# Shielded transactions on Ethereum layer 1 now a reality

**URL:** <https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691>\
**Category:** General\
**Created:** [May 16, 2022, 10:45pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691 "2022-05-16T22:45:56Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![Blazin8888](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/blazin8888/32/9263_2.png) [@Blazin8888](https://forum.zcashcommunity.com/u/Blazin8888)\
**Post date:** [May 16, 2022, 10:45pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/1 "2022-05-16T22:45:56Z")

</div>

The Railgun project ([https://twitter.com/railgun\_project](https://twitter.com/railgun_project)) just did a soft launch release of their application, it allows you to make fully shielded transactions on Ethereum. There is still a fair bit of testing to do so be careful. I have used it myself with no issues so far and its really cool… This could be game changer for DeFi. We now have the ability to shield **ANY** ERC-20 token on layer 1. Unlike competitors such as Tornado Cash that have high gas fees and require the user to deposit in set amounts, Railgun is cheaper and allows users to shield any amount of coin they would like.

They will be integrating with Matcha in the coming months, and have much more planned. Here is their current roadmap:

 ![photo_2022-05-13_03-02-28](https://global.discourse-cdn.com/zcash/original/3X/1/b/1b5c5b7c4ec4c636e6329aaec475aba73b755efb.jpeg)

You can play around with the app here:

> **[Railway: DeFi Privacy Wallet](https://app.railway.xyz/)**
>
> Railway is a private DeFi wallet powered by the RAILGUN network. Shield, Send, and Swap across Ethereum, BNB Smart Chain, Polygon, and more.

> **[RAILGUN 🎗 The Church of RAILGUN](https://t.me/railgun_privacy)**
>
> A group for financial privacy advocates.	Info links:	https://railgun.ch Announcements: @railgunproject	RAIL token chat: @RailPrice	DAO Discord: governance.railgun.ch/#/connect	RAIL contract: 0xe76C6c83af64e4C60245D8C7dE953DF673a7A33D

---

<div class="post-metadata">

**Author:** ![LaymanFrankz](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/laymanfrankz/32/20693_2.png) [@LaymanFrankz](https://forum.zcashcommunity.com/u/LaymanFrankz)\
**Post date:** [May 18, 2022, 1:52pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/2 "2022-05-18T13:52:26Z")

</div>

It does not appear to be legit IMHO. There are other more legitimate projects out there.

---

<div class="post-metadata">

**Author:** ![gottabeJay](https://avatars.discourse-cdn.com/v4/letter/g/96bed5/32.png) [@gottabeJay](https://forum.zcashcommunity.com/u/gottabeJay)\
**Post date:** [May 18, 2022, 1:57pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/3 "2022-05-18T13:57:13Z")

</div>

Check out what Aztec Network are doing

> **[Countdown to Aztec Connect](https://medium.com/aztec-protocol/countdown-to-aztec-connect-b7b754b1e539)**
>
> 3–2–1-go for Private DeFi on Ethereum!

---

<div class="post-metadata">

**Author:** ![Blazin8888](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/blazin8888/32/9263_2.png) [@Blazin8888](https://forum.zcashcommunity.com/u/Blazin8888)\
**Post date:** [May 19, 2022, 6:13pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/4 "2022-05-19T18:13:10Z")

</div>

It’s legit I wouldn’t have posted some shit coin here. DYOR.

[![](https://global.discourse-cdn.com/zcash/original/3X/e/6/e643c08906b42c9af7998af6723a8af34abe8c84.jpeg "RAILGUN at DEFCON2021, Las Vegas - Hisham Galal, Cryptographer") ](https://www.youtube.com/watch?v=DfV-a_vRvD4)

---

<div class="post-metadata">

**Author:** ![Blazin8888](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/blazin8888/32/9263_2.png) [@Blazin8888](https://forum.zcashcommunity.com/u/Blazin8888)\
**Post date:** [May 27, 2022, 4:22pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/5 "2022-05-27T16:22:29Z")

</div>

[![](https://global.discourse-cdn.com/zcash/original/3X/c/8/c8b65f4487ef03059e74bbb48a3b7de46497f5a1.jpeg "Block-chat [#11] Privacy and anonymity in crypto with Kieran Mesquita") ](https://www.youtube.com/watch?v=DWrCSLHacvE)

Their Chief Scientist just did an interview. Was quite interesting.

