AnalysisZK-2026-0190
Privacy pools and the compliance question
Proving where funds did not come from turns out to be more tractable than proving where they did.
SeverityModerate
8 minZero-Knowledge Proofs
Association set constructions let a user demonstrate membership of a clean subset without revealing which member they are. That inverts the usual compliance ask and fits existing obligations better than blanket transparency.
The unresolved part is governance of the set itself. Whoever curates it holds real power, and no current design distributes that convincingly.