‘Shielded Bitcoin' Paper Proposes Private BTC Transfers
This article originally appeared in Galaxy Research's weekly newsletter. Subscribe to get timely insights delivered to your inbox every Friday morning.
On Thursday, Clara Shikhelman, Mikhail Komarov, and Aleksei Moskvin, researchers at cryptography R&D firm [[alloc] init], published Shielded Bitcoin. It is a protocol for private BTC transfers directly on the Bitcoin L1, with no soft fork or sidechain. In short, it takes Zcash’s shielded pool design (encrypted notes, public nullifiers, and zero-knowledge proofs) and runs it as a metaprotocol that uses Bitcoin only to publish data.
Value is held as “encrypted notes.” Transfers are data envelopes posted via OP_RETURN. The envelope carries encrypted notes for recipients and a proof that the sender owns the inputs and didn’t inflate the supply. Indexers watch Bitcoin for Shielded Bitcoin transfers to replay every envelope in block order and discard invalid ones.
Unlike Shielded CSV, the closest prior proposal, all data would live onchain, so a wallet could recover its funds from its seed alone. The abstract explicitly noted that peg-in and peg-out (the way BTC enters the system) are outside the paper’s scope.
The paper lands in the middle of perhaps the strongest privacy trade in the history of crypto.
The paper lands in the middle of perhaps the strongest privacy trade in the history of crypto. Zcash (ZEC) topped $1,600 this week and now ranks No. 9 by market cap among cryptocurrencies at ~$26 billion. It is up ~90% in 30 days and ~2,500% over the past year. The rally has several catalysts. Grayscale’s Zcash ETF (ZCSH) began trading on Aug. 25 and has since drawn more than $250 million in net inflows. On Sept. 16, Paradigm co-founder Matt Huang disclosed that the firm holds ZEC and called Zcash a private complement to Bitcoin. This is yet another crypto fund coming out to the market and validating ZEC as a clear expression of the privacy trade (Multicoin did this earlier this year). Shielded Bitcoin is an attempt to bring that privacy to Bitcoin itself. As it stands, users have to use other blockchains like Ethereum, Monero, Solana, or Zcash to achieve private digital transactions.
The day before the paper came out, Citrea, a Bitcoin L2 backed by Galaxy Ventures, acquired Crest, a private Bitcoin wallet. Citrea called this acquisition an attempt to “bring Zcash-style privacy to Bitcoin.”
This comes on the heels of NEAR pursuing the same demand for privacy. It recently announced confidential perps by default and confidential limit orders. NEAR is also +150% in the past month. The Zcash and NEAR narratives reinforce each other as well. The Zcash wallet ZODL is among the largest referral sources on NEAR Intents.
Our take
For most of this year and last year, Bitcoin maximalists scoffed at ZEC’s run. The common view among this group has been that it’s a “coordinated pump heading for a rug.” Maxis have been saying this since $200-$300, and the token has proceeded to 5x since then. Shielded Bitcoin gives that camp something to lean on. It’s a clever design and is a direct shot at the “private complement to Bitcoin” thesis now priced into ZEC, because it relies only on Bitcoin.
Likely the hardest part of the design isn’t in the paper, though. Peg-in and peg-out, the mechanisms that lock and release real BTC, are deferred to a future PIPEs v2 paper. (That’s PIPEs as in Polynomial Inner Product Encryption, not the mechanism DATs used to raise money.) The authors explicitly decline to claim that entry and exit are trustless or censorship-resistant, which really matters. Bridges have repeatedly been the most exploited component in crypto: Ronin, Wormhole, Nomad, KelpDAO, just to name a few. Novel ZK circuits also need to be battle tested; Zcash’s own Orchard Pool carried a soundness bug for four years through professional audits (which developers have since responded to with the Ironwood upgrade).
The design of Shielded Bitcoin also leans on Bitcoin Core v30’s looser OP_RETURN relay policy, the same change many maximalists fought hard against last year. Whichever architecture wins, the demand side of privacy in crypto looks more durable than in past cycles. This is partly due to the rapidly changing threat model.
Flock Safety is probably the clearest real-world example of privacy concerns. The company runs about 120,000 AI-enabled license-plate cameras across the U.S.
Critics argue the danger is in the network, since police can run algorithms across it to flag movement patterns as “suspicious”. After reports of officers abusing the system, the company cut its default data retention from 30 days to seven.
Transparent blockchains are global, permanent, and free for anyone to query. Clustering addresses onchain has been a mature capability for years. The bottleneck has always been linking an onchain public address to a real person’s identity, and AI advancements will likely remove this obstacle.
Earlier this year, researchers from ETH Zurich and Anthropic showed that LLM agents can re-identify pseudonymous Hacker News users with high precision from their profiles alone.
