Privacy · Review
ActivePrivacy Pools Review 2026: Ethereum Deposits With Association Sets
Privacy Pools is an Ethereum privacy protocol from 0xbow that lets users deposit ETH or ERC-20 tokens and later withdraw them to an address with no visible link to the deposit. Its main appeal is privacy paired with a compliance design, and its main caveat is that the fee, audit and team details are not published.
By the DappsAtlas editorial team · Updated
DappsAtlas score
6.0/10
Mixed
Our verdict on Privacy Pools
6.0/10Privacy Pools suits Ethereum users who want to move funds without a visible link between deposit and withdrawal and who accept proof-based screening. Its main strength is the combination of unlinkable withdrawals with an approved-set design and a non-custodial structure. The main caveat is that fees, audits and team details are not published in the material reviewed, and privacy tools carry legal and smart contract risk that users must weigh before depositing.
Score breakdown
How Privacy Pools scores
- Security
- n/a
- Ease of use
- 5.0/10
- Fees
- n/a
- Features
- 7.0/10
Scores run from 0 to 10 and are based only on facts we could verify. Where information was missing we mark the score n/a rather than guess.
What is Privacy Pools?
Privacy Pools is a privacy protocol on Ethereum built by 0xbow. Users deposit ETH or ERC-20 tokens into a pool and later withdraw them to an address that cannot be easily linked back to the deposit. The project presents this as a compliant way to transact privately, because users can prove their funds belong to an approved set.
In May 2025, the team removed deposit limits from the tool, according to public reporting. Later that year, the team launched v2, which public material describes as a multi-asset pool that adds private payments, swaps and Aave-based yield, across seven chains. The v2 announcement also described a trusted setup ceremony that invited outside contributors to add randomness to the proving keys.
The project says it is non-custodial, does not require KYC, and has no global viewing keys or backdoors. Its terms of use state that users access the protocol independently of 0xbow. The material reviewed does not include a full audit report or a list of team members.
How Privacy Pools works
Privacy Pools works like a shared pool. Many users deposit the same asset into one contract, so their deposits are mixed together. When a user deposits, they receive a secret that is needed later to take the funds out, and the secret should be kept private.
When the user withdraws, they generate a zero-knowledge proof. The proof shows that they own a valid deposit and that the deposit belongs to an approved association set, without revealing which deposit is theirs. The funds then arrive at a new address that has no visible link on the public ledger to the original deposit.
The v2 version adds a multi-asset pool design, and public material says it also supports private payments, swaps and yield from Aave. The design is meant to keep users' balances private while still letting the operator screen out illicit funds through the association sets.
6 features
Key features
01
Deposits and partial withdrawals
Users deposit ETH or ERC-20 tokens into a pool and withdraw in full or in parts.
02
Unlinkable withdrawals
Withdrawals go to an address with no visible link to the original deposit, using zero-knowledge proofs.
03
Association set proofs
Users prove a deposit belongs to an approved association set maintained by an authorized provider.
04
No deposit cap
Deposit limits were removed in May 2025, according to a public announcement.
05
Multi-asset pool v2
The v2 design unifies supported assets into a multi-asset pool, with swaps and yield features described in public material.
06
Trusted setup ceremony
A trusted setup ceremony for v2 proving keys invited outside contributors to add randomness.
Pros and cons
What we like
- Non-custodial design, as stated in the v2 announcement, so the pool is not held by a company.
- Withdrawals are designed so that a public observer cannot easily link them to a deposit.
- Association sets give the operator a way to screen illicit funds while keeping user privacy.
- Deposit limits were removed in May 2025, according to public reporting.
- Public documentation covers the smart contract layer and the terms of use.
Watch out for
- Deposits can be used by bad actors, so the protocol relies on association sets and screening that users must understand before relying on privacy.
- Withdrawals depend on proofs tied to approved sets, which adds steps and can confuse first-time users.
- Public criticism on developer forums argues that privacy tools of this kind can be misused or abused by authorities, and the debate is unresolved.
- Fees, audit reports and the core team's identities are not published in the material reviewed, so users cannot easily check costs or who maintains the code.
- The v2 design spans several chains and adds swaps and yield features, which means more code paths and more risk than the original deposit-and-withdraw tool.
Privacy Pools fees
Fees are not published in the material reviewed. Users would normally see network gas costs on Ethereum when depositing and withdrawing, and any protocol-level charges would be shown in the official documentation or the interface. Check those sources before using the tool, since the cost of a withdrawal can be significant compared with small deposits.
Is Privacy Pools safe?
Audits, the full team and the custody model are not published in the material reviewed. The project says it is non-custodial, which means users control their own funds through the contracts rather than through an intermediary. That reduces counterparty risk but does not remove smart contract risk, since bugs in zero-knowledge circuits or pool code could affect deposits.
Regulatory status is unclear. The project describes itself as compliant and built around association sets, but privacy tools attract scrutiny from regulators and forum critics who argue they can be misused. Users should check the legal position where they live before using the tool.
