Since Ethereum is a general-purpose blockchain platform, it can store nullifier set and roots of the incremental note commitment tree. I was wondering if it’s possible to implement the Zcash protocol as a Solidity contract.
Yes, it has been done before. There was a project called Baby ZOE (Zcash on Ethereum)
2 Likes
The topic is discussed with details in another forum, have a look An Update on Integrating Zcash on Ethereum (ZoE) | Ethereum Foundation Blog
1 Like
I think the BabyZoE project actually implements the zerocoin protocol with the merkle tree storing the set of note commitments. And the note in babyzoe consists of two parts: (r, serial_number).