ZEC Market a private, non-custodial marketplace built on Zcash

Hello everyone,

We’ve been working as a small team on a project we genuinely care about for quite some time.

ZEC Market is a peer-to-peer (P2P) marketplace where people can buy and sell real products and services and pay in Zcash wallet to wallet.

Why are we building this?

Zcash has some of the best privacy technology in the space. But the question, “What can I actually use Zcash for in everyday life?” is still a very valid one.

We wanted to create a place where people can spend and earn ZEC for everyday needs electronics, services, digital goods, and more.

We want to make this possible without a middleman holding your money or seeing what you buy.

The platform never takes custody of users’ funds and never has access to their private keys. Prices are displayed in USD, payments are settled in ZEC, and transactions are shielded by default. We also charge 0% fees on trades.

ZEC Market is also a natural companion to Zecmap. zecmap.com

An early lesson

To be completely honest, during the early stages of the project, someone stress-tested the platform and discovered some security weaknesses before we did.

It wasn’t a fun day but we believe it was probably one of the best things that could have happened to us this early.

We treated it as a serious wake-up call and conducted a comprehensive security review across the entire infrastructure. We closed the vulnerabilities, added rate limiting, hardened accounts and sessions, and implemented proper security measures.

As a result, we came out of the process with a much more serious and robust product than we had before.

What’s live now?

We’ve been working hard on this for quite some time, so this is much more than just a fresh design or visual update. Here’s a comprehensive look at what actually works on the platform today:

The marketplace

  • You can list almost anything in just a few minutes photos, category, condition, physical or digital, and location. You enter the price in USD and the system converts it to ZEC in real time.
  • You can search and filter by category, price range, region, type, and condition, with advanced sorting options such as newest, price, and most viewed. You can browse by category or jump directly into featured listings.
  • Every listing has a dedicated detail page with an image gallery, price in ZEC and its fiat equivalent, seller information, description, and shipping/payment details.

Paying in Zcash

  • Non-custodial by design payments go directly from the buyer’s wallet to the seller’s wallet. We never hold your funds and never have access to your wallet keys.
  • Live ZEC/USD pricing keeps listings up to date. Price data is cached server-side so everyone sees the same quote.
  • We charge 0% commission on trades, and creating a listing is completely free.

Trust & reputation

  • There is a real order flow: a trade is started, and both sides move through the process together payment, payment confirmation, shipping, delivery, and completion.
  • Reviews can only be created after a completed trade. Users can leave a 1–5 rating and a short note, making it difficult to farm reputation with burner accounts.
  • Reputation information is displayed on every profile, including completed trades and rating.
  • Sellers can create a business storefront with an optional verified badge.

Communication, buying & saving

  • Built-in messaging between buyers and sellers, directly tied to the listing including ZEC offers.
  • Every listing has a public Q&A section.
  • You can save listings to your favorites.

Accounts & privacy

  • Email verification is required before creating a listing, helping us keep spam under control.
  • Users have real profiles they control username, avatar, bio, and location.
  • An invite/referral system is available.
  • We collect the minimum amount of data possible and leverage Zcash’s shielded payment infrastructure, so what you buy stays your business.

Moderation & security

  • Every listing is reviewed by a moderator before going live nothing is published directly to the marketplace.
  • You can report any listing or account. Behind the scenes, we have a comprehensive moderation console that allows us to take action when necessary.
  • Every listing, seller, and page has a shareable link, making it easy to send someone directly to what you want them to see.

Under the hood

  • Following the security incident we experienced early on, we carried out a comprehensive hardening pass across the entire platform including rate limiting, account and session protection, and security safeguards throughout the stack.
  • We also implemented monitoring to keep track of system health, along with controlled deployment processes that help keep the platform stable and allow us to safely roll back changes when necessary.

We’re still actively developing and refining the platform, and we’ll continue making improvements right up until the official launch.

What’s next?

We’ve just started working on proper mobile applications and are moving toward a wider public launch.

The platform is currently live and in testing. We’ve opened the server for one week to collect feedback, identify issues, and implement new updates.

We are currently planning to hold the final launch on September 9th.

Where do you come in?

We’ve made it this far as a small team, largely using our own time and resources.

Now, we need support to take the project to the next level.

We’re looking for investors, sponsors, or community support to help fund the next stage — mobile app development, growth, and keeping the platform independent and fee-free for its users.

If this idea resonates with you, or if you simply want to try the platform and tell us what’s broken, feel free to reach out.

The platform is currently live at zecmarket.org.

Thank you for reading, and thank you to this community for being the reason a project like this makes sense in the first place.

The ZEC Market Team

9 Likes

Dev Update: What’s Changed Since the Announcement? (August 26 → August 30)

Hey everyone,

It’s been four days since our announcement, and we’ve made quite a bit of progress on ZEC Market. We said we’d use the public testing period to find problems, fix them, and keep shipping new features. Here’s what we’ve been working on over the past four days:

An independent researcher really put us through our paces, and we’re grateful for it.

