Ethereum's public ledger exposes every transfer, balance, and contract call to anyone with an internet connection. Analytics firms Elliptic and Nansen have collectively labeled more than 1.5 billion addresses across 65-plus blockchains, making pseudonymity largely theoretical. On November 3, 2026...
"A castle in the sky is no defense if there are no locks on the doors, and anyone can see through your walls." — Nicolas Consigny, Ethereum Foundation Privacy Coordinator
Ethereum's public ledger exposes every transfer, balance, and contract call to anyone with an internet connection. Analytics firms Elliptic and Nansen have collectively labeled more than 1.5 billion addresses across 65-plus blockchains, making pseudonymity largely theoretical. On November 3, 2026, at Devcon 8 in Mumbai, Ethereum co-founder Vitalik Buterin and EF researcher Nicolas Consigny demonstrated Kohaku on Ethereum mainnet — a modular SDK that integrates Railgun, Privacy Pools, and Tornado Cash directly into standard wallets. The demonstration used Ambire Wallet to execute shielded transactions, stealth-address receives, and per-dapp account isolation on live infrastructure.
Kohaku represents the Ethereum Foundation's first coordinated attempt to make privacy a default wallet feature rather than an opt-in add-on used by a small minority. The SDK, currently at v0.0.1-alpha.21, routes private transactions through ERC-4337 account abstraction mempools, eliminating the need for trusted relayer operators. The broader initiative is backed by a 47-person "Privacy Cluster" of engineers and cryptographers, with protocol-level integration targeted for the Hegotá hard fork in H2 2026.
The timing is not coincidental. DeFi has lost $1.3 billion to hacks in 2026, with Chainalysis retroactively revising its 2024 illicit estimate from $40.9 billion to $57.2 billion as new address-labeling data emerged. The EF's argument: transparent on-chain histories are not just a privacy concern — they are attack surfaces. Address poisoning alone generated 270 million attempts targeting 17 million victims between 2022 and 2024, resulting in $83.8 million in losses.
Public blockchains processed approximately 3.8 billion successful transactions per month in early 2025 — a 96% year-over-year increase. Every one of those transactions is visible on-chain: sender, recipient, amount, timestamp, and contract interaction.
The surveillance infrastructure built on this transparency is substantial:
| Metric | Figure | Source | |---|---|---| | Addresses labeled by Elliptic | 1 billion+ | Elliptic, 2026 | | Addresses tracked by Nansen | 500 million+ | Nansen platform data | | Illicit addresses receiving funds (2025) | $154 billion | TRM Labs | | Illicit share of attributed volume | ~1.2% | TRM Labs; <1% per Chainalysis | | Address poisoning attempts (2022-2024) | 270 million | Hinkal on-chain transparency report | | Victims of address poisoning | 17 million | Hinkal on-chain transparency report | | Losses from address poisoning | $83.8 million | Hinkal on-chain transparency report |
The Ethereum Foundation's position, formalized in the CROPS mandate on March 13, 2026, holds that this transparency creates systemic risk. When a wallet is compromised, the attacker can see the victim's entire financial history — every protocol interaction, every balance, every counterparty. According to the EF, "privacy and security must be built in by default to prevent on-chain history from being exploited in the event of a security breach."
The data supports this framing. Compromised private keys overtook smart-contract bugs as the leading attack vector for the first time on record in 2026. Lazarus Group alone accounts for at least 44% of all stolen funds this year. Transparent histories make social engineering, targeted phishing, and key-extraction attacks more effective by giving attackers detailed intelligence on high-value targets.
Kohaku is an open-source, modular SDK designed to be embedded in any Ethereum-connected wallet. Rather than building a standalone privacy application, the EF built a toolkit that wallet developers (MetaMask, Rainbow, Ambire, and others) can integrate into existing products.
The core components:
Per-Dapp Address Isolation. Each time a user connects to a new application, the wallet generates a fresh address. This breaks the on-chain link between a user's DEX activity, lending positions, and other interactions. Buterin called per-dapp address isolation "a really important place to start" for meaningful on-chain privacy.
Stealth Addresses. When receiving funds, the wallet automatically generates unlinkable one-time addresses, preventing senders from being permanently associated with the recipient's main wallet.
Shielded Transactions. Outbound transfers can be routed through privacy protocols (Railgun, Privacy Pools, or Tornado Cash), hiding the amount and destination from public view.
ERC-4337 Relaying. Private transactions are broadcast through standard account abstraction mempools rather than dedicated relayer networks. This removes the trust assumption inherent in centralized relayers and aligns with Ethereum's censorship-resistance architecture.
Helios Light Client. Local blockchain validation through the Helios light client eliminates reliance on RPC nodes that can log user queries and IP addresses.
Post-Quantum Killswitch. A forward-looking component using Falcon or Dilithium verifiers (optimized for Solidity) to protect accounts against quantum-computing threats.
The live demonstration at Devcon 8 in Mumbai on November 3, 2026 used Ambire Wallet — the first wallet to integrate the Kohaku SDK — running on Ethereum mainnet.
The session, led by Consigny and Buterin, showcased four capabilities:
Ambire serves as the reference implementation. The initial release is a browser extension aimed at power users, built as a fork of Ambire's existing wallet. The EF intends this as a template for broader adoption across the wallet ecosystem.
The demonstration occurred during a four-day conference (November 3-6) held at Mumbai's Jio World Center — a venue choice reflecting India's position as the largest source of new crypto developers since 2023, with 17 million-plus GitHub developers in the country.
Kohaku's approach is unusual: rather than building a proprietary privacy layer, it aggregates three existing protocols into a unified interface.
