Vitalik Buterin on May 20, 2026 published a three-part privacy roadmap targeting Ethereum's persistent metadata leakage and transaction censorship vulnerabilities. The plan centers on three protocol-level changes — account abstraction paired with fork-choice enforced inclusion lists (FOCIL), keye...
"For Ethereum to function as a global settlement layer, it must be as neutral as the internet's base protocols." — Tim Clancy, Layer 2 Developer
Vitalik Buterin on May 20, 2026 published a three-part privacy roadmap targeting Ethereum's persistent metadata leakage and transaction censorship vulnerabilities. The plan centers on three protocol-level changes — account abstraction paired with fork-choice enforced inclusion lists (FOCIL), keyed nonces via EIP-8250, and access-layer infrastructure codenamed Kohaku — all slated for the Hegota hard fork in the second half of 2026.
The timing is not incidental. Privacy coins gained 288% in 2025, the best-performing crypto sector by a wide margin, while Railgun's share of Ethereum-based private transaction volume rose from 13% in 2022 to 71% in 2025. At the protocol level, roughly 58% of Ethereum block builders continue to censor OFAC-flagged transactions, according to MEV Watch data. Buterin's roadmap amounts to an admission that Ethereum's base layer has a censorship problem that social consensus alone cannot solve — and that privacy must be hardwired into the protocol rather than bolted on through third-party tooling.
Buterin's May 20 post identified three near-term protocol changes, all targeting the Hegota hard fork scheduled for H2 2026:
1. Account Abstraction + FOCIL (EIP-8141 + EIP-7805)
Account abstraction, formalized in omnibus proposal EIP-8141, converts Ethereum externally owned accounts into programmable smart contracts. This enables native signature verification for privacy protocols, eliminating reliance on external relayers. FOCIL (EIP-7805) complements this by requiring up to 17 validators per slot to submit inclusion lists that block builders must honor. The network treats blocks that ignore these lists as invalid.
Combined, the two proposals convert private transactions from second-class citizens dependent on relay infrastructure into first-class transactions with hard inclusion guarantees. According to Buterin, this eliminates "the relay dependency that has kept privacy tools expensive and fragile to maintain."
2. Keyed Nonces (EIP-8250)
EIP-8250 replaces Ethereum's linear sender nonce with a two-part system consisting of a nonce key and nonce sequence. Each key selects an independent nonce sequence, making transactions using different keys entirely replay-independent. The proposal was authored by Thomas Thiery, Toni Wahrstätter, Lightclient, and Buterin.
3. Access-Layer Work (Kohaku)
Kohaku, an open-source privacy toolkit introduced in 2025, addresses metadata leakage at the infrastructure layer. Current RPC node providers log IP addresses, physical locations, and wallet identities during queries. Kohaku provides private information retrieval tools that allow users to query balances and smart contract data without exposing access patterns.
The privacy roadmap responds to a measurable and persistent censorship problem at Ethereum's block production layer.
According to MEV Watch, approximately 58% of Ethereum block builders censored OFAC-flagged transactions over the most recent 30-day measurement period. Five of the six largest block builders actively filter transactions in compliance with U.S. Office of Foreign Assets Control directives. Only one major builder, titanbuilder, continues to include sanctioned transactions.
The concentration is structural. Between October 2023 and March 2024, three builders produced 80% of all MEV-Boost blocks. While the percentage of censoring blocks has declined from a peak of 79% in late 2022, the figure has stabilized in the 56-70% range through 2025 and into 2026. This plateau suggests market forces alone will not resolve the issue.
FOCIL changes the mechanism design. Rather than relying on builder goodwill, it distributes inclusion authority across 17 validator-selected committees per 12-second slot. Blocks that fail to include committee-mandated transactions are rejected by the fork-choice rule. This shifts censorship resistance from a social norm to a protocol guarantee.
The concern is not theoretical. Following the August 2022 Tornado Cash sanctions, Ethereum's censorship rate spiked to 79% within months. The March 2025 Treasury decision to remove Tornado Cash from the OFAC sanctions list — following a federal appeals court ruling that immutable smart contracts do not constitute "property" — reduced pressure but did not eliminate builder-level filtering behavior.
The keyed nonce proposal addresses a specific technical bottleneck that has constrained privacy protocol throughput on Ethereum.
Under the current system, each Ethereum address maintains a single sequential nonce. When privacy protocols route multiple independent users through a shared sender address — standard practice for protocols like Railgun — a single delayed transaction stalls all subsequent transactions from that address. This creates a dependency chain that degrades performance and makes private transactions unreliable under network congestion.
EIP-8250 introduces independent nonce domains per key. Each transaction specifies its own nonce key, and sequences within each domain operate independently. This means parallel private transfers originating from the same pool no longer collide.
The proposal has broader infrastructure implications. According to EthDaily's technical analysis, keyed nonces represent "a first step toward a broader state scaling strategy: creating specialized, restricted forms of storage on Ethereum" capable of managing hundreds of billions of entries while maintaining decentralized node operator feasibility.
The third pillar targets a vulnerability layer that protocol-level changes alone cannot address: metadata leakage from RPC infrastructure.
