Nov 2, 2026 · 1h 39m
Zcash bets privacy needs scale, resilience and economic strength
The Complete Zcash Roadmap | Sean Bowe and Dev Ojha
Zcash’s roadmap treats private payments as a systems problem spanning cryptography, wallets, proof-of-work, governance and the value of ZEC.
- 1Tachyon’s recursive proofs and stateless design aim to reduce shielded-state burdens while shifting pressure toward bandwidth and wallet infrastructure.
- 2Zcash’s post-quantum plan combines quantum recoverability, stronger privacy and incremental hardening before larger protocol changes arrive.
- 3The project sees governance paralysis and weak monetary sustainability as potentially greater long-term threats than a direct cryptographic break.
Don't miss
Sean Bowe and Dev Ojha identify governance paralysis and monetary-policy manipulation as more immediate ways to damage Zcash than breaking its cryptography.
The brief
Sean Bowe and Dev Ojha frame private digital money as increasingly urgent as chain analytics and data leaks make financial activity easier to link to real identities.
Their roadmap spans cryptography, consensus, wallets and economics, but the central argument is tightly coupled: stronger privacy is useful only if shielded payments can scale.
Tachyon’s recursive proofs and stateless design could replace per-transaction state burdens with aggregated verification, while pushing new constraints onto bandwidth, RPC privacy and wallet synchronization.
The post-quantum plan begins with quantum recoverability and incremental hardening, then moves toward broader privacy upgrades supported by formal verification and multi-assumption security.
The conversation ends on political economy: proof-of-work needs durable fee support, governance must avoid paralysis, and ZEC’s value affects the resources available to build the system.
What was said on this episode
45 statements · 34 positive · 11 negative
Zcash’s technical decisions have repeatedly been copied by the broader industry, especially Ethereum.
“Every time Zcash made a technical decision, the rest of the industry copied it. This was namely Ethereum.”
Listen at 0:00
People using transparent ledgers should now be highly concerned about privacy.
“When you use a transparent ledger now, you should be actually really nervous.”
Listen at 0:04
- Dev Ojhaon payment throughputPositive0:14
Higher payment throughput produces better anonymity than infrequent payments.
“Obviously a thousand payments per second.”
Listen at 0:14
Zcash should not compromise its privacy protections for external demands.
“We don't want to bend the knee on the privacy stuff.”
Listen at 0:21
Zcash makes wallet phishing substantially harder without access to a viewing key.
“You cannot fish someone's wallet without a viewing key so easily.”
Listen at 0:47
Bitcoin’s privacy flaws were expected to be fixable through cryptography.
“Bitcoin had major privacy flaws that were going to be eventually fixed with cryptography.”
Listen at 1:58
Zcash has been an important blockchain privacy project for many years.
“the project has become incredibly important for privacy for many years.”
Listen at 3:10
Zcash is currently the strongest opportunity for blockchain privacy to succeed.
“I think it's the best shot we have for privacy winning.”
Listen at 6:58
Transparent-ledger privacy risks will worsen substantially in coming years.
“in the coming years, I think it's going to get much worse”
Listen at 9:52
Users should move away from transparent ledgers immediately.
“we need to get away from these transparent ledgers like right away.”
Listen at 10:33
Zcash’s roadmap includes making its cryptography more secure and efficient.
“There's the cryptography side, so there's trying to make the cryptography more secure and more efficient.”
Listen at 11:59
Zcash’s roadmap prioritizes scaling, hardening the chain, and economic sustainability.
“I kind of think of it in high-level goals of get scale, harden the chain, and then ensure full economic sustainability.”
Listen at 12:39
Scaling privacy-focused wallets is uniquely difficult and harder than scaling the blockchain.
“Scaling privacy for walls is a fully unique challenge. And actually, it's actually harder than scaling a chain.”
Listen at 15:56
Partial transaction privacy can enable set-intersection attacks across transactions.
“leaking anything at all in one of the transactions immediately breaks everything in the other one.”
Listen at 23:31
Zcash development should maximize privacy without taking shortcuts.
“Maximize privacy of don't take a shortcut.”
Listen at 24:28
Zcash’s 21-million-coin supply cap should remain unchanged.
“21 million hard cap. That shouldn't change.”
Listen at 24:58
Zcash must scale private payments to achieve broad adoption and resilience.
“It needs to scale. The private payments need to scale in order to make that work at all.”
Listen at 26:25
- Dev Ojhaon payment throughput and anonymityPositive26:50
A system processing 1,000 payments per second provides better anonymity than weekly payments.
“do you have better anonymity in a system that has 1,000 payments per second or one payment a week? Obviously 1,000 payments per second.”
Listen at 26:50
Tachyon uses recursive SNARKs to aggregate Zcash’s large zero-knowledge proofs.
“Tachyon kind of addresses that and it uses this thing called a recursive snark to do it”
Listen at 31:19
Tachyon uses recursive SNARKs to reduce Zcash shielded-state growth.
