A NEW PAPER PUTS PRIVATE TRANSFERS ON BITCOIN WITH NO SOFT FORK AND NO PERMISSION — AND ADMITS IN ITS OWN ABSTRACT THAT GETTING BITCOIN IN AND OUT IS NOT IN THE PAPER
Three researchers at [[alloc] init], Clara Shikhelman, Mikhail Komarov and Aleksei Moskvin, published a paper on September 24, 2026 called Shielded Bitcoin. Value is held as encrypted notes, spends are marked by public nullifiers, validity comes from zero-knowledge proofs. Their abstract says it plainly: the protocol requires “no changes to Bitcoin consensus.” No soft fork. No activation fight. No permission from anybody.
Before anyone calls that a fix, read what it is fixing. Section 10 of the whitepaper describes bitcoin’s privacy as public transactions plus anonymous keys, and Satoshi names the failure himself in the last sentence: “The risk is that if the owner of a key is revealed, linking could reveal other transactions that belonged to the same owner.” Eighteen years of chain analysis is that sentence coming true. This paper is a patch on a firewall the original document already called leaky.
So separate the two halves, because the paper does. Checkable: the proofs, the nullifier set, and the entire state, by anyone willing to replay the chain themselves. Indexers hold nothing. Their words: “Indexers are not custodians and do not hold spending authority.” Trusted: a proof system whose security holds “only when the setup is honestly generated and its trapdoor is not available to the adversary.” That ceremony does not exist yet, and no proof system is named. Trusted also: any indexer you did not verify, and seed recovery, which the paper says requires either local replay or an indexer “treated as truthful.”
Then the part the coverage left out. Getting bitcoin into this and back out is not in the paper. Straight from the abstract: peg-in and peg-out “belong to the broader system and fall outside the scope of this paper.” A transfer layer with no entrance is a very good paper about moving something that cannot get there yet. They say so. Their readers mostly will not. At the time of this writing, bitcoin was $84,341.