When a user queries their wallet balance, checks a smart contract state, or broadcasts a transaction, the RPC provider handling the request can log the user's IP address, geographic location, query content, and associated wallet addresses. Even if the transaction itself is shielded, the query patterns create a metadata fingerprint.
Kohaku, developed under Ethereum Foundation support and released as an open-source toolkit in 2025, implements private information retrieval techniques. Short-term solutions rely on trusted execution environments (TEE-based RPCs), while longer-term approaches use cryptographic techniques to decouple user queries from their identity.
Approximately 35 teams are pursuing roughly 13 distinct privacy solutions across the Ethereum ecosystem, according to data presented at the Ethereum Privacy Stack event at Devconnect Buenos Aires in 2025. The 2026 target is to reduce private transfer costs to approximately 2x the cost of a standard transfer, with the goal of making private transactions "effectively solved" by November 2026.
Buterin's roadmap arrives amid a widening split between privacy-as-default advocates and compliance-oriented builders.
Following the Tornado Cash saga, a new generation of privacy protocols has emerged with compliance features built in. Privacy Pools uses zero-knowledge proofs enabling users to dissociate their funds from illicit sources without revealing transaction details. The protocol's V2 implementation adds shielded transfers with selective disclosure via view keys. 0xbow implements Know Your Transaction (KYT) screening with non-custodial fund recovery mechanisms.
Eric Hill, counsel for the Railgun protocol, has argued that privacy projects should build on open-source technologies in a non-custodial, decentralized fashion "that does not meet definitions of financial services."
The tension is visible in the data. Railgun's TVL reached $108.51 million across four chains as of May 2026, with $102.47 million on Ethereum alone. The protocol generated $4.7 million in revenue on over $2 billion in shielded volume. Yet zero-knowledge proof adoption across Ethereum dApps expanded 340% following the Tornado Cash delisting, according to industry tracking data — suggesting demand for privacy infrastructure far exceeds what current protocols capture.
Ameen Soleimani has raised concerns that FOCIL may create a "legal chilling effect" where institutions hesitate to run validator nodes if forced inclusion means processing sanctioned transactions. This remains an unresolved regulatory question.
The market has priced in growing demand for privacy infrastructure.
Zcash rose from $58 to $744 between early and late 2025, a gain exceeding 1,000% from its lows. It traded above $600 in early May 2026. Monero climbed from approximately $190 to a peak of $797 in January 2026. The total privacy coin market capitalization exceeded $24 billion.
On Ethereum, Railgun's share of private transaction volume grew from 13% in 2022 to 71% in 2025, accelerated by the Ethereum Foundation's integration of the protocol into the Kohaku wallet toolkit in October 2025. Grayscale's Zcash Trust assets under management passed $123 million by late 2025.
Monero's May 6, 2026 launch of the FCMP++ and CARROT upgrade on a beta stressnet replaced its ring-signature model with full-chain membership proofs, representing the most significant cryptographic upgrade in the protocol's history.
The privacy sector's outperformance — 288% gains in 2025 versus broad crypto market losses — reflects a structural repricing of privacy as core infrastructure rather than a niche feature.
From an economic value distribution perspective, Buterin's privacy roadmap shifts value capture toward the protocol layer and away from third-party relay networks and specialized privacy-as-a-service providers.
Under the current architecture, privacy protocols like Railgun operate as middleware, capturing fees for shielding and relay services. If account abstraction and FOCIL eliminate the relay dependency, a portion of value currently flowing to relay operators would be absorbed by the base protocol's validator set. Keyed nonces reduce the operational overhead of privacy protocols, potentially compressing their fee margins.
The access-layer changes have the most direct economic impact on RPC infrastructure providers. Companies monetizing user data through query logging face a structural threat if Kohaku-style private reads become standard.
For institutional users, the combination of native privacy at the protocol level and compliance-friendly disclosure mechanisms could reduce the cost of on-chain confidentiality. The current workaround — operating through custodians and private mempools — carries counterparty risk and fee overhead that protocol-native privacy would eliminate.
Buterin's three-part privacy roadmap represents a structural shift in Ethereum's design philosophy — from treating privacy as an application-layer concern to encoding it as a protocol-level guarantee. The economic logic is straightforward: with 58% of block builders censoring transactions and privacy protocols handling billions in volume through fragile relay infrastructure, the current architecture has a measurable cost.
Whether the Hegota hard fork delivers on these proposals depends on resolving the compliance paradox. FOCIL's forced inclusion mechanism and Kohaku's metadata protection directly conflict with the surveillance capabilities that regulated entities rely upon. The 35 teams building privacy solutions across the Ethereum ecosystem are, in effect, building two parallel architectures — one for compliance-aware institutions and one for permissionless privacy — that the protocol must eventually reconcile.
The data suggests the market is not waiting for that reconciliation. Privacy coin prices, Railgun's volume growth, and the 340% expansion in ZK-proof adoption indicate users and institutions are moving toward privacy infrastructure regardless of the protocol's readiness. Buterin's roadmap is an attempt to ensure Ethereum captures that demand at the base layer rather than ceding it to competing chains and third-party middleware.