Privacy and Zero-Knowledge Cryptography: The Grey Area Labs Guide

Home › Privacy and Zero-Knowledge Cryptography

Short answer (as of October 20, 2026): Zero-knowledge cryptography lets someone prove a statement is true without revealing anything else, such as proving a payment is valid without showing who paid whom or how much. Zcash, launched on October 28, 2016, uses it to encrypt the sender, receiver and amount of shielded payments. This hub gathers every Grey Area Labs guide to Zcash, zero-knowledge proofs and financial privacy.

Curated by Ryan Bethencourt, author of ZERO: The Zcash Revolution.

On this page: Start here · Guides by topic · Glossary · Key facts · The book · FAQ

Start here: the three best guides

New to Zcash or to zero-knowledge proofs? Read these three in order: what Zcash is, how its cryptography works, and how it came to exist.

  1. What is Zcash? The complete guide to the privacy cryptocurrency: how shielded and transparent addresses differ, how zk-SNARKs make private payments possible, and who built Zcash.
  2. Zero-knowledge proofs explained: the Ali Baba cave, what each letter of zk-SNARK stands for, and how Zcash’s proofs changed from Sprout to Halo 2.
  3. The complete history of Zcash: the Zerocoin and Zerocash papers, the trusted setup, Sapling and Orchard, and the governance fights, in one timeline.

Every privacy and Zcash guide, by topic

Five new guides publish between October 22 and November 11, 2026, and each line below links up as its guide goes live.

Zcash basics

  • Zcash explained from the ground up: shielded and transparent addresses, zk-SNARKs, the people behind the project and the 2016 launch ceremony.
  • Seven little-known facts about Zcash: the launch-day price spike, the hardware destroyed after the ceremony, and Zcash’s zero-knowledge technology at JPMorgan and on Ethereum.
  • How Zcash differs from Bitcoin (publishing November 11): the same 21 million cap and halving rhythm, a different proof of work, and a ledger that can encrypt sender, receiver and amount.

Zero-knowledge technology

  • How zero-knowledge proofs work, from the Ali Baba cave to Halo 2: the 1985 idea, zk-SNARKs, and uses beyond Zcash such as Ethereum rollups and private age checks.
  • The Zcash ceremony of October 2016: how six participants generated Zcash’s parameters on air-gapped machines, then destroyed the “toxic waste” that could have minted counterfeit coins.
  • Zcash Ironwood and the AI-assisted Orchard audit (publishing October 28): how a 2026 audit using AI tools found a counterfeiting flaw in Orchard’s circuit, and how Ironwood, the turnstile and formal verification answered it.

History and people

Upgrades and 2026

  • What NU7 changes in Zcash (publishing October 22): 25-second blocks, the end of spending from the Sprout pool, the Network Sustainability Mechanism, and every Zcash upgrade since 2016 with dates and blocks.
  • What is ZODL?: the company the Electric Coin Company’s team formed after leaving in January 2026, its seed round of more than $25 million, and the Zodl wallet.

Markets and institutions

  • The Zcash ETF, ZCSH (publishing November 2): what Grayscale’s fund holds, what it costs, what it does not give holders, and the SEC history before it. Not investment advice.
  • Is Zcash a good investment? The bull and bear case: the arguments on both sides as of March 2026. Not investment advice.

Law and policy

  • Are privacy coins legal? (publishing November 6): US and EU rules for Zcash and Monero as of late 2026, what changes for EU-regulated businesses in 2027, exchange delistings, viewing keys and dated case statuses.
  • Why financial privacy matters: why Bitcoin is pseudonymous rather than anonymous, how payment data feeds a surveillance economy, and a reply to “nothing to hide”.

Comparisons

  • Zcash vs Monero in 2026: mandatory versus optional privacy, ring signatures versus zk-SNARKs, and how exchanges and regulators treated each coin in 2026.
  • Zcash and Bitcoin compared side by side (publishing November 11): supply, halvings, mining, block times and privacy, and why Zcash is called “encrypted Bitcoin”.

Glossary: eight terms to know

  • Zero-knowledge proof: a method for proving that a statement is true without revealing anything beyond the fact that it is true. Shafi Goldwasser and Silvio Micali of MIT and Charles Rackoff of the University of Toronto introduced the idea in 1985.
  • zk-SNARK: a zero-knowledge succinct non-interactive argument of knowledge, a short, fast-to-verify proof that needs no back-and-forth between prover and verifier. Zcash’s original Sprout proofs were 296 bytes long.
  • Shielded transaction: a Zcash transaction whose sender, receiver, amount and memo are encrypted on chain, with a zero-knowledge proof that the transaction is valid. Zcash also supports transparent transactions, which are public like Bitcoin’s.
  • Shielded pool: the set of encrypted notes a shielded payment hides among. Zcash has had four: Sprout (2016), Sapling (2018), Orchard (2022) and Ironwood (2026). Since Ironwood activated on July 28, 2026, Orchard has been exit-only.
  • Viewing key: a key that lets a holder show their shielded transaction details to a chosen party, such as an auditor, without making them public. Zcash’s unified viewing keys are specified in ZIP 316.
  • Trusted setup: a one-time generation of public parameters for some proof systems. If the secret randomness used (“toxic waste”) were kept, it could be used to forge proofs, which in Zcash would mean counterfeit coins rather than theft. Zcash’s 2016 and 2018 ceremonies split that secret across many participants; Halo 2 removed the need for a new one.
  • Halo 2: a proof system that needs no trusted setup, built on Halo, the recursive-proof design Sean Bowe, Jack Grigg and Daira-Emma Hopwood published in 2019. It arrived in Zcash with the NU5 upgrade and the Orchard pool on May 31, 2022. The older Sapling pool still uses its 2018 parameters.
  • Cypherpunk: a member of the movement, organized around a mailing list started in 1992, that set out to protect privacy with cryptography. Eric Hughes’s 1993 “A Cypherpunk’s Manifesto” opens: “Privacy is necessary for an open society in the electronic age.”

