Ask anyone who has traced stolen crypto what the hardest part is, and you will rarely hear “the technology.” You will hear about the moment the trail walks into a privacy layer and the public record goes quiet. That moment is what this article is about: what actually happens when funds enter a mixer or a shielded pool, what disappears, what stays visible, and what a victim can still do after the trail goes dark.
This is the continuation of two earlier guides: how to track stolen crypto step by step, and what to do in the first 24 hours after a theft. Both end at the same wall. This article looks at the wall itself.
Two ways funds go dark
On Ethereum and most smart-contract chains, every transaction is public by default. When funds need to disappear, they typically use one of two mechanisms.
Mixers are contracts on transparent chains. Tornado Cash is the canonical example: deposit ETH from address A, later withdraw from address B, and the on-chain link between A and B is broken by a zk-SNARK proof. But the deposit and the withdrawal are both fully visible transactions, with amounts, timestamps, and gas patterns. Mixers hide the edge, not the nodes. That is also why sanctions and screening tools could target Tornado Cash activity in the first place: the perimeter is public.
Privacy chains move the privacy into the protocol itself. Zcash is the main example. It has two kinds of addresses. Transparent addresses (t-addresses) work like Bitcoin: fully visible. Shielded addresses hide sender, receiver, and amount using zero-knowledge proofs. The practical difference from a mixer is significant: inside the shielded pool, there is no public graph to analyze at all. Not “a link we cannot prove,” but no link published anywhere.
Inside the shielded pool
Zcash has shipped three generations of shielded pools: Sprout (2016, closed to new deposits), Sapling (2018), and Orchard (2022, built on the Halo 2 proof system and the current default for new wallets such as Zashi). Each generation improved proof speed and removed trust assumptions. The mechanics that matter to a tracer are shared:
- Note commitments. Shielded value exists as encrypted “notes” on-chain. Anyone can see that notes exist, but not their amount, owner, or recipient.
- The nullifier. Spending a note publishes a unique nullifier that prevents double-spending, without revealing which note was spent. Observers learn “someone spent something,” nothing more.
- The viewing key. The holder of a shielded address can grant read-only visibility of their own transactions to a third party: an exchange’s compliance team, an auditor, or an investigator. Spending control stays with the holder. This mechanism has no Monero equivalent, and it changes what “privacy” means in practice: Zcash privacy is provable and selectively disclosable, not a permanent wall.
- Unified addresses. Since 2022, a single Zcash address can carry both transparent and shielded payment capabilities, and modern wallets shield by default. This quietly raised the share of shielded activity without users consciously choosing privacy.
What an investigator still sees
This is the part that surprises people: a shielded pool is not a void. The visibility boundary is precise.
| Event | Public visibility |
|---|---|
| Transparent to transparent | Full: sender, receiver, amount |
| Transparent to shielded (entry) | Visible: who funded the pool, and for how much |
| Shielded to shielded | Nothing: no sender, receiver, or amount |
| Shielded to transparent (exit) | Visible: who received funds, and for how much |
Two consequences follow. First, the entry transaction is evidence. If stolen funds move into a shielded pool, the funding transaction is your last fully public artifact, and it should be preserved immediately. Second, the exit is a chokepoint. Funds enter privacy layers to be spent or cashed out eventually, and the exit transaction, especially into a centralized exchange, re-attaches an identity through KYC. Investigations into shielded-pool flows usually do not “break the pool.” They wait at the exits.
Chain analytics vendors have worked this perimeter for years. Chainalysis stated back in 2020 that it could partially trace the large majority of Zcash activity; that claim was widely repeated and deserves its original context: at the time, most Zcash activity ran through transparent addresses, so “traceable” mostly meant “was never hidden.” As shielded adoption grew through 2025, that framing aged badly, and community analyses pushed back on the number. The defensible statement in 2026 is narrower: entry and exit points are observable, internal flows are not, and timing or amount correlations at the edges are heuristics, not proofs.
The 2025 shift: privacy came back
For most of its history, Zcash’s shielded pools were a curiosity: engagement was low and the “privacy” in the name was mostly theoretical. That changed in 2025, and the numbers are worth knowing because they change the odds a tracing case will hit a shielded pool at all.
According to Delphi Digital, the share of ZEC supply held in shielded pools rose from roughly 11% to about 30% during 2025, more growth than the previous eight years combined. Crypto.news reported that the share of transactions touching shielded pools reached around 59% at points during the year, and that the Orchard pool alone held roughly 4.2 million ZEC. The drivers, per public reporting, were unglamorous: faster Orchard proofs, wallet UX that shields by default (Zashi), and new cross-chain access rails that made acquiring and shielding ZEC easier.
