# Shielded Bitcoin: Private Transfers on the Bitcoin L1

**URL:** <https://delvingbitcoin.org/t/shielded-bitcoin-private-transfers-on-the-bitcoin-l1/2912>\
**Category:** Protocol Design\
**Tags:** privacy\
**Created:** [September 24, 2026, 5:45pm UTC](https://delvingbitcoin.org/t/shielded-bitcoin-private-transfers-on-the-bitcoin-l1/2912 "2026-09-24T17:45:34Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![ZmnSCPxj](https://delvingbitcoin.org/letter_avatar_proxy/v4/letter/z/ee7513/32.png) [@ZmnSCPxj](https://delvingbitcoin.org/u/ZmnSCPxj)\
**Post date:** [October 2, 2026, 7:01pm UTC](https://delvingbitcoin.org/t/shielded-bitcoin-private-transfers-on-the-bitcoin-l1/2912/12 "2026-10-02T19:01:30Z")

</div>

> [@AdamISZ](#):
>
> But there needs to be a way to challenge such a proof (with a heavier chain or similar).

Hmm, I suppose for a “true” sidechain where the sidechain has a different set of miners as the true Bitcoin blockchain, as in the original sidechains paper, this distinction makes sense.

However, I think for the purposes of what is effectively a sidechain published inside the true Bitcoin blockchain, the distinction does not matter.

With the original sidechains paper, at _some_ point, on the true Bitcoin blockchain, the amount must be released, at which point challenging with a heavier chain is no longer possible. If after that timeout, you come into possession of a heavier chain on the sidechain that contradicts the peg-out, the coins on the true Bitcoin blockchain have already been released, so it is too late.

In the case of a sidechain or sidechain-like construction whose publication is itself tied to the true Bitcoin blockchain (as in this proposal, or with qevirpunvaf), that timeout can be encoded as the requirement to present a Bitcoin header chain of that length, proving burial of a block that contains (a commitment to) the peg-out sidechain-side transaction.

Whether to make any scheme similar to this a “sidechain” or not is largely a detail of whether the transactions are encoded directly into some `OP_RETURN` or similar in the true Bitcoin blockchain, or only commitments to those transactions, with the transaction data being stored in a separate network.

---

_[View the full topic](https://delvingbitcoin.org/t/shielded-bitcoin-private-transfers-on-the-bitcoin-l1/2912)._