---

<div class="post-metadata">

**Author:** ![particlmike33](https://avatars.discourse-cdn.com/v4/letter/p/ee7513/32.png) [@particlmike33](https://forum.zcashcommunity.com/u/particlmike33)\
**Post date:** [May 27, 2022, 7:37pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/6 "2022-05-27T19:37:33Z")

</div>

Interesting, does this use zcash tech?

Is there a trusted setup needed?

---

<div class="post-metadata">

**Author:** ![Blazin8888](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/blazin8888/32/9263_2.png) [@Blazin8888](https://forum.zcashcommunity.com/u/Blazin8888)\
**Post date:** [May 27, 2022, 9:27pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/7 "2022-05-27T21:27:11Z")

</div>

Yes they are using Powers of Tau set up. I participated in it.

Another update was just posted to their telegram:

“The launch of RAILGUN 1.0,

with a full DEX aggregator trading system, which will be usable via the Railway.xyz wallet, will take place during CONSENSUS 2022, June 9th.

Some contributors and community spokesmen from the RAILGUN DAO will be in Texas at Consensus to demonstrate the new functionality and celebrate the launch.”

---

<div class="post-metadata">

**Author:** ![particlmike33](https://avatars.discourse-cdn.com/v4/letter/p/ee7513/32.png) [@particlmike33](https://forum.zcashcommunity.com/u/particlmike33)\
**Post date:** [May 28, 2022, 1:48am UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/8 "2022-05-28T01:48:39Z")

</div>

I’m glad you don’t think it will cause ethereum to be a competitor to zcash (you mentioned that on the other thread).

Maybe it helps that they aren’t using Orchard yet.

I’m just worried if people can get zcash’s superior privacy on ethereum, they won’t feel drawn to zcash itself or ZSAs if there is shielded zcash on ethereum.

---

<div class="post-metadata">

**Author:** ![particlmike33](https://avatars.discourse-cdn.com/v4/letter/p/ee7513/32.png) [@particlmike33](https://forum.zcashcommunity.com/u/particlmike33)\
**Post date:** [May 28, 2022, 7:18pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/9 "2022-05-28T19:18:27Z")

</div>

do you know anything about starkware? I just found out that ECC helped fund them and they are working on zk-starks.

I read that dydx is already using starkware, does this mean that all the trades on there are private?

---

<div class="post-metadata">

**Author:** ![Blazin8888](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/blazin8888/32/9263_2.png) [@Blazin8888](https://forum.zcashcommunity.com/u/Blazin8888)\
**Post date:** [May 29, 2022, 5:18pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/10 "2022-05-29T17:18:02Z")

</div>

Yes dYdX is using zk starks but not for privacy…more for scalability/efficiency. I believe everything you do there is public…

“StarkWare zkSTARKS technology is a form of ZK-Rollup technology that significantly increases dYdX’s trade settlement capacity, while still basing its security on the underlying Ethereum blockchain. It combines STARK proofs for data integrity with on-chain data availability to ensure a fully non-custodial protocol. Trades are settled on a Layer 2 system, which publishes Zero-Knowledge Proofs periodically to an Ethereum smart contract in order to prove that state transitions within Layer 2 are valid.”

---

<div class="post-metadata">

**Author:** ![particlmike33](https://avatars.discourse-cdn.com/v4/letter/p/ee7513/32.png) [@particlmike33](https://forum.zcashcommunity.com/u/particlmike33)\
**Post date:** [May 31, 2022, 5:19pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/11 "2022-05-31T17:19:03Z")

</div>

thanks for explaining! Do you know if the zcash developers have ever discussed use of zk-starks or why they chose zk-snarks over it? I’ve been looking for info on it and came across a small thread or two on starkware when it was initially funded by ECC, but not much info since

---

<div class="post-metadata">

**Author:** ![noamchom](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/noamchom/32/20269_2.png) [@noamchom](https://forum.zcashcommunity.com/u/noamchom)\
**Post date:** [May 31, 2022, 5:28pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/12 "2022-05-31T17:28:31Z")

</div>

Afaik Starks didn’t exist when Zcash was conceived, so practically speaking snarks were the only option

---

<div class="post-metadata">

**Author:** ![particlmike33](https://avatars.discourse-cdn.com/v4/letter/p/ee7513/32.png) [@particlmike33](https://forum.zcashcommunity.com/u/particlmike33)\
**Post date:** [May 31, 2022, 5:54pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/13 "2022-05-31T17:54:36Z")

</div>

That makes a lot of sense (and it is still groundbreaking tech).

