Vitalik Buterin posted a short-term privacy roadmap for Ethereum on May 20. Not a blog post about ideals. Not a conference talk about what should happen someday. Three specific engineering projects, each targeting a different layer of the privacy problem, each already in development.
The timing is deliberate. Buterin spent March and April framing privacy as a defense against AI surveillance, frontrunning, and the “public bulletin board” model that makes every Ethereum transaction visible to anyone with a block explorer. Now he is turning that framing into deployable code.
Step One: Account Abstraction Plus FOCIL
The first upgrade combines account abstraction (AA) with Forced Inclusion Lists, known as FOCIL. Right now, major block builders can see which transactions involve privacy tools and simply refuse to include them. That is soft censorship. It does not require a protocol rule. It just requires a builder who prefers not to touch privacy transactions.
FOCIL changes that by requiring validators to include transactions they receive, removing the builder’s ability to filter selectively. Paired with AA, which changes how accounts authorize transactions, the combination makes private transactions structurally harder to censor. The Tornado Cash prosecution showed what happens when privacy tools exist outside the protocol. Buterin’s answer is to build them inside it.
Step Two: Keyed Nonces Break the Chain of Evidence
Every Ethereum transaction uses a nonce: a sequential number that prevents replay attacks. The problem is that nonces are sequential. If your wallet sends transaction 47, then transaction 48, then 49, anyone watching can link those three actions to the same account. It does not matter if you used different addresses. The nonce pattern gives you away.
EIP-8250 replaces the single sender nonce with a two-part key-and-sequence system. Different transaction types get different nonce streams. Privacy pool withdrawals can use nullifiers as keys, letting multiple users withdraw simultaneously without creating a sequential trail. This is not a minor tweak. It is a fundamental change to how Ethereum tracks transaction ordering, and it is scheduled for the Hegotá hard fork in the second half of 2026.
Step Three: Hiding What Your Wallet Looks At
The third piece targets the access layer. When your wallet checks a balance or queries a smart contract, that request goes through an RPC provider. Infura, Alchemy, or whoever runs your node connection. Those providers can see which addresses you are querying, when, and how often. That is metadata leakage, and it is arguably more revealing than the transactions themselves.
Buterin pointed to two projects addressing this: Kohaku, a privacy-focused wallet toolkit, and a “Private Reads” infrastructure that shields user queries from node operators. Neither is live yet. But the fact that access-layer privacy made the roadmap at all is notable. Most privacy discussions in crypto stop at the transaction level. Buterin is saying the read layer matters just as much. In an ecosystem where Ethereum’s L2 economy is already fragmented across $40 billion in liquidity, adding a privacy layer to the base chain could give users a reason to come back to mainnet.
Why Privacy Is an ETH Price Argument
Buterin explicitly connected privacy to what he called “true moneyness.” His argument: an asset that lets anyone trace your spending patterns, your counterparties, and your balances is not real money. It is a transparent ledger with a token attached. If Ethereum wants ETH to function as money and not just gas, it needs privacy at the protocol level.
That framing matters for the ETH/BTC ratio, which recently broke a 10-week high on DeFi clarity tailwinds. If native privacy drives more activity back to mainnet and away from L2s, the fee burn mechanism kicks in harder, ETH supply shrinks faster, and the value accrual loop tightens. That is the bull case. The bear case is simpler: regulators will not like it.
The Quantum Connection
Privacy and quantum resistance are not separate tracks. They share the same cryptographic primitives. The Ethereum Foundation launched a dedicated post-quantum security team in January and is targeting core infrastructure completion by 2029. EIP-8141, which could arrive in the same Hegotá hard fork, would let individual accounts adopt quantum-safe signature schemes without waiting for the entire network to upgrade.
Buterin is threading two needles at once: making Ethereum private enough to function as money, and secure enough to survive the quantum transition. Both changes land in the same hard fork. Both require upgrading the same account infrastructure. And both are moving faster than most people expected.
