# Shielded Pool on Ethereum L1

**URL:** <https://forum.zcashcommunity.com/t/shielded-pool-on-ethereum-l1/56400>\
**Category:** Off Topic Lounge\
**Created:** [June 25, 2026, 7:08pm UTC](https://forum.zcashcommunity.com/t/shielded-pool-on-ethereum-l1/56400 "2026-06-25T19:08:36Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Siegfried](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/siegfried/32/43513_2.png) [@Siegfried](https://forum.zcashcommunity.com/u/Siegfried)\
**Post date:** [June 25, 2026, 7:08pm UTC](https://forum.zcashcommunity.com/t/shielded-pool-on-ethereum-l1/56400/1 "2026-06-25T19:08:36Z")

</div>

[![](https://global.discourse-cdn.com/zcash/original/3X/8/2/8235b966f19f04dc2479d92e9173d0449adf951a.jpeg "Blockspace Forum Cannes - Fede and Justin Drake") ](https://www.youtube.com/watch?v=UMKEV_g15OY&t=2322)

I was watching this two-month-old interview mostly for Justin Drake’s comments on quantum computing.  
Starting at the time I linked, he says that AI making formal verification viable is a necessary precondition for shielded transfers on L1, which he is “excited about.”  
We saw how Ethereum tried to catch up with Solana on L1 scaling. Will they try to do the same with Zcash on privacy?

---

<div class="post-metadata">

**Author:** ![Siegfried](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/siegfried/32/43513_2.png) [@Siegfried](https://forum.zcashcommunity.com/u/Siegfried)\
**Post date:** [June 26, 2026, 9:52am UTC](https://forum.zcashcommunity.com/t/shielded-pool-on-ethereum-l1/56400/2 "2026-06-26T09:52:49Z")

</div>

I looked into it, and apparently this is part of the [official roadmap](https://strawmap.org/) (in the bottom right) and scheduled for the 2030s.

---

<div class="post-metadata">

**Author:** ![Siegfried](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/siegfried/32/43513_2.png) [@Siegfried](https://forum.zcashcommunity.com/u/Siegfried)\
**Post date:** [July 4, 2026, 6:27pm UTC](https://forum.zcashcommunity.com/t/shielded-pool-on-ethereum-l1/56400/3 "2026-07-04T18:27:15Z")

</div>

Vitalik has updated the [official roadmap](https://strawmap.org/) and [tweeted](https://x.com/VitalikButerin/status/2073459000398463446) to explain it.  
In the tweet he says:

> Privacy is no longer an afterthought, it is a first class goal. When designing Frames, the mempool, additions to the state tree, we explicitly ask the question “okay, how do quantum-safe, intermediary-free privacy protocol transactions go through this, and what is the overhead?”

and

> Design of these new state types (current ideas: keyed nonces, ring buffers, UTXOs, statically accessible state, temp state) is an area where we will need a lot of feedback from application developers (incl. privacy-friendly application developers) and probably several rounds of rethinking and iteration.

It is notable that Ethereum is exploring UTXO-style state for some ERC20-like tokens, closer to the Bitcoin/Zcash model, perhaps because such a model is a more natural prerequisite for shielding.

---

<div class="post-metadata">

**Author:** ![Siegfried](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/siegfried/32/43513_2.png) [@Siegfried](https://forum.zcashcommunity.com/u/Siegfried)\
**Post date:** [July 6, 2026, 10:34am UTC](https://forum.zcashcommunity.com/t/shielded-pool-on-ethereum-l1/56400/4 "2026-07-06T10:34:35Z")

</div>

The forum post [Native UTXOs on Ethereum](https://ethresear.ch/t/native-utxos-on-ethereum/25368) explains the motivation behind the move further.

> This is also where the design pays off with respect to privacy. Because `recipient` is just an address, it can be a stealth address, and because the spend is self-funded, that fresh address never has to hold ETH or appear as `tx.sender`. The result is recipient unlinkability across payments. The sender is still exposed through `topics[1]`, so sender privacy would need a separate mechanism such as mixing.

Apparently, the privacy considerations here relate more to short-term support for stealth addresses than to the longer-term goal of fully shielded transfers.

---

<div class="post-metadata">

**Author:** ![Siegfried](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/siegfried/32/43513_2.png) [@Siegfried](https://forum.zcashcommunity.com/u/Siegfried)\
**Post date:** [August 14, 2026, 8:20am UTC](https://forum.zcashcommunity.com/t/shielded-pool-on-ethereum-l1/56400/5 "2026-08-14T08:20:28Z")

</div>

# Flock: Fast Proving for Batch Boolean Computations

[![](https://global.discourse-cdn.com/zcash/original/3X/b/3/b3cd4175389a0fa57acb336daa1031d8a30f561d.jpeg "Benedikt Bünz, Ron Rothblum, and William Wang") ](https://www.youtube.com/watch?v=48_eQJT3_7Q)

Justin Drake’s [tweet](https://x.com/drakefjustin/status/2087905684180418733).

[Paper](https://eprint.iacr.org/2026/1329) and [code](https://github.com/succinctlabs/flock).

---

<div class="post-metadata">

**Author:** ![Siegfried](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/siegfried/32/43513_2.png) [@Siegfried](https://forum.zcashcommunity.com/u/Siegfried)\
**Post date:** [August 14, 2026, 8:24am UTC](https://forum.zcashcommunity.com/t/shielded-pool-on-ethereum-l1/56400/6 "2026-08-14T08:24:51Z")

</div>

![blake3](https://global.discourse-cdn.com/zcash/original/3X/5/4/5458f5cfc79e68e68621a8a43d6d1042cab73a25.jpeg)  
BLAKE3 mentioned @zooko
