category.privacy_tools.label

category.privacy_tools.promise

Starting path

Privacy is a crowd. Most of these tools do not have one

Privacy Tools evaluated across cryptographic guarantee and setup verifiability, compliance signal without collapsing privacy, live anonymity set and measurable usage, and audit currency, admin keys and incident record.

category.privacy_tools.promise Reviewed on the cryptographic guarantee and how checkable its setup is, compliance that does not hand one party a revocable switch, the live anonymity set, and admin keys and incident record.

Start with the smart category assistant or jump straight into quick questions. Both paths narrow to the same recommendation standard.

How we review

Recommendation first, comparison only if needed.

Reviewed and rechecked on the current cycle.

Commercial relationships disclosed before clickout.

Audit

Infrastructure

Methodology

2026.04.0

published 2026-04-27

Providers tracked

570+

across 62 categories

Last verified

2026-08-05

editorial freshness

Editorial board

4

audit-log live

Decision guide

What matters most before choosing in this category

The right tool depends on whether the funds have to come back out into a regulated venue, and on how many other people are hiding alongside you. Privacy is a shared good with a quorum: a technically flawless pool holding five figures lets an analyst enumerate the whole set, so the size of the live anonymity set is scored explicitly rather than assumed. The uncomfortable finding is that the deepest pool in this category is the sanctioned one, and every compliance-friendly alternative is competing for a fraction of the liquidity that determines how much privacy you actually receive.

Key question

Do these funds need to be unshielded into a regulated venue later?

Key question

How much are you shielding, and would you notice if the set were small enough to enumerate?

Key question

Are you hiding the amount, the counterparty, or both?

Default starting point

Railgun

Shielded EVM balances and zk transfers, DAO-upgradable contracts

Data checked Aug 2026

Shielded EVM balances and zk transfers, DAO-upgradable contracts. Strongest on cryptographic guarantee and setup verifiability (8/10): Groth16 over BN254 with a circuit-specific Phase 2 ceremony covering 54 circuits, built on the Polygon zkEVM Phase 1 ceremony and wrapped up in late December 2022. L2BEAT rates the setup Reproducible and records 55 participants. Hides sender, recipient and amount at any denomination, and supports shielded DeFi calls… Weakest on audit currency, admin keys and incident record (6/10): DefiLlama lists 2 audit links, both from 2021 (ABDK July 2021, Zokyo November 2021); the newest audit PDF reachable at assets.railgun.org is dated 14 September 2022, against $75.4M of live user funds. L2BEAT: the DAO has the authority to arbitrarily change the logic of the protocol and its shielded tokens, passing on… Published price: Protocol fees are 0.25% for shields and 0.25% for unshields, sent to the Treasury. Relayers may charge additional offchain fees independently.

Best for

Cryptographic guarantee and setup verifiability — 8/10Compliance signal without collapsing privacy — 8/10

Main tradeoff

The FBI announcement of January 2023 on the Harmony Horizon Bridge theft named RAILGUN by name as the protocol North Korea's Lazarus Group used to launder over $60 million of stolen ETH; Elliptic had already identified Railgun as the prime alternative to Tornado Cash after the latter was sanctioned. Railgun has never itself been OFAC-designated, and Private Proofs of Innocence was built in direct response, but no PPoI proof binds a third-party exchange's compliance desk. Note also the disclosure gap: Railgun's docs site has no fees page and no audit index, so the authoritative fee figure above had to come from L2BEAT rather than the vendor.

Verify before signup

Protocol fees are 0.25% for shields and 0.25% for unshields, sent to the Treasury. Relayers may charge additional offchain fees independently.

Weighted criteria

Cryptographic guarantee and setup verifiability30%

Compliance signal without collapsing privacy25%

Live anonymity set and measurable usage25%

Audit currency, admin keys and incident record20%

Leading options

Shared shortlist for this category

These providers are pulled from the same category comparison catalog used in validation, so the category page, comparison page, and provider reviews stay aligned.

