ETH builders develop new POAPrivacy tools ahead of 10 year anniversary

As ETH celebrates its tenth anniversary, it brings into focus every little thing that the challenge has achieved — enabling DeFi, good contracts, and sprouting a vibrant ecosystem of dApps constructed on privateness.

As Ethereum (ETH) celebrates its tenth anniversary, it brings into focus every little thing that the challenge has achieved — enabling DeFi, good contracts, and sprouting a vibrant ecosystem of dApps. But it surely additionally shines a highlight on the challenges that stay. One such problem is privateness, a cornerstone of digital freedom that is still elusive on a public blockchain.

Regardless of a decade of innovation, Ethereum nonetheless struggles to guard customers’ private knowledge. On-chain transparency, as soon as hailed as a characteristic, is more and more seen as a legal responsibility, particularly when utilized to real-world contexts like well being and identification.

This stress got here into sharp focus onstage at ETHCC in Berlin earlier this summer time, the place privateness advocate Migle Rakitaite publicly challenged the Ethereum Basis for failing to fund or prioritize crypto-native instruments that safeguard deeply private knowledge like reproductive well being.

That trade not solely impressed the creation of PrivyCycle — an app that ranked amongst ETHCC’s prime 10 initiatives out of 334 entries and gained three separate sponsor prizes — however, extra importantly, highlighted how underprepared the Ethereum ecosystem stays for dealing with delicate, non-financial info.

You may also like: PrivyCycle and the unfinished enterprise of privateness on Ethereum

The problem of on-chain privateness

The priority of on-chain privateness has solely grown extra pressing in a world of escalating surveillance and shrinking private boundaries. Ethereum co-founder Vitalik Buterin underscored the stakes at in late Might, stating: “On a civilizational degree, there’s various urgency in us determining privateness.” He known as on builders to deal with 4 key pillars of privateness: personal cash, personal identification, personal voting, and personal messaging.

However because the POAPrivacy demo at ETHGlobal Cannes revealed, there’s one other rising frontier within the struggle for on-chain privateness: personal presence.

POAPs — quick for Proof of Attendance Protocols — had been designed as digital mementos, permitting customers to gather NFTs that show they attended particular occasions. From hackathons to crypto conferences, they’ve develop into a sort of Web3 souvenir in addition to a sign of participation, group engagement, and even eligibility for rewards or governance.

Nonetheless, beneath that utility lies a quiet however severe privateness danger. Every POAP minted on-chain hyperlinks a person’s pockets to a particular location and time, successfully making a public breadcrumb path of their whereabouts.

“Anybody can principally observe your footsteps,” a dev defined through the demo. “We love POAPs, however they arrive at a price of privateness.”

In an surroundings the place pockets addresses are simply traced and cross-referenced, this may compromise not solely private privateness but additionally security — particularly for activists, public figures, or anybody searching for to separate their digital and bodily lives.

You may also like: Merchants rejoice as Ethereum surges past $3,650 amidst institutional demand for ‘digital oil’

POAPrivacy: defending presence on the blockchain

To deal with this missed vulnerability, a staff at ETHGlobal Cannes unveiled POAPrivacy — a software designed to confirm presence on-chain with out exposing customers’ real-world areas or linking again to their main pockets addresses.

On the coronary heart of the system is a intelligent use of stealth addresses — a cryptographic method that allows customers to obtain tokens at distinctive, one-time addresses which might be unlinkable to their primary pockets.

The way it works:

• Customers scan a QR code at an occasion.
• As an alternative of minting to their primary deal with, they generate a random stealth deal with utilizing a stealth meta-address derived from their ENS (Ethereum Identify Service) identification.
• The system generates two cryptographic keys:
  • A spending key (for later claiming)
  • A viewing key (for selectively revealing POAPs to trusted events)
• Minting is dealt with off the principle deal with, that means observers can’t hint a POAP again to the person’s pockets.

The challenge additionally demoed a personal dashboard the place customers can log in with passkeys, view their privately saved POAPs, and retrieve them as wanted. The core cryptography attracts on an underutilized Ethereum normal launched a number of years in the past however not often deployed at scale.

“Magic and cryptography is going on,” the staff defined, “and also you’ll be capable to see your POAPs — however others gained’t.”

Whereas nonetheless a prototype, the challenge acquired reward for addressing a significant privateness vulnerability in POAPs — certainly one of Ethereum’s most generally used options for occasion attendance verification, group engagement, and entry to unique rewards or governance.

The challenge was named one of many prime 10 finalists out of 334 entries at ETHGlobal Cannes 2025 — alongside different privacy-focused builds just like the beforehand talked about PrivyCycle and PrivacyLinks — highlighting a rising push to strengthen Ethereum’s social layer with privacy-preserving infrastructure.

You may also like: What Is a POAP (Proof of Attendance Protocol)?