Shielded Bitcoin proposal aims for Zcash‑style privacy without protocol changes

Researchers from cryptography firm [alloc] init have published a paper describing “Shielded Bitcoin,” a design that would let Bitcoin payments hide amounts, senders and recipients while keeping the Bitcoin network’s consensus rules unchanged.

How the proposal works

The system would store encrypted payment records, called notes, on the Bitcoin blockchain. When a note is spent, a marker and a zero‑knowledge proof would be published, showing that the spender owned the funds and that no new bitcoins were created. The proof would keep the transaction amount, sender and recipient hidden.

Differences from Zcash

Unlike Zcash, which validates private payments inside its own blockchain, Shielded Bitcoin would leave verification to separate software that anyone could run. Consequently, a Bitcoin transaction could be confirmed even if the embedded private payment failed its own checks.

Unresolved technical issues

The 56‑page specification does not detail how actual BTC would be deposited into or withdrawn from the encrypted ledger. The authors say those mechanisms will be addressed in a future paper using a technique called PIPEs.

Critics note that the design relies on a trusted cryptographic setup, that transaction fees remain visible, and that the lack of an in‑protocol deposit/withdrawal method means users would be dealing with synthetic representations of BTC.

Potential costs

Estimated size for a private transfer is about 700 virtual bytes, compared with 100–200 bytes for a standard Bitcoin transaction, implying roughly four times higher miner fees at the same fee rate.

Community reaction

Developers and Zcash supporters have expressed both interest and caution, highlighting the trade‑offs of a “synthetic ledger” and the need for further research before any deployment.