A common misconception about cryptocurrency is that it is inherently private. This is not true for most of the crypto ecosystem. Bitcoin and Ethereum are public ledgers — every transaction is permanently visible to anyone with an internet connection. This post explains what on-chain privacy actually means, why it matters, and how different systems provide different levels of it.
The Public Ledger Explained
A blockchain is, at its core, a shared database that anyone can read. When you send 1 ETH to someone, that transaction is broadcast to thousands of computers simultaneously. Each one records it, and the record is immutable — it cannot be changed or deleted. A block explorer like Etherscan is simply a nice interface for reading this public database.
This public design is intentional. It allows any participant to verify that the network is operating honestly — that transactions are valid, that no one is spending money they don't have — without trusting a central authority. The transparency that enables trustless verification is the same transparency that eliminates financial privacy.
Think of it like this: imagine if every bank transaction you made was published to a public website, with your account number as the only identifier. That's effectively what using Ethereum or Bitcoin looks like today.
Pseudonymity vs Anonymity
Your Ethereum address isn't your name — it's a string like 0x742d35Cc6634C0532925a3b8D4C9D56e. This is pseudonymity: you have an identifier that isn't immediately tied to your real-world identity. People often confuse pseudonymity with anonymity, but they are very different.
Anonymity would mean your transactions cannot be linked to each other or to any identity at all. Pseudonymity just means your identifier isn't your name — but your entire history is still attached to that identifier. If your pseudonym is ever connected to your real identity (through a KYC exchange deposit, a public statement, or simply sending to a known address), every transaction you have ever made with that address becomes associated with you, retroactively.
Three Levels of On-Chain Privacy
Not all privacy is the same. Here are the three main levels, from weakest to strongest:
Level 1: Metadata Only
At this level, the blockchain hides who sent or received a transaction, but the amount is still visible, or timing and frequency patterns leak information. Some mixing services operate at this level — they shuffle funds between addresses, but sophisticated analytics can still reconstruct the transaction graph from timing and amount patterns. This is better than nothing but provides weak privacy guarantees.
Level 2: Amounts Hidden
Monero operates primarily at this level (with some sender/receiver obfuscation via ring signatures). Confidential transactions hide the amounts transferred using cryptographic commitments, but transaction participants can still be partially inferred. This is a meaningful improvement but still leaves metadata exposed.
Level 3: Full Privacy — Sender, Receiver, and Amount
Zcash's shielded transactions, Aztec's private state, and Sanect's shielded pool all aim for this level. Zero-knowledge proofs allow the network to verify that a transaction is valid — that the sender has sufficient funds and the math checks out — without revealing the sender's identity, the receiver's identity, or the amount. This is the gold standard for on-chain privacy.
Why Privacy Matters Even If You're "Doing Nothing Wrong"
Privacy is a common human value, not a red flag. We use private messaging apps, we keep our bank statements to ourselves, and we don't broadcast our salary to coworkers — not because we're hiding wrongdoing, but because financial information is personal and sensitive.
On a public blockchain, your financial behavior is visible to employers, governments, family members, competitors, and potentially malicious actors. Salary payments from your employer reveal your compensation to anyone. Business transactions reveal supplier relationships and margins. Charitable donations reveal your personal values and commitments. A public ledger is not a neutral tool — it creates a permanent, searchable record of your financial life.
Beyond the personal dimension, privacy has a market structure dimension: without financial privacy, price manipulation, front-running, and targeted social engineering become trivially easy. A large trader whose positions are publicly visible is vulnerable to predatory behavior. Privacy protects the integrity of markets, not just the privacy of individuals.
How Shielded Transactions Work (Conceptually)
A shielded transaction works through a combination of cryptographic commitments and zero-knowledge proofs. Here's the intuition without the mathematics:
When you receive funds into a shielded pool, the system records a cryptographic commitment to your note — a way of saying "a valid note exists" without saying how much it's worth or who holds it. Your wallet stores the full details of the note, including the amount and a secret key. When you spend the note, you generate a zero-knowledge proof that demonstrates you know the secret key for a valid unspent note in the commitment tree, and that the spend is mathematically sound — without revealing which note you're spending or how much it was worth.
The result: the chain verifies the transaction is valid, but learns nothing about the sender, receiver, or amount. Observers see that a shielded transaction occurred, but cannot determine any of the underlying details.
What Sanect Provides
Sanect is designed around the premise that privacy should be accessible without changing your wallet. Using MetaMask — the most widely deployed crypto wallet — users can interact with Sanect's shielded pool for Level 3 privacy: sender, receiver, and amount are all hidden from public view.
The shielded pool uses a custom Noir circuit compiled to UltraHonk proofs via Barretenberg — no per-circuit trusted setup ceremony required. Proofs are generated in-browser in approximately 2-3 seconds, meaning your private data never leaves your device. The public EVM layer remains available for transparency where desired — Sanect does not mandate privacy, but makes it the natural, low-friction option.