Buterin published a three-part near-term privacy plan for Ethereum covering censorship resistance, transaction unlinking, and metadata shielding.
Posted May 21, 2026 at 6:35 am EST.
Vitalik Buterin published a technical thread on X Wednesday outlining three near-term upgrades designed to make privacy a native feature of Ethereum rather than something bolted on through third-party tools. The post materializes the conceptual privacy framing Buterin laid out at the Web3 Festival in Hong Kong earlier this spring.
The first initiative combines account abstraction with FOCIL (fork-choice enforced inclusion lists). Right now, private transactions on Ethereum pass through the public mempool, where block builders can see them and choose to exclude them. FOCIL changes that by allowing a committee of validators to propose lists of transactions that builders are required to include. If builders ignore them, the network can reject their blocks. Combined with account abstraction, which lets Ethereum accounts function like smart contracts with features like multi-signature approvals, the upgrade would make privacy transactions first-class with strong inclusion guarantees.
This story is an excerpt from the Unchained Daily newsletter.
Subscribe here to get these updates in your email for free
The second is keyed nonces, formalized as EIP-8250. Ethereum transactions currently follow a single sequential numbering system per account. That creates collisions and stalled execution when multiple parallel private transfers originate from the same pool. Keyed nonces replace the single counter with a (nonce_key, nonce_seq) structure, generating independent replay domains by activity type and making onchain correlation harder.
The third targets the access layer through tools like Kohaku, an open-source privacy toolkit introduced in 2025. Even if transactions are private, every time a user queries the blockchain to check a balance or read a smart contract, their wallet relies on third-party RPC node providers, exposing their IP address, location, and full wallet identity. Kohaku and the broader private-reads infrastructure would shield those queries.
Buterin framed the work as essential for giving ETH true “moneyness” and argued that Layer 1 privacy could drive more activity back to the Ethereum mainnet. The timing is deliberate: institutions at Consensus Hong Kong flagged privacy as a prerequisite for widespread institutional blockchain adoption, and the upgrades align with the CROPS mandate the Ethereum Foundation published in March, which names privacy as one of four non-negotiable network properties.
None of the three changes are live yet.