Key facts as of October 20, 2026

  • NU7 is next. Zcash’s next network upgrade cuts the target block time from 75 seconds to 25 seconds (ZIP 218) and retires v4 transactions, which ends spending from the legacy Sprout pool (Blockworks). It activated on testnet in early October 2026 at block 4,465,026 (Crypto Briefing). Developers were due to set the mainnet activation height on October 20, for a target date of November 5, 2026 (Cointelegraph).
  • Ironwood replaced Orchard. On May 29, 2026, researcher Taylor Hornby privately disclosed a critical flaw in the Orchard pool’s zero-knowledge circuit that could have permitted minting of funds within Orchard. An emergency upgrade, NU6.2, followed on June 3 (zcashd 6.20.0 release notes). Ironwood (NU6.3) activated on July 28, 2026, at block 3,428,143, and Orchard funds can now leave only through a turnstile (ZODL).
  • Shielded supply. On September 30, 2026, 4.94 million ZEC, 29.1 percent of supply, sat in shielded pools, and 4.06 million of it was in Ironwood (Blockworks).
  • The Zcash ETF. Grayscale’s ZCSH began trading on NYSE Arca on August 25, 2026 (Decrypt). Blockworks describes it as the first U.S. exchange-traded product offering spot ZEC exposure and reports that Coinbase custodies its ZEC (Blockworks).
  • New node software. The original zcashd node reached end of life on July 18, 2026. Its operators moved to the Zcash Foundation’s Zebra and to Zakura, a node built by Valar Group and Project Tachyon (Blockworks).
  • ZODL. In January 2026 the Electric Coin Company’s team left to form the Zcash Open Development Lab, ZODL (ZODL), which announced more than $25 million in seed funding on March 9, 2026 (ZODL).
  • Crosslink is still a proposal. Shielded Labs calls Crosslink, its design for proof-of-stake finality, “a proposed upgrade.” It is not part of NU7, so Zcash has no native staking as of October 2026 (Shielded Labs).

Updated when NU7 activates on mainnet.

The book behind these guides: ZERO

Many guides on this page draw on ZERO: The Zcash Revolution: How Privacy Became the Next Bitcoin, Ryan Bethencourt’s narrative history of Zcash. It follows private money from the cypherpunk mailing list and David Chaum’s DigiCash to the ceremony of October 2016, the Halo breakthrough, the 2026 walkout that created ZODL and the day Grayscale’s Zcash ETF began trading. The second edition is current to October 2026 and, like every book in The Decentralized Revolution Series, is licensed CC BY-SA 4.0, so you can quote it with credit.

These guides tell you what happened; ZERO tells you why, through the people and the arguments behind each upgrade. Get ZERO in paperback on Amazon, read the Kindle edition, or start with the free excerpt and chapter list on the ZERO book page.

Disclosure: Ryan Bethencourt holds ZEC. Nothing here is financial or legal advice.

Latest Zcash and privacy guides

Privacy and zero-knowledge cryptography: FAQ

What is a zero-knowledge proof, in plain English?

A zero-knowledge proof lets one party convince another that a statement is true without revealing the secret that makes it true. In the classic Ali Baba cave example, a prover shows they know the password to a door deep in a cave by coming out of whichever passage the verifier names. After 20 rounds the odds of bluffing fall below one in a million, yet the verifier never learns the password. Zcash uses compact proofs of this kind, called zk-SNARKs, to show that shielded payments are valid.

Is every Zcash transaction private?

No. Privacy in Zcash is optional. Shielded transactions encrypt the sender, receiver, amount and memo, while transparent transactions are public, like Bitcoin’s. On September 30, 2026, 4.94 million ZEC, 29.1 percent of supply, was held in shielded pools, according to Blockworks. Monero, by contrast, makes privacy mandatory for every transaction.

What is changing in Zcash in late 2026?

The next network upgrade, NU7, targets mainnet activation on November 5, 2026. It cuts the target block time from 75 seconds to 25 seconds, lowers the reward per block by the same factor, leaving issuance over time largely unchanged, and retires v4 transactions, which ends spending from the legacy Sprout pool. Anyone still holding ZEC in a Sprout address should move it with an up-to-date wallet before activation, and never share a seed phrase with a “migration service”.

How is Zcash different from Monero?

Both are privacy coins, but they hide transactions in different ways. Zcash uses zero-knowledge proofs and lets users choose between shielded and transparent transactions; a shielded spend hides among every note in its pool. Monero hides each spend among decoys in a ring signature, with the ring size fixed at 16 since August 2022, and makes privacy mandatory. Monero launched in 2014, two years before Zcash.

Who is behind the Grey Area Labs guides on Zcash?

Ryan Bethencourt, an author, biotech investor and founder who co-founded IndieBio, publishes them. He joined the Zcash community in mid-2025 and is the author of ZERO: The Zcash Revolution, a narrative history of Zcash co-written with AI under his direction. The 2026 guides date their figures and link their primary sources. Ryan holds ZEC, and nothing on this site is financial advice.

Last updated October 20, 2026.

Scroll to Top