Shortly after the announcement, a security researcher credited as sbekk in our changelog put our live API through an extensive security test. They tested everything from order-flow rate limiting and user enumeration to attempts to bypass rate limits using spoofed headers, mass-assignment, JWT forgery, file uploads, stored XSS payloads, and more.

We fixed everything, including the low-priority issues, and asked them to test everything again. During the second round of testing over the weekend, all of the fixes held up against active attack attempts. 17 different XSS payloads, alg:none JWT attempts, and more than a dozen spoofed IP headers all failed.

The one remaining low-severity issue was also closed the same day. The registration endpoint had been revealing whether an email address was already registered.

We’ll be sending the researcher their reward in shielded ZEC. We want a privacy-focused marketplace to go through this kind of testing before launch, not after it.

https://zecmarket.org/changelog

The reputation system is now live.

Every user now has a public profile at ZEC Market — Buy and sell, privately in Zcash . Profiles include a bio, skills, what you’re looking to buy or sell, and Verified / Top seller badges granted by moderators.

Reviews range from 1 to 5 stars and can only be left after both sides confirm that a trade has been completed. So no one can just show up and leave a random rating for a buyer or seller.

Reviewers can remain anonymous if they want, while sellers can post one public reply to a review. Ratings are also shown directly on listing cards, so you can see who you’re dealing with before clicking on a listing.

Trades now have a proper flow.

The dashboard guides buyers and sellers through every stage of an order, from initial intent to payment expected and finally completion. Each stage has its own status and requires confirmation from the appropriate party.

This flow also forms the foundation of the review system.

Sellers can now promote their listings, with payment made in shielded ZEC.

Featuring costs $5 per week. Payment is sent to the platform’s shielded address using a unique memo code.

Slots are limited and automatically expire. The featured section is exclusively for listings whose sellers have paid for placement. No auctions or similar systems.

**The support page and donor tiers are now live too.
**
https://zecmarket.org/support

After several people asked how they could support us, we launched

Donations are shielded, so we deliberately don’t publish a “total raised” counter. Shielded means shielded. Instead, the changelog shows what the support is helping us build.

Donors who want to be publicly recognized can choose between Zolder, Zolder+, Zolder++, or ZolderChamp badges. It’s completely optional. You’ll only be listed if you ask us to.

Our partners are live too.

The partner spotlight on the homepage now features five ecosystem projects: Noir Wallet, OpenZcash, 0xramp, LiveZEC, and ZecMap.

A big thank you to all of these projects for supporting us. They’ve been incredibly kind and supportive.

Only one partner is shown on screen at a time, with the partners rotating. Each one is clearly labelled as a partner.

There’s no ad network and no tracking. The page only contains a static image and a link.

One partner slot is still open: zecmarket.org/partners

And then there’s the less exciting, but important stuff.

Dark mode is now live. Every page and dashboard tab now has a clean, shareable URL.

Email verification is now properly required for selling, ordering, and messaging. Instead of leaving users at a dead end, there’s now a clear verification prompt in the top bar.

We also went through the mobile layouts based on feedback from our partners. We’ve added nightly database backups as well, along with a public changelog where all of these changes are documented.

Launch is still set for September 9.

The testing period will remain open until then. Break things, tell us if something doesn’t feel right, and let us know if there’s anything you think we’ve missed.

If you’re a security researcher, we especially want to hear from you. The door is open.

4 Likes

I’d like to help if you need testing/feedback

First of all, thank you. Of course, you are welcome to conduct independent testing as well. Unfortunately, our current bug bounty pool is limited, so we will only be able to reward one person this time. However, if you find a critical vulnerability or a serious issue, we may be able to offer small rewards in future rounds.

1 Like

We’re proud to welcome LiveZEC to ZEC Market as a sponsor :shield:

Private Zcash donations for streamers real-time OBS overlays, encrypted memos, and zero sign-up for viewers. Support flows wallet to wallet, shielded by default.

Privacy-first tools built on Zcash exactly the ecosystem we’re here to grow.

Check them out → LiveZEC — Private Zcash Donations for Streamers
X’te Zec Market: “We’re proud to welcome @LiveZEC to ZEC Market as a sponsor :shield: Private Zcash donations for streamers real-time OBS overlays, encrypted memos, and zero sign-up for viewers. Support flows wallet to wallet, shielded by default. Privacy-first tools built on Zcash exactly the https://t.co/E8V5ssnO5p” / X

2 Likes

We’re proud to welcome Noir Wallet to ZEC Market as a sponsor :shield:

The Privacy DeFi Entryway a privacy-first, non-custodial wallet, starting with Zcash. Shielded by design, built for the private web.

Same values, same chain exactly the ecosystem we’re here to grow.

Check them out → zknoir.com

(5) X’te Zec Market: “We’re proud to welcome @noir_wallet to ZEC Market as a sponsor :shield: The Privacy DeFi Entryway a privacy-first, non-custodial wallet, starting with Zcash. Shielded by design, built for the private web. Same values, same chain exactly the ecosystem we’re here to grow. Check https://t.co/31ruR3VrhA” / X

2 Likes

We’re proud to welcome Cake Wallet as a sponsor of ZEC Market.

