Privacy without forks: Shielded Bitcoin and a private stablecoin design compared

Serguey Asael Shinder10 October 2026, 09:462 min read

Two proposals published within days of each other attack the same problem — private value transfer on a public chain — and both deliberately avoid changing the base protocol. Comparing them shows where the hard parts actually are.

1. Shielded Bitcoin. As summarised in Bitcoin Optech #426, Misha Komarov posted to Delving Bitcoin a metaprotocol on top of Bitcoin, with a full paper co-authored with Clara Shikhelman and Aleksei Moskvin. Transfers use notes — encrypted records holding amount and recipient key material, playing the role of UTXOs. A transfer publishes a Bitcoin transaction with the new encrypted notes, a nullifier for each note spent, and a proof that the spent notes exist, are owned by the sender and balance; an off-chain indexer verifies the proofs. It is non-custodial: only the spending key can move a note, not miners or indexers. Its stated costs: a one-time setup ceremony (secure if at least one participant is honest), a visible trace when entering and exiting, and a peg mechanism — based on a witness-encryption scheme called PIPEs — that a companion paper has yet to describe.

2. A private stablecoin on Ethereum. A post on Ethereum Research by PLabs4 describes a stablecoin with built-in privacy, backed by USDC/USDT, with minting and redemption enforced by smart contracts rather than an intermediary, permissionless issuance, composability with existing DeFi, and selective disclosure — users can prove specific facts to a counterparty, auditor or regulator without revealing everything. The authors list confidential trading strategies, verifiable social trading and private prediction markets as uses.

Where they differ. Bitcoin has no general-purpose contracts, so Shielded Bitcoin moves verification off-chain to indexers and needs a trust-minimised peg; Ethereum can enforce rules on-chain, so the stablecoin design puts mint and redeem in contracts. Bitcoin's design privatises BTC itself; the Ethereum design privatises a dollar claim whose backing — USDC/USDT — sits with issuers who can freeze.

Where they converge. Both treat the entry and exit as the weak point: peg-in and peg-out for Shielded Bitcoin, mint and redeem against a freezable reserve for the stablecoin. And both carry an obligation the base chain does not: the proofs inside them must survive future cryptanalysis — a live question this week, as the Ethereum Research post on EIP-8288 and the debate over AI-accelerated mathematics show.

What to watch. For Shielded Bitcoin, the companion paper on pegs; for the stablecoin, whether selective disclosure can satisfy the issuers whose tokens back it. Privacy that the reserve issuer can switch off is a different product from privacy for the asset itself.

This analysis draws on: Bitcoin Optech Newsletter #426, 9 October 2026 — https://bitcoinops.org/en/newsletters/2026/10/09 ; Ethereum Research, "Private Stablecoin on Ethereum", 9 October 2026 — https://ethresear.ch/t/private-stablecoin-on-ethereum/26140