Privacy tools are not suitable for everyone, and no privacy protocol can guarantee anonymity. Use a fresh wallet, keep your secrets safe, and assume that a determined analyst may still link some activity. Gambling-style risk does not apply here, but anyone using crypto should keep responsible limits in mind.
7 steps
How to get started with Privacy Pools
- 1
Read the official documentation and terms of use, including the note that access to the protocol is independent of 0xbow.
- 2
Confirm that using a privacy tool of this kind is legal where you live and that it fits your tax and reporting obligations.
- 3
Set up an Ethereum wallet and fund it with ETH for gas costs.
- 4
Open the official Privacy Pools site and choose the pool for the asset you want to deposit.
- 5
Make a deposit and keep the secret information the protocol gives you, because it is needed to withdraw.
- 6
Complete the association set step if prompted, proving that your deposit belongs to an approved set.
- 7
Withdraw funds to a fresh address, in full or in parts, and check the transaction on a block explorer.
Who Privacy Pools is for
Privacy Pools is aimed at Ethereum users who want to keep their deposits and withdrawals harder to trace and who are comfortable with proof-based compliance. It is less suited to users who need clear fee schedules, audit reports or a named team before committing funds.
Privacy Pools FAQs
What is Privacy Pools?
Privacy Pools is a set of smart contracts on Ethereum. Users deposit ETH or ERC-20 tokens into a pool, and can later withdraw all or part of the funds to a new address. The withdrawal is designed so that a public observer cannot easily match it to the original deposit.
How does Privacy Pools keep privacy and compliance together?
The protocol uses zero-knowledge proofs. A user proves that their deposit belongs to an approved association set, maintained by an authorized provider, without revealing which deposit is theirs. The project says it blocks illicit actors this way, while keeping the pool itself non-custodial.
Does Privacy Pools require KYC?
The v2 announcement says the protocol is non-custodial, does not require KYC, and has no global viewing keys or backdoors. The project's terms of use say that access to the protocol is independent of 0xbow, the team behind it.
Which blockchains does Privacy Pools run on?
Privacy Pools is listed on Ethereum. Public material describes v2 expanding to seven chains with private payments, swaps and Aave-based yield, but the list of chains is not spelled out in the material reviewed, so check the official documentation before using it.
What does Privacy Pools cost to use?
The material reviewed does not publish a fee schedule, so users should check the official documentation and their own transaction costs on Ethereum before depositing. Privacy tools also add the risk of smart contract bugs, which is covered in the safety section.
Compare
Privacy Pools alternatives
Railgun is a zk-SNARK privacy protocol for Ethereum, Arbitrum, BNB Chain and Polygon that shields DeFi transactions, for users wanting on-chain privacy.
Zama is an FHE-based protocol that keeps token balances and amounts encrypted on Ethereum, aimed at institutions, developers and privacy-minded DeFi users.
Tornado Cash is a non-custodial privacy protocol for private transactions on Ethereum and several other networks, with a history of US sanctions.
Hinkal is a multichain privacy protocol for shielded stablecoin transfers and swaps, with viewing-key compliance, for users, developers and enterprises.
Privacy Cash is a Solana-first privacy app for sending SOL, ETH and USDC privately, with swap and bridge tabs across five networks.
0x0.ai is an Ethereum privacy project with the Arcane stealth-address wallet, a planned Spectre private DEX and revenue sharing for 0X0 token holders.
Same category
More Privacy dApps
Session is a decentralized, end-to-end encrypted messaging app with onion routing, supported by the SESH staking token on Ethereum.
Common is a non-custodial ZK privacy dapp on Arbitrum and Aleph Zero EVM that lets users shield funds and withdraw to a new, unlinkable wallet.
ADAMANT is a privacy-focused blockchain messenger and wallet with in-chat crypto transfers and community-run exchangers, using the ADM token.
zkBob is a non-custodial wallet and zk-SNARK protocol for private stablecoin transfers, mainly on Polygon and Optimism.
Msg is a browser-based service for sharing short encrypted messages through one-time links, without requiring an account.
Orchid is an Ethereum-based decentralized VPN where users pay independent bandwidth providers in the OXT token using probabilistic nanopayments.
Same chain
More on Ethereum
Lido is a liquid staking protocol where users stake ETH and receive stETH, a reward-earning token usable across DeFi, governed by LDO holders.
Aave V3 is a non-custodial DeFi lending protocol on 21 chains where users earn interest on deposits or borrow against collateral.
Uniswap V4 is the latest Uniswap DEX version with hooks and concentrated liquidity, running on 22 chains for self-custody token swaps and liquidity provision.
Uniswap V3 is a non-custodial decentralized exchange protocol for token swaps and concentrated liquidity provision across 40+ chains.
DeFi Saver is a non-custodial tool for managing and automating leveraged lending positions across major DeFi protocols on Ethereum and layer-2 networks.
OKX is a major centralized crypto exchange for spot and derivatives trading, earn products and a Web3 wallet, with its own OKB token.
How we checked
Sources
No public sources were recorded for this review.
Last updated . Spotted an error? Tell us and we will correct it.