A non-custodial wallet for Zcash and 20+ assets: your keys only, shielded by default, open source. Send shielded ZEC straight from a device only you control.

Check them out → https://cakewallet.com

Zec Market on X: “We’re proud to welcome @cakewallet as a sponsor of ZEC Market. A non-custodial wallet for Zcash and 20+ assets: your keys only, shielded by default, open source. Send shielded ZEC straight from a device only you control. Check them out → https://t.co/8gGpJGzFmS https://t.co/BmWDGxuk9m” / X

1 Like

We’re proud to welcome 0xramp as a sponsor of ZEC Market.

A non-custodial fiat ramp for Zcash: buy and sell ZEC with fiat, peer-to-peer, directly to a wallet that only you control.

Your keys, your coins. No middleman holding your funds.

Check them out → https://0xramp.app

(1) Zec Market on X: “We’re proud to welcome @0xramplabs as a sponsor of ZEC Market. A non-custodial fiat ramp for Zcash: buy and sell ZEC with fiat, peer-to-peer, directly to a wallet that only you control. Your keys, your coins. No middleman holding your funds. Check them out → https://t.co/Kx8BZO2ueK” / X

ZEC Market development update: optional non-custodial escrow is live

Hello everyone,

A lot has changed since our announcement, so here is a proper update on what we have shipped in the run-up to launch. The headline is that ZEC Market now has an optional 2-of-3 escrow, and it is fully non-custodial: the platform never holds a key and can never move anyone’s funds.

Everything below is in addition to what was already live (listings, search, storefronts, reviews, on-site messaging, Q&A, favorites, moderation). Direct wallet-to-wallet trades are unchanged and stay commission-free.

Optional 2-of-3 escrow, with no custody

For higher-value trades, a buyer can now choose escrow at checkout and pick a mediator. Instead of paying the seller directly, the payment goes into a shared 2-of-3 vault that the buyer, the seller and the chosen mediator each hold one key to.

What makes it different from most escrow:

  • The vault is created in the browser. When a trade starts, the buyer, seller and mediator each run a distributed key generation (DKG) in their own browser. Each participant ends up with one share of the vault key. No single party, and not the platform, ever holds enough to spend.

  • The coordinator is keyless. Our server watches the vault for the deposit and helps relay the public parts of a signature, but it holds no key share and can never sign. The sensitive parts of the DKG are sealed end to end, so even our relay never sees them.

  • Two of the three keys move the money. A normal release is co-signed by the buyer and the seller. Nobody can pull the funds alone.

  • It settles in one shielded transaction. The seller is paid, the mediator receives their fee, and the platform fee is taken, all in a single shielded Zcash transaction.

We have run full escrow trades on Zcash mainnet, end to end: automatic in-browser vault creation, a real shielded deposit, a two-party release, and a full refund, all with real transactions on-chain. Money is never at risk during signing; nothing is broadcast unless a valid 2-of-3 signature is produced.

Mediators

Escrow is only as good as the people who can settle a dispute, so we have added a mediators directory. Mediators are independent, community-recognized names, not staff, and only an admin can add one.

  • Each mediator sets their own flat fee, from 0.01 to 0.04 ZEC per escrow trade.
  • The mediator fee is split evenly between the buyer and the seller, so neither side carries it alone.
  • Mediators are listed with their rating, cases resolved and the fee they charge, so buyers can choose who they trust.

Dispute resolution

If a trade goes wrong, either side can open a dispute. The mediator reviews it and decides the honest outcome, then co-signs it with the party they ruled for: release to the seller, or a refund to the buyer. Because it is 2-of-3, the mediator alone can never move the funds, and neither can one party alone. A mediator can step in on a real dispute, or after a funded trade has sat untouched for three days.

Refunds are non-custodial the same way: the whole deposit sweeps back to the buyer, with no fees taken, once two of the three keys sign.

Fees

We want to keep the incentives honest and simple:

  • Direct trades stay 0%. No commission, no cut, free to list.

  • Escrow trades carry a flat $5 platform fee (converted to ZEC at the time of the trade), plus the mediator’s own fee described above. The fee only applies when you choose escrow, and it is shown up front before you deposit.

    Listings: shipping and delivery

    Sellers can now describe fulfillment properly. A listing can be shipped, local pickup, or digital delivery, and for shipped items the seller sets where it ships to, the domestic and international shipping cost in ZEC, and a delivery time. Buyers see all of this on the listing before they buy.

    Other improvements

    • A full password reset flow (forgot password and reset).
    • Fixes to the escrow walkthrough, the mediator directory, profile links after a username change, and avatars.
    • Various polish across the trade screens.

    Launch sponsors

    We are grateful to have a small group of launch sponsors supporting the project: Noir Wallet, Cake Wallet, 0xRamp, OpenZcash and live.zec.

    What is next

    We are continuing to test and polish ahead of launch, with a focus on the escrow flows and the mobile experience. If you want to try escrow, kick the tires on the vault creation, or tell us where the flow can be clearer, we would love the feedback in this thread.

    Thank you for the support so far. We are building this in the open for the Zcash ecosystem, and community input is shaping it directly.

    zecmarket.org