Railgun is the most mature integration. The kohaku-eth/railgun package reached v0.0.1-alpha.21 with operational ERC-4337 mempool relaying. Railgun holds approximately $110 million in TVL as of November 2, 2026 (down 4.5% over 30 days), representing 10.5% of the $1.044 billion privacy protocol category tracked by DefiLlama. Cumulative shielded volume reached $5.16 billion by June 2026.
Privacy Pools integration is in development. Privacy Pools use a compliance-oriented model: users can prove they are not associated with sanctioned addresses without revealing their identity, offering a middle path between full transparency and full anonymity.
Tornado Cash integration is also in development. OFAC removed Tornado Cash from its sanctions list on March 21, 2025, after an Austin federal court ruled the sanctions unlawful. The protocol is not currently designated, though developer criminal proceedings continue. Including Tornado Cash in the SDK carries legal ambiguity but signals the EF's intent to offer the broadest possible privacy toolkit.
The combined TVL and volume across all on-chain privacy protocols remains small. Railgun's $5.16 billion in cumulative four-year volume is a fraction of DeFi's $78 billion L2 TVL, illustrating that privacy remains a niche function rather than a default behavior — precisely the problem Kohaku aims to solve.
The EF published a formalized privacy roadmap in March 2026, with Kohaku as the centerpiece.
Phase 1 (2025): Core infrastructure. SDK release, reference wallet, basic privacy primitives. The SDK shipped on May 25, 2026.
Phase 2 (2025-2026): Advanced security features complementing privacy. Per-dapp account isolation, shielded transactions, peer-to-peer transaction broadcasting that bypasses RPC nodes. ERC-7811 RPC hijacking support for privacy-first JSON-RPC connectivity.
Phase 3 (2026+): Protocol-level integration. Native account abstraction with privacy-preserving capabilities baked directly into Ethereum. Targeted for the Hegotá hard fork in H2 2026, which includes FOCIL, Keyed Nonces via EIP-8250, and Kohaku features.
Post-launch additions include a native Ethereum browser with IPFS support and local AI transaction risk scoring that analyzes threats without exposing user data to external services.
The initiative is coordinated by the Privacy Cluster — 47 engineers, cryptographers, and researchers under the Ethereum Foundation, led by Igor Barinov. Privacy Stewards of Ethereum (PSE), operating since 2018, provides additional research support. Key developers on the SDK include kassandraETH and ncsgy (Nicolas Consigny).
Kohaku launches into a regulatory environment that remains ambiguous on privacy tools.
The OFAC reversal on Tornado Cash (March 2025) removed one obstacle, but developer prosecution continues. The CLARITY Act, which would have established clearer legal frameworks for crypto software, failed to advance in a Senate procedural vote on September 15, 2026 (49-50). U.S. midterm elections on November 5, 2026 add further uncertainty to the legislative pipeline.
In the UK, the Finance Bill 2026-27 proposes treating eligible stablecoins more like money for tax purposes from April 2027, with Capital Gains Tax exemptions for qualifying stablecoin disposals. This normalization of crypto-as-money may indirectly support privacy arguments: if stablecoins are money, users have the same privacy expectations as with bank accounts.
The EF's inclusion of Privacy Pools — which allow compliance proofs without identity disclosure — appears designed to address regulatory concerns preemptively. The compliance-oriented model offers institutional users a path to privacy without violating sanctions screening requirements.
Several factors limit near-term adoption:
Unaudited code. The Kohaku GitHub page notes the project is a work in progress with unaudited components. Shielded balances and automatic stealth addresses are listed as still under development.
Wallet integration timeline uncertain. While the EF envisions MetaMask, Rainbow, and other major wallets integrating the SDK, no public commitments from these wallet providers have been announced. Ambire is the only confirmed integration partner.
Privacy protocol TVL is marginal. The entire privacy protocol category holds $1.044 billion in TVL across 52 protocols — a fraction of the $78 billion in L2 TVL. User demand for on-chain privacy, as measured by capital deployed, remains low.
Gas overhead. Privacy transactions involve additional computation (zero-knowledge proof generation, shielded pool interactions) that increases gas costs relative to standard transfers. The EF has not published benchmarks comparing Kohaku-routed transactions to standard transactions.
Network effects. Privacy tools require liquidity in shielded pools to be effective. Small anonymity sets reduce privacy guarantees. Railgun's $110 million TVL, while the largest in the category, limits the practical anonymity available to users.
Kohaku is the Ethereum Foundation's most structured attempt to solve a problem that has defined public blockchains since inception: every transaction is visible to everyone. The SDK approach — embedding privacy into existing wallets rather than building standalone applications — is pragmatic. It recognizes that users will not adopt privacy tools that require switching to unfamiliar interfaces.
The Devcon 8 mainnet demonstration establishes that the core plumbing works: shielded transactions route through standard 4337 mempools, stealth addresses generate automatically, and per-dapp isolation prevents cross-application profiling. Whether wallet providers integrate the SDK at scale is a separate question the EF cannot answer alone.
The economic reality is stark. Over 1.5 billion addresses are labeled by surveillance firms. DeFi lost $1.3 billion to hacks in 2026, with compromised keys — not code bugs — as the primary vector. Transparent on-chain histories give attackers intelligence. The EF's argument that privacy is a security feature, not merely a preference, has data behind it.
What Kohaku does not resolve is the fundamental tension between privacy and compliance infrastructure that regulators are still building. Privacy Pools offer one bridge. Whether that bridge is wide enough for institutional adoption remains to be determined.