Railgun

Shielded EVM balances and zk transfers, DAO-upgradable contracts

Editor lead

Best for: Cryptographic guarantee and setup verifiability — 8/10

Privacy Pools (0xbow)

ASP-gated shielded pool, a single entity vets every deposit

ASP-gated shielded pool, a single entity vets every deposit. Strongest on cryptographic guarantee and setup verifiability (8/10): Groth16 ceremony with 80 participants in Phase 1 and over 500 contributions in Phase 2, concluded March 2025. L2BEAT rates the setup Reproducible. Implements the association-set construction from the 2023 Buterin-Soleimani paper: you prove membership of a clean deposit set without revealing which deposit is yours. Weakest on audit currency, admin keys and incident record (4/10): DefiLlama records audits: 0 with no audit links for Privacy Pools. L2BEAT: the 2/4 Privacy Pools Multisig can instantly change the system's critical configs, including the Entrypoint implementation and ASP root used for private withdrawals. One EOA plus that multisig can publish new roots. No timelock is documented on… Published price: Vetting fees range from 0-0.5% on deposits; relayer fees capped at 5-10% per asset depending on token type.

Best for: Cryptographic guarantee and setup verifiability — 8/10

Aztec Network

Privacy L2 with client-side proofs and programmable private smart contracts

Privacy L2 with client-side proofs and programmable private smart contracts. Strongest on cryptographic guarantee and setup verifiability (9/10): Strongest setup provenance in the category. The Ignition MPC ceremony ran 25 October 2019 to 2 January 2020 with 176 individuals and institutions, each generating 100.8 million BN254 points, and contributions are independently checkable via github.com/AztecProtocol/ignition-verification. The resulting universal PLONK… Weakest on audit currency, admin keys and incident record (3/10): Aztec's own Alpha V5 announcement states: Note that this is an early version of the network with known vulnerabilities, see this post for details, and the network remains in alpha, and further bugs may surface as usage grows. Bug bounty runs through Cantina with more than 234 security researchers. Two deprecated Aztec… Published price: under a $0.05 transaction cost

Best for: Cryptographic guarantee and setup verifiability — 9/10

Browse this network

Methodology

How this category is reviewed

Reviewed on the cryptographic guarantee and how checkable its setup is, compliance that does not hand one party a revocable switch, the live anonymity set, and admin keys and incident record.

Reviewed on: Cryptographic guarantee and setup verifiability, Compliance signal without collapsing privacy, Live anonymity set and measurable usage, Audit currency, admin keys and incident record.

This page is a maintained category surface, not a static marketing block. Review freshness, provider positioning, and recommendation logic should stay consistent with quiz and provider pages.

Frequently asked

Questions people ask before choosing privacy tools

Does zero-knowledge mean my transaction is private?

No, and conflating the two is the most common mistake in this category. Zero-knowledge describes the proof system; what it hides is a design choice made separately. Stealth addresses carry no trusted-setup risk but hide far less than a shielded pool, and a shielded pool with almost no depositors hides very little in practice. What is scored is what the mechanism demonstrably conceals, and from how large a crowd.

Is a compliance-friendly privacy tool safer than a permissionless one?

Not automatically. Funds that cannot be unshielded into a regulated venue are not funds, so a compliance signal has real value — but a mechanism controlled by a single entity with no timelock converts privacy into permission, and that permission can be withdrawn after your money is inside. One protocol in this pool lets its association-set operator remove any deposit from the whitelist at any time, with a 2-of-4 multisig able to change the withdrawal root instantly, and does not disclose either in its docs.

Why are admin keys scored separately from the cryptography?

Because an upgrade key exercisable without delay is a strictly larger risk than the proof system underneath it. The cryptography is what most users cannot check; the key is what a small group can use. Deprecated privacy contracts have also been drained years after shutdown, so the exit path is scored alongside the entry.

REVIEWEDApr 2026METHOD4 criteriaCATEGORYprivacy_tools

Not financial advice · For informational purposes only · Always do your own research

Octopus · The AI CFO that pays for itself

Audit your entire crypto stack — free.

Score concentration, fees, security, and tax complexity across exchanges, wallets, staking, and DeFi.

Not financial advice · For informational purposes only · Always do your own research