanism directly from Zcash’s design. But unlike Zcash, it doesn’t need its own chain or its own consensus. It sits on top of Bitcoin, using Bitcoin’s immutability and decentralization as infrastructure. Whether that’s a strength or a limitation probably depends on who you ask.

The Anonymity Set Problem

Not everyone’s buying it. Developer Vadim Zavodil went straight at what’s probably the proposal’s most uncomfortable weakness: the anonymity set. Privacy systems like this only work well when there are enough participants that any single transaction basically disappears into the crowd. Zcash spent years building that pool. A brand-new shielded system starts with basically nobody in it.

Zavodil’s point is hard to argue with. If you’re one of twenty people using a shielded pool, an outside observer can probably figure out who’s transacting with who just by watching the timing and flow of deposits and withdrawals. The math on anonymity sets is brutal when the numbers are small.

And the researchers themselves don’t dodge this. They admitted — directly — that large initial deposits don’t guarantee a meaningful anonymity set. If few participants are involved, observers can potentially deduce transaction relationships anyway. That’s a real problem, not a theoretical one. It’s basically the same bootstrapping challenge that every privacy coin has faced, and it doesn’t have an easy answer.

More context: New York Lab Unveils Shielded Bitcoin for Enhanced Privacy Using Zero-Knowledge Proofs

So the proposal works in theory. Whether it works in practice depends almost entirely on how many people actually use it.

Quantum Resistance and Industry Reaction

Pierre-Luc Dallaire-Demers, founder of Pauli Group, flagged another gap: quantum resistance. The current Shielded Bitcoin design doesn’t protect against quantum computing threats. Dallaire-Demers said he’s interested in developing a post-quantum version, and he sees that work as increasingly relevant if Bitcoin eventually adopts post-quantum signatures more broadly.

That’s probably not an immediate crisis — quantum computers capable of breaking current cryptographic schemes aren’t here yet — but it’s the kind of structural gap that tends to matter more as time goes on. If Shielded Bitcoin gains traction and then quantum computing advances faster than expected, retrofitting quantum resistance into an already-deployed system gets complicated fast.

On the other side of the debate, Eli Ben-Sasson — co-author of the original Zerocash paper and CEO of StarkWare — said he sees the proposal positively. Ben-Sasson tied it back to the original Zerocash goal, which was always about bringing privacy to Bitcoin specifically, not spinning up a separate chain. He said he’s interested in seeing zero-knowledge proofs applied to Bitcoin’s base layer, and he views the Shielded Bitcoin direction as aligned with that original intent.

That’s not a small endorsement. Ben-Sasson is one of the people who built the theoretical foundation that Zcash and similar systems rest on. His interest doesn’t mean the proposal succeeds, but it probably means the cryptography community takes it more seriously than it might otherwise.

Related: Merkle Value Targets Indias Institutional Bitcoin Market with Veteran CEO at the Helm

The broader debate it’s kicked off is worth watching. Privacy in Bitcoin has been a contested topic for years — some in the community see it as essential, others worry about regulatory blowback or misuse. Shielded Bitcoin doesn’t resolve any of those tensions. It just offers a technically interesting path that avoids the consensus-change bottleneck.

Whether enough users actually adopt it to make the anonymity set meaningful — that’s the real question nobody can answer yet. The researchers know it. Zavodil knows it. And Ben-Sasson, for all his support, probably knows it too.

Dallaire-Demers, for his part, is already thinking about the next version.

Hub: Bitcoin price, news, and analysis