“Tachyon addresses that also with the recursive SNARKs.”
Listen at 32:39
Zcash’s current private-payment cryptography cannot handle sufficiently many transactions.
“The actual cryptography, the private payment cryptography that takes place on chain just falls apart with too many transactions.”
Listen at 33:49
Tachyon reduces full-node verification from one proof per transaction to one proof per block.
“With Tachyon, your job as a full node is now to verify one ZKP.”
Listen at 34:39
Tachyon eliminates persistent state bloat from Zcash shielded transactions.
“the state bloat is now gone with Tachyon.”
Listen at 34:50
Tachyon provides at least a fivefold scaling improvement initially.
“the first one, is already like a 5x plus scale improvement on day one.”
Listen at 35:21
- Dev Ojhaon Private Information RetrievalPositive42:13
Private information retrieval lets servers answer wallet queries without learning the queried information.
“The server will operate over a terabyte of data and give you back an answer, but the server won't learn anything.”
Listen at 42:13
Zcash has deployed private information retrieval in production.
“Zcash has already deployed this PIR stuff.”
Listen at 43:24
- Dev Ojhaon Zcash RPC providersPositive44:41
Zcash should support many RPC providers paid anonymously by users.
“there'll be a ton of options. And there should be a market incentive where you can pay the providers you have anonymously.”
Listen at 44:41
Reducing Zcash block times will initially triple bandwidth from 60 to 180 kilobytes per second.
“step one is happening in like two weeks of just... Drop block times and keep the same block size. 3x is the bandwidth, so 60 kilobytes to 180.”
Listen at 48:50
- Dev Ojhaon Zcash throughputPositive50:23
Zcash can reach one to ten megabytes per second throughput with relatively straightforward changes.
“It'll be a pretty straightforward kind of IMO, not really any trade-offs path to get to like one to 10 megs per second of throughput.”
Listen at 50:23
Zcash has achieved quantum recoverability for shielded funds.
“we've actually achieved this in Zcash.”
Listen at 52:44
Post-quantum soundness prevents quantum attackers from counterfeiting Zcash.
“once it's post-quantum sound, they can't do that at all.”
Listen at 55:47
Zcash’s Near Intents integration is fully quantum-unlinkable.
“the Zcash near intense integration now is actually 100% quantum unlinkable”
Listen at 56:08
- Dev Ojhaon Zcash post-quantum roadmapPositive58:50
Quantum recoverability is live, while Tachyon is expected to deliver full post-quantum privacy.
“Quantum coverability is live. And then post-quantum privacy should be fully live with Tachyon.”
Listen at 58:50
Formal verification does not guarantee security if its specification is incorrect.
“the specification can be wrong.”
Listen at 1:08:37
Zcash’s formalized protocol can rapidly verify that cryptographic optimizations preserve zero knowledge.
“we could just basically take the existing thing we have formalized and immediately get a proof that it's zero knowledge.”
Listen at 1:12:24
Zcash’s eventual security design may require attackers to break two cryptographic assumptions.
“the end state of Zcash will look something like that, of, hey, you've got to go break two assumptions, not just one”
Listen at 1:14:32
Adding extensive features earlier would have left Zcash in a much worse position today.
“Zcash would be kind of screwed. Zcash would be like cooked right now if we had added all these crazy features years ago.”
Listen at 1:20:41
Zcash should prioritize payment scaling and defer additional features.
“until we scale payments, we shouldn't even talk about all these other things. We should keep it simple.”
Listen at 1:22:42
Zcash’s long-term proof-of-work security funding is likely to work.
“Do I think it's going to work? I think so.”
Listen at 1:28:06
Zcash should avoid changes opposed by its coin holders.
“if coin holders broadly agree with something, or rather if they disagree with something, we definitely shouldn't do it.”
Listen at 1:32:30
ZEC holders are essential to Zcash’s continued viability.
“ZEC holders are the lifeblood of the project.”
Listen at 1:33:21
- Dev Ojhaon Zcash market capitalizationPositive1:35:45
High market capitalization is necessary for Zcash to support very high payment throughput.
“you must have high market caps in order for this to like make any sense.”
Listen at 1:35:45
A high ZEC price supports protocol development, defense, and project success.
“a high prices act is like, you know, the flywheel of protocol evolution and defending the protocol and succeeding.”
Listen at 1:36:06
- Dev Ojhaon Zcash governanceNegative1:37:14
Governance paralysis is Zcash’s greatest current threat.
“I think the greatest problem is stasis.”
Listen at 1:37:14
- Dev Ojhaon Zcash governance committeesNegative1:37:40
Slow committee-based governance could seriously damage Zcash.
“the greatest threat is takedown by slow committee.”
Listen at 1:37:40
Statements are attributed to the speaker as said on the episode and reflect their view at the time, not PodLume's. They are not advice.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.