Regulation moved in the opposite direction at the same time. Japan’s regulator pushed privacy coins off exchanges back in 2018. Binance delisted Monero and peers in early 2024. Under the EU’s MiCA traceability requirements, licensed exchanges in Europe widely delisted or moved privacy coins to withdraw-only status, and similar restrictions spread across major venues. The result is a paradox worth stating plainly: the same years that suppressed privacy coins on regulated exchanges saw shielded usage grow faster than ever. Suppressed liquidity did not remove the demand; it moved it to less supervised entry points.
Zcash versus Monero, from the tracer’s chair
The two dominant privacy chains fail differently, and that matters for expectations.
Monero is private by default: every normal transaction hides sender, receiver, and amount using ring signatures and one-time addresses. There is no opt-out to a transparent mode and no viewing key mechanism, so a Monero user cannot selectively prove their own history to a counterparty. Analytic vendors have claimed probabilistic tracing success against Monero; those claims are disputed and, regardless, produce leads rather than courtroom-grade attribution.
Zcash is private by choice. Historically most users chose transparency, and the design leans cooperative: viewing keys, unified addresses, and a compliance narrative that dates to its founders. For a victim’s purposes, the practical summary is: funds entering Monero are closer to a hard stop; funds entering Zcash’s shielded pool break the public trail but keep observable edges and a built-in disclosure mechanism that exchanges and law enforcement can use with the holder’s cooperation, or a court’s order.
What victims should actually do
If your case has reached a privacy layer, the playbook narrows but does not empty:
- Freeze the public evidence now. Export or screenshot the entry transaction: hash, addresses, amounts, timestamps, plus the social-engineering context that led to it. This is the artifact you will attach to every report that follows.
- Report to both exchanges. The exchange you sent from can flag your account and sometimes freeze related withdrawals; the receiving venue, if funds later surface there, acts on the KYC identity behind the exit address. Law enforcement can compel what victims cannot.
- File the police report early. In every recovery story that ended well, the report existed before the funds surfaced at an exchange, not after. Tracing firms and exchanges both take an existing case number more seriously.
- Understand what tracing can honestly deliver. Inside the pool, no vendor sells certainty. At the edges, timing and amount correlation produce leads. Set expectations accordingly, and be suspicious of anyone promising to “crack” shielded pools.
- Watch the exits, not the pool. For meaningful amounts, professional monitoring of exit flows toward exchanges is the highest-leverage spend, because that is where identity re-enters the picture.
Limitations of this analysis
This article describes protocol-level visibility, not operational intelligence. Individual analytics vendors hold private data (exchange trade logs, seized-wallet graphs, IP-layer signals) that can materially change a specific case. Network-layer weaknesses, such as node-level observation of transaction origination, are actively researched and were not covered here. And the 2025 adoption figures cited come from public reporting, not from independent verification; treat them as directionally solid, not exact.
Related reading
- How to track stolen crypto: a practical walkthrough
- Stolen crypto: the first 24 hours
- zk-SNARK, Tornado Cash, Mixer, Viewing Key, Shielded Address, Nullifier
Frequently Asked Questions
Can stolen crypto be recovered after it enters a privacy pool?
Rarely by tracing alone, but not hopelessly. The trace typically breaks inside the pool because internal shielded transfers do not expose sender, receiver, or amount. However, funds usually exit the pool eventually, and the exit is observable. If the funds move to a centralized exchange, that exchange's KYC records are the single most effective recovery lever, and law enforcement can request them. Fast reporting with complete transaction evidence is what makes that possible.
Is Zcash mainly used by criminals?
No. According to public analyses over the years, illicit transactions are a small share of Zcash activity, and Monero, not Zcash, has long been the default currency of ransomware and darknet markets. Zcash's privacy is opt-in, most historical activity used transparent addresses, and its viewing-key mechanism was explicitly designed to support compliance and audits. Treat 'privacy coin equals crime coin' as a marketing claim, not a fact.
What is the difference between a mixer and a shielded pool?
A mixer is a separate contract on an otherwise transparent chain: deposits and withdrawals are public, and the mixer only hides the link between them. A shielded pool is native to the protocol: transactions inside it hide sender, receiver, and amount using zero-knowledge proofs, and a nullifier prevents the same funds from being spent twice without revealing which note was spent.
What should I do immediately after my funds move toward a privacy pool?
Record everything while it is still visible: transaction hashes, timestamps, amounts, the receiving addresses, and any conversation or website involved. Report to the exchange you sent from, report to law enforcement with the evidence, and consider a professional tracing firm if the amount justifies it. The entry transaction into the privacy layer is your last fully public evidence, and it becomes much harder to reconstruct later.