Zcash: Encrypted Money for a Surveilled World

Bitcoin has three problems no one wants to talk about.

First, it’s been co-opted. What started as a cypherpunk experiment in financial sovereignty has become a line item in Blackrock’s portfolio, a strategic reserve asset for the US government, and a political talking point for the Trump administration. Nearly 9% of all BTC now sits in ETFs or government treasuries. The asset that was supposed to exist outside the system has been absorbed by it.

Second, it was never private. Every transaction, every balance, every send and receive, permanently etched on a public ledger for anyone to analyze. Pseudonymity was always a weak substitute for privacy, and the chain analysis industry has spent a decade proving it. If your threat model includes anyone with resources and motivation, Bitcoin’s transparency is a feature for them, not for you.

Third, and this one’s newer: it may not survive the quantum era intact. Google’s Willow chip put quantum computing back in the headlines, but the underlying concern has been building for years. Bitcoin’s cryptographic foundations were state of the art in 2009. They’re increasingly uncertain for 2039. And Bitcoin Core’s track record on proactive upgrades is, to put it generously, glacial. For an asset positioning itself as a multi-generational store of value, “the developers will figure it out when they need to” is a significant asterisk.

To be clear, I’m still long Bitcoin. It remains the Schelling point for digital scarcity, the most liquid crypto asset, and the one with genuine institutional rails. Those advantages compound over time. Nothing I’m about to say changes that.

But step back for a second. Something doesn’t add up.

We’re living through the most favorable macro backdrop for a sovereign store of value in a generation. Currency debasement is accelerating. Trust in institutions is collapsing. Governments are getting more aggressive with financial surveillance, from CBDC pilots to California-style asset seizure regimes. AI is about to supercharge the state’s ability to monitor and control capital flows. The case for an asset that can’t be debased, surveilled, or confiscated has never been stronger.

Gold understood the assignment. It’s ripped, and continues to rip, to all-time highs.

Bitcoin? Underperforming the Nasdaq. Underperforming gold. Struggling to hold momentum despite ETF inflows and a friendly administration.

Maybe the market is telling us something. Maybe an asset that’s been absorbed into the traditional financial system, that offers no real privacy, and that carries unresolved quantum risk doesn’t fully scratch the itch that this macro moment demands. Maybe “digital gold” isn’t enough when the original thesis was “digital freedom.”

Ray Dalio about Bitcoin:

“I have a small percentage of Bitcoin I’ve had forever, like 1% of my portfolio. I’ve said the same thing over and over again about Bitcoin. I think the problem of Bitcoin is it’s not going to be a reserve currency for major countries because it can be… pic.twitter.com/UWgtxa06fR

— *Walter Bloomberg (@DeItaone) November 20, 2025

This is where Zcash enters the conversation.

If you believe the demand for a truly private, sovereign store of value is only going to increase from here, and you look at the options available, Zcash is the only asset that was purpose-built for this from day one. Not privacy bolted on as an afterthought. Not obfuscation that sophisticated analysis can pierce. Actual encryption. Mathematical guarantees. With a credible path to quantum resistance already in development.

Two things are colliding: a world that’s becoming less private by the day, and an asset specifically engineered for that world finally becoming usable. The outperformance isn’t random but a consequence of the times.

The thesis: Zcash as the private, quantum-resistant complement to Bitcoin. Not a replacement, but a hedge against its blind spots. An insurance policy for the possibility that the cypherpunk vision still matters.

The Cypherpunk Vision That Bitcoin Abandoned

To understand why Zcash matters, you have to understand what Bitcoin was supposed to be and where it has fallen short.

The idea of private digital money is far from new. It dates back to 1982, when David Chaum, then a PhD candidate in computer science, published “Blind Signatures for Untraceable Payments.” 

The core insight was elegant: a bank could sign a digital token without seeing its content, and when spent, the bank could verify validity through its own signature but couldn’t link the spending to the withdrawal. 

Chaum later founded DigiCash in 1989 to commercialize this, and several banks piloted the technology. DigiCash failed (the timing was wrong, before widespread internet commerce), but Chaum had proven that private digital money was possible.

The cypherpunks then picked up the thread. In 1992, a group of cryptographers, hackers, and libertarians started meeting in the San Francisco Bay Area and communicating via an electronic mailing list. Their founding premise was that in the digital age, privacy would not be granted by governments or corporations. It would have to be built, deployed, and defended by individuals using cryptographic tools.

As Eric Hughes wrote in A Cypherpunk’s Manifesto in 1993: “Privacy is necessary for an open society in the electronic age… We must defend our own privacy if we expect to have any… Cypherpunks write code.”

The mailing list became a crucible for the ideas that would shape the next three decades. Members included Julian Assange (before WikiLeaks), Hal Finney (who would later receive the first Bitcoin transaction), Nick Szabo (who proposed bit gold), and Wei Dai (whose b-money proposal was cited by Satoshi). Zooko Wilcox, who would later co-found Zcash, was also on the list.