It’s not unreasonable to expect a future in which AI can use a tweeted transaction hash or one withdrawal from a KYC’d exchange to identify an individual's entire history of onchain activity. The blockchain never forgets.
Grayscale made this same argument when it launched ZCSH: as AI changes how financial activity can be monitored, demand for true financial privacy should only grow. The privacy trade is a response to surveillance getting more automated and permanent. We’ll be watching it closely.
Legal Disclosure:
This document, and the information contained herein, has been provided to you by Galaxy Digital Inc. and its affiliates (“Galaxy Digital”) solely for informational purposes. This document may not be reproduced or redistributed in whole or in part, in any format, without the express written approval of Galaxy Digital. Neither the information, nor any opinion contained in this document, constitutes an offer to buy or sell, or a solicitation of an offer to buy or sell, any advisory services, securities, futures, options or other financial instruments or to participate in any advisory services or trading strategy. Nothing contained in this document constitutes investment, legal or tax advice or is an endorsement of any of the stablecoins mentioned herein. You should make your own investigations and evaluations of the information herein. Any decisions based on information contained in this document are the sole responsibility of the reader. Readers should consult with their own advisors and rely on their independent judgement when making financial or investment decisions.
Participants, along with Galaxy Digital, may hold financial interests in certain assets referenced in this content. Galaxy Digital regularly engages in buying and selling financial instruments, including through hedging transactions, for its own proprietary accounts and on behalf of its counterparties. Galaxy Digital also provides services to vehicles that invest in various asset classes. If the value of such assets increases, those vehicles may benefit, and Galaxy Digital’s service fees may increase accordingly. The information and analysis in this communication are based on technical, fundamental, and market considerations and do not represent a formal valuation. For more information, please refer to Galaxy’s public filings and statements. Certain asset classes discussed, including digital assets, may be volatile and involve risk, and actual market outcomes may differ materially from perspectives expressed here.
For additional risks related to digital assets, please refer to the risk factors contained in filings Galaxy Digital Inc. makes with the Securities and Exchange Commission (the “SEC”) from time to time, including in its Quarterly Report on Form 10-Q for the quarter ended September 30, 2025, filed with the SEC on November 10, 2025, available at www.sec.gov.
Certain statements in this document reflect Galaxy Digital’s views, estimates, opinions or predictions (which may be based on proprietary models and assumptions, including, in particular, Galaxy Digital’s views on the current and future market for certain digital assets), and there is no guarantee that these views, estimates, opinions or predictions are currently accurate or that they will be ultimately realized. To the extent these assumptions or models are not correct or circumstances change, the actual performance may vary substantially from, and be less than, the estimates included herein. None of Galaxy Digital nor any of its affiliates, shareholders, partners, members, directors, officers, management, employees or representatives makes any representation or warranty, express or implied, as to the accuracy or completeness of any of the information or any other information (whether communicated in written or oral form) transmitted or made available to you. Each of the aforementioned parties expressly disclaims any and all liability relating to or resulting from the use of this information. Certain information contained herein (including financial information) has been obtained from published and non-published sources. Such information has not been independently verified by Galaxy Digital and, Galaxy Digital, does not assume responsibility for the accuracy of such information. Affiliates of Galaxy Digital may have owned, hedged and sold or may own, hedge and sell investments in some of the digital assets, protocols, equities, or other financial instruments discussed in this document. Affiliates of Galaxy Digital may also lend to some of the protocols discussed in this document, the underlying collateral of which could be the native token subject to liquidation in the event of a margin call or closeout. The economic result of closing out the protocol loan could directly conflict with other Galaxy affiliates that hold investments in, and support, such token. Except where otherwise indicated, the information in this document is based on matters as they exist as of the date of preparation and not as of any future date, and will not be updated or otherwise revised to reflect information that subsequently becomes available, or circumstances existing or changes occurring after the date hereof. This document provides links to other Websites that we think might be of interest to you. Please note that when you click on one of these links, you may be moving to a provider’s website that is not associated with Galaxy Digital. These linked sites and their providers are not controlled by us, and we are not responsible for the contents or the proper operation of any linked site. The inclusion of any link does not imply our endorsement or our adoption of the statements therein. We encourage you to read the terms of use and privacy statements of these linked sites as their policies may differ from ours. The foregoing does not constitute a “research report” as defined by FINRA Rule 2241 or a “debt research report” as defined by FINRA Rule 2242 and was not prepared by Galaxy Digital Partners LLC. Similarly, the foregoing does not constitute a “research report” as defined by CFTC Regulation 23.605(a)(9) and was not prepared by Galaxy Derivatives LLC. For all inquiries, please email [email protected].
©Copyright Galaxy Digital Inc. 2026. All rights reserved.