Is it possible to implement the Zcash protocol(Sprout version) on Ethereum

Since Ethereum is a general-purpose blockchain platform, it can store nullifier set and roots of the incremental note commitment tree. I was wondering if it’s possible to implement the Zcash protocol as a Solidity contract.

Yes, it has been done before. There was a project called Baby ZOE (Zcash on Ethereum)


The topic is discussed with details in another forum, have a look An Update on Integrating Zcash on Ethereum (ZoE) | Ethereum Foundation Blog

1 Like

I think the BabyZoE project actually implements the zerocoin protocol with the merkle tree storing the set of note commitments. And the note in babyzoe consists of two parts: (r, serial_number).