Bitcoin: Permissionless, But Not Private

When Satoshi published the Bitcoin whitepaper in 2008, it emerged directly from the cypherpunk tradition. Bitcoin solved the double-spend problem without a central authority. For the first time, people could transfer value over the internet without banks, intermediaries, or permission.

But there was a glaring problem: Bitcoin wasn’t private.

The blockchain is entirely public. Every transaction, every address, every balance is visible to anyone who cares to look. Satoshi acknowledged this limitation, suggesting users could preserve some privacy by generating new addresses for each transaction. That was a weak mitigation then. It’s nonexistent now, given the sophistication of chain analysis.

Satoshi also acknowledged something more telling. In a 2010 Bitcointalk post, he wrote: “If a solution was found, a much better, easier, more convenient implementation of Bitcoin would be possible.” He was talking specifically about privacy. The cryptography to solve it simply didn’t exist yet. Zero-knowledge proofs were still academic, impractical for real-world use.

So the early Bitcoiners made a bet: privacy would come later, as the math matured. In the meantime, permissionless was enough.

If you go back through the Bitcointalk archives, it’s clear that many early Bitcoiners believed that if stronger cryptographic tools had existed at the time, Bitcoin would have implemented them from day one. That sentiment never fully went away. And as ZK proving systems have matured over the past decade, it’s resurfaced in a very real way.

But Bitcoin never added privacy. And it probably never will.

Two forces killed the possibility.

The Ossification Problem

Bitcoin ossified. The community coalesced around “don’t change Bitcoin” as a core value, treating any protocol modification as an existential threat to the network’s credibility. This conservatism is both Bitcoin’s greatest strength (stability, predictability, Schelling point for “digital gold”) and its greatest weakness (inability to adapt to new threats or opportunities).

When the Zerocoin proposal came to Bitcoin Core in 2013, it offered a cryptographically sound privacy layer designed specifically for Bitcoin. It could have become Bitcoin’s native shielded transaction system, or at least a sidechain that preserved the asset’s cypherpunk roots. Bitcoin Core rejected it. Not because it didn’t work, but because the culture had already shifted toward risk-aversion and ossification.

The team behind Zerocoin eventually left and created Zcash, implementing the privacy that Bitcoin refused to adopt.

To be fair Bitcoin’s ossification isn’t all bad. The resistance to change is also what gives it credibility as a stable, predictable monetary base. And on quantum specifically, I do think Bitcoin will eventually adapt. When the threat becomes undeniable, the community will mobilize. It’ll be messy and slow, but it’ll happen. Survival instincts tend to win out.

Privacy is different. There’s no future scenario where Bitcoin becomes private at the protocol level. The transparency is too deeply embedded, both technically and culturally. The institutional adoption, the regulatory acceptance, the ETF approvals, all of it was built on the premise that Bitcoin is auditable. That’s not changing.

Which, in my view, opens the door for another store of value within crypto. One that offers what Bitcoin can’t: genuine privacy, built from the ground up. Not as a replacement for BTC, but as a complement to it. A sovereign asset for a world where sovereignty increasingly requires invisibility.

But this raises an obvious question: if privacy is so valuable, why didn’t Bitcoin just build it in from the start? The answer isn’t just cultural resistance. There’s a genuine technical tradeoff at the heart of it, one that involves what cryptographers call “monetary base integrity.”

The Privacy-Integrity Tradeoff

In a transparent system like Bitcoin, anyone can audit the entire ledger. Every transaction, every balance, every block is visible. If someone exploits a bug to create coins out of thin air, the network can see the violation and respond. 

This actually happened in 2010 with an integer overflow bug that created 184 billion BTC. 

10 years ago a bug was exploited to create 184 billion BTC. Due to the ability to easily audit the supply it was noticed quickly; bug was patched in 5 hours.

Several protocols have since suffered inflation bugs that went unnoticed for months.

Independent auditability has value.

— Jameson Lopp (@lopp) August 14, 2020

Because Bitcoin is transparent, the community could see exactly what happened and coordinate a rollback.

In a truly private system, this kind of audit isn’t possible through transparency. You can’t see the transactions. You can’t check the balances. So how do you verify no one is counterfeiting?

The answer, it turns out, is zero-knowledge proofs. What most people get wrong though is that ZK proofs don’t necessarily trade integrity for privacy. They’re actually an integrity mechanism. Each Zcash transaction that changes the shielded pool comes with a cryptographic proof that the change is valid, that it doesn’t counterfeit ZEC. Verifying all the zero-knowledge proofs is auditing the ledger. It’s a new technology for proving the integrity of the monetary base without revealing private details of the transactions.

Most ZK work happening outside of Zcash, in Ethereum, Starkware, and other communities, is actually focused on provable integrity. The cryptographic proof techniques they use don’t even come with full-strength privacy. Privacy is one application of ZK. Integrity is the foundation.

But in the early 2010s, this was new cryptography. Untested at scale. Bitcoin was unwilling to switch to a newfangled cryptographic auditing mechanism, one which would preserve user privacy