Peter Todd Warns Zcash Tech Is Too Risky For Bitcoin Privacy Push

Bitcoin developer Peter Todd has pushed again towards calls to carry Zcash-style privateness into Bitcoin’s consensus layer, arguing that the cryptographic threat profile is simply too high for the community’s base protocol. The debate erupted after ZODL builders disclosed a problem affecting the Orchard shielded pool, briefly turning a technical incident right into a broader argument over privateness, auditability, and Bitcoin ossification.

Todd’s preliminary post was direct: “Why including Zcash fashion privateness to Bitcoin on the consensus layer is a foul thought.” He was responding to a publish from Zcash Open Development Lab, which mentioned a “coordinated Zcash community improve” was underway after a problem affecting the Zcash Orchard pool was recognized throughout routine auditing and safety overview processes.

Why Peter Todd Sounds Alarm On Zcash-Style Privacy

The alternate shortly widened past ZEC itself. One person argued that Bitcoin has its personal historical past of essential bugs, pointing to the 2010 worth overflow incident and the 2013 chain break up as proof that “no protocol is exempt from tech points.” The identical publish accused Bitcoin maximalists of pushing for “whole ossification” whereas dealing with future threats equivalent to quantum computing.

Todd answered by drawing a distinction between seen and hidden failures. “Exactly my level. With Bitcoin, rolling again the chain is possible, as solely a small subset of cash have been affected, and the exploit was trivial to note,” he wrote. His argument was not that Bitcoin is bug-free, however that its accounting mannequin makes sure courses of catastrophic bugs simpler to detect and unwind.

That level grew to become the core of the disagreement. When one other person argued that rejecting consensus-layer privateness on bug-risk grounds would “cease any innovation/growth,” Todd responded that not all cryptography carries the identical operational threat. “Different kinds of cryptography have completely different ranges of threat to them. Zcash-style cryptography has a really high degree of threat, way more so than Bitcoin’s cryptography. Which is mirrored in how Zcash has had way more severe points than Bitcoin.”

The counterargument was that Bitcoin itself has suffered severe early failures. One participant cited the 2010 value overflow incident and the 2018 bug, CVE-2018-17144, as examples that challenged Todd’s framing. Todd rejected the comparability, saying neither case put the forex on the identical sort of existential threat.

“Neither of these exploits had any likelihood of destroying the forex,” Todd wrote. “Exactly what cash have been counterfeit was trivially seen, permitting simple rollbacks. Not so with Zcash.”

The disagreement activates a particular property of shielded techniques: privateness can cut back the visibility that makes provide audits easy. In Todd’s view, this adjustments the chance calculation for Bitcoin. A bug in clear accounting may be seen as a result of invalid outputs or counterfeit cash are seen on-chain. In a deeply shielded system, he argued, the injury could also be harder to observe, more durable to attribute, and more durable to reverse.

Zcash defenders pushed again on that framing as nicely. One person advised Todd that he didn’t perceive the “turnstile assemble,” arguing that “no such bug can have an effect on the full ZEC provide.” Todd shifted the main target from whole provide to shielded person balances, noting that a big share of ZEC already sits inside the shielded pool. “30% of the Zcash provide is shielded. That provide being destroyed could be a catastrophe, and would fully wipe out the holdings of a high % of all Zcash customers. I personally have a bit of little bit of Zcash, all of which is shielded.”

At press time, ZEC traded at $532.