After 16 weeks of RIGOROUS grind at @Web3Bridge, participating in their Zero Knowledge program; My team built a full shielded token stack on EVM for private token transfers and I’m sharing both a demo video (Privacy native wallet extension + User facing dApp UX) and the technical paper in this post. Architecture: Noir circuit + Barretenberg/Aztec UltraHonk proving + Solidity verifier + relayer + client-side note discovery. Model: UTXO-style notes with - commitment = Poseidon(owner_pk, token_field, amount, blinding), - Nullifier-based one-time spends (nullifier = Poseidon(spending_key, commitment)), - Depth-20 incremental Merkle tree + rolling root window, fixed public input lanes, and mode-gated constraints for transfer/unshield. - ShieldedERC20Pool (multi-token allowlisted pool) with routed encrypted note delivery (RoutedCommitment) using ECDH + HKDF-SHA256 + AES-GCM, and channel/subchannel for note discovery. Design goal is explicit: private in-pool state transitions with verifiable integrity, while shield/unshield remain honest public boundary actions. If you watch the video + read the paper, you’ll see both the privacy native wallet extension and the user facing dapp full loop working end-to-end: shield → private transfer(s) → note scan/decrypt → nullifier checks → unshield. Big shout out to the mentors holding our hands throughout the duration of the program. The knowledge passed has been invaluable. @WiseMrMusa, @only1franchesco, @Oba_Ddev, @Dev_esayayo. Next steps for us are; - Production hardening and compliance-by-design - Formal security review/audit of circuits/contracts/relayer, wallet key-management hardening (secure enclaves/HSM-backed options), relayer auth + anti-replay protections - Performance tuning for proof latency/UX. - In parallel, we’ll implement a compliance layer that preserves base protocol privacy while enabling jurisdiction-aware controls at the app edge (sanctions/geo screening for boundary actions, risk scoring/transaction monitoring, optional disclosure and auditable consent flows for regulated contexts), alongside legal review and phased rollout with testnet pilots before mainnet. Read technical document here: drive.google.com/file/d/1oDq… References / lineage: (@Zcash) Zcash protocol (UTXO commitments, nullifiers, shielded value flow) (@Ztark_Labs) STRK20 shielded token design direction (@aztecnetwork) Aztec/Barretenberg UltraHonk proving system Noir language/tooling for circuit authoring.