Shielded Bitcoin Proposal Aims to Bring Privacy to Bitcoin L1

A New York‑based cryptography lab, [[alloc] init], released a white paper on September 24 describing a metaprotocol called Shielded Bitcoin that would enable private transfers on Bitcoin without requiring a soft fork, separate blockchain, federation, or trusted operator.

How Shielded Bitcoin Works

The system stores encrypted notes and zero‑knowledge proofs in regular Bitcoin transactions. Bitcoin acts as a public bulletin board, ordering the encrypted data while remaining unaware of its contents. Independent indexer software scans the blockchain, verifies the cryptographic proofs, and reconstructs the private transaction history. Invalid data is ignored, and no single indexer decides validity.

Transaction Structure

• Each shielded transfer includes an encrypted note, a nullifier, and a ZK proof.
• The proof shows that input notes exist, are spent correctly, and that input value equals output value without revealing amounts or participants.
• Indexers ensure nullifiers are unique to prevent double‑spending.

Privacy Characteristics

On‑chain observers see only that a shielded transaction occurred, its timing, fee, and the number of notes involved. Amounts, sender, and recipient identities are hidden. Repeated fee‑paying addresses could still leak metadata, and a small user base would reduce anonymity.

Size and Cost

Shielded payloads are about 700 vbytes, roughly four times larger than a typical Bitcoin payment (100–200 vbytes). The researchers describe the added cost as “not catastrophic,” noting that a larger user base would increase the anonymity set.

Unfinished Entry and Exit Mechanism

The white paper focuses on transfers after Bitcoin is already inside the shielded system. A companion paper is planned to explain how Bitcoin can be moved into and out of the private layer using the lab’s Bitcoin PIPEs v2 research and witness encryption. Witness encryption remains experimental, with ciphertext sizes still in the terabyte range.

Community Reaction

Comments highlighted the Zcash influence, noting that Shielded Bitcoin adopts Zcash’s encrypted notes, nullifiers, and zero‑knowledge proofs without creating a new blockchain. Some industry voices praised the privacy advance, while others pointed out the lack of a trusted‑setup‑free proof system, the unfinished bridge, and the need for broader adoption to achieve meaningful privacy.

Next Steps

The researchers presented the work at BitDevs NYC and have run public “break‑it” challenges. Until the entry/exit mechanism is finalized, Shielded Bitcoin remains a research concept rather than a deployable privacy solution.