It just seems zk-starks have made a lot of bounds in development recently, and ECC helped fund starkware, so I am wondering what their relationship is currently and what their plans are together

---

<div class="post-metadata">

**Author:** ![particlmike33](https://avatars.discourse-cdn.com/v4/letter/p/ee7513/32.png) [@particlmike33](https://forum.zcashcommunity.com/u/particlmike33)\
**Post date:** [May 31, 2022, 5:31pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/14 "2022-05-31T17:31:45Z")

</div>

are zk-starks from starkware a newer technology than zk-snarks? Do you know if there was a reason that we chose snarks over starks back in 2016?

---

<div class="post-metadata">

**Author:** ![particlmike33](https://avatars.discourse-cdn.com/v4/letter/p/ee7513/32.png) [@particlmike33](https://forum.zcashcommunity.com/u/particlmike33)\
**Post date:** [May 31, 2022, 5:42pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/15 "2022-05-31T17:42:00Z")

</div>

It looks like now starkware has developed zk-starks that are more workable than 3 years ago?

They seem to be developing layer 2 solutions for ethereum. Are there talks about partnerships with the ECC, or what is the ECC’s and starkware’s working relationship after the ECC helped fund them?

@nullius @Voluntary @den @santacruz123 @Blazin8888

---

<div class="post-metadata">

**Author:** ![nullius](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/nullius/32/20935_2.png) [@nullius](https://forum.zcashcommunity.com/u/nullius)\
**Post date:** [July 2, 2022, 8:22am UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/16 "2022-07-02T08:22:55Z")

</div>

The principal problem with zk-STARKs is that their proof sizes are orders of magnitude larger than zk-SNARKs. That is a big problem on a blockchain, where scalability is already a major issue. Imagine if the Zcash mainnet with moderate use suddenly were to blow up to terabytes, and nodes needed large amounts of bandwidth simply to gossip txes and blocks!

L2 rollups on Ethereum amortize the cost of zk-STARKs across numerous transactions. That is, after all, the purpose of a rollup: A single transaction on L1 proves the validation of _many_ transactions on L2.

In Zcash, each and every shielded transaction needs to pay that cost. zk-SNARKs have tiny proofs; and both proving and verifying are very CPU- and memory-efficient with Halo2.

* * *

An historical note: In 2013, the original [Zerocoin](https://en.wikipedia.org/wiki/Zerocoin_protocol) proposal for Bitcoin needed impractically large proofs, albeit (IIRC) not as big as zk-STARKs. It used an earlier generation of RSA-based ZK proof technology—neither SNARKs nor STARKs. Zerocoin for Bitcoin was superceded by the Zerocash altcoin concept, with zk-SNARKs. Zerocash evolved into Zcash.

It goes to show how important proof sizes are in practice: zk-SNARKs were what made zero-knowledge privacy realistic for implementation and widespread usage.

So as for the present, and the immediate future. As technology advances, I do dream of someday seeing more practical usage of a proof system where both soundness and zero-knowledgeness reduce to the security of a hash.

---

<div class="post-metadata">

**Author:** ![gottabeJay](https://avatars.discourse-cdn.com/v4/letter/g/96bed5/32.png) [@gottabeJay](https://forum.zcashcommunity.com/u/gottabeJay)\
**Post date:** [July 7, 2022, 8:41pm UTC](https://forum.zcashcommunity.com/t/shielded-transactions-on-ethereum-layer-1-now-a-reality/41691/17 "2022-07-07T20:41:23Z")

</div>

> <https://twitter.com/aztecnetwork/status/1545046832597700611>
