A person using a blockchain mixer can separate a deposit address from a withdrawal address, but that does not make the person invisible. The result depends on the size of the anonymity set, timing, wallet hygiene, later transactions, and what information an exchange or investigator already has. This article settles the practical question: what the privacy system hides, what remains public, and which alternative fits someone who wants separation without confusing privacy with anonymity.
What does the Ethereum privacy system actually hide?
The service operates through Ethereum smart contracts. A user deposits a fixed amount, receives a secret note, and later withdraws to another address. The withdrawal proves that the user owns a valid note without revealing which deposit created it.
That proof is a zero-knowledge proof: a cryptographic method for proving that a statement is true without revealing the underlying information, as defined in the Ethereum glossary. A commitment records the deposit in a form that does not expose the secret. A Merkle tree groups those commitments. A nullifier marks the note as spent, preventing the same deposit from being withdrawn twice.
The useful privacy property is therefore unlinkability. An observer can see a deposit and a withdrawal, but the contract does not announce which deposit belongs to which withdrawal. Treasury described the system as obfuscating transaction origin, destination, and counterparties when it sanctioned the mixer in August 2022. Treasury’s original sanctions announcement also described it as operating on Ethereum.
Why can a withdrawal still be connected to its owner?
Ethereum remains public. A block explorer can show addresses, amounts, contract calls, timestamps, gas payments, and later activity. The proof protects the link inside the contract; it does not erase the surrounding evidence.
- Timing: a withdrawal soon after a deposit may stand out.
- Amount: unusual amounts or a matching sequence can shrink the possible set of deposits.
- Funding: if the withdrawal wallet is funded from a known wallet, the separation may already be weakened.
- Reuse: sending funds from the withdrawal address to a previously identified service can reconnect the activity.
- Metadata: an exchange, RPC provider, wallet, or device may hold records that the blockchain does not.
Privacy is strongest when the observer has many plausible deposits to compare and no reliable outside information. It is weakest when the transaction pattern is distinctive. A mixer changes the graph; it does not make the graph disappear.
Does being removed from the sanctions list make use lawful?
No. The U.S. Treasury announced on March 21, 2025 that it had removed the economic sanctions against the protocol. The same announcement said the department remained concerned about state-sponsored hacking and money laundering and urged U.S. persons to exercise caution around transactions that may benefit malicious cyber actors. The delisting notice is the relevant status document.
That distinction matters: a sanctions-list change is not a universal legal approval, and it does not cleanse funds with a suspicious or criminal history. Anyone dealing with regulated exchanges, counterparties, or jurisdictions still needs to consider provenance checks and applicable rules.
Which option fits the privacy goal?
| Option | What remains visible | Main advantage | Main drawback |
|---|---|---|---|
| Direct wallet transfer | Both addresses and the payment | Simple and easy to verify | Weak separation |
| Exchange withdrawal | On-chain activity plus account records | Convenient fiat access | Identity and compliance linkage |
| On-chain mixer | Deposits, withdrawals, timing, and metadata | Breaks the obvious address link | High provenance and compliance friction |
| Selective-disclosure privacy app | Only the claims the design reveals | More controlled privacy | More technical assumptions and limited support |
Direct transfers fit ordinary payments. Exchanges fit users who prioritise convenience and accountability. A mixer fits only the narrower goal of breaking a visible address link, not proving that funds are clean or making the user anonymous. A privacy application with selective disclosure fits users who need to prove something about a transaction or membership while revealing less of their full wallet history. The practical comparison is laid out in this tornado cash reference.
Frequently asked questions
Can a block explorer identify the person behind a withdrawal?
Not from the withdrawal alone. It may do so when combined with exchange records, wallet reuse, timing, funding trails, or other evidence.
Does a zero-knowledge proof hide the transaction?
No. It hides the secret link being proved. The transaction calling the smart contract remains public.
Can privacy and compliance coexist?
Yes, when a system supports selective disclosure and users can document lawful source and destination information when required.