Starknet launched STRK20, a zero-knowledge (ZK) privacy framework that lets users shield ERC-20 token balances and conduct private transfers and swaps on the Ethereum layer-2 (L2) network. The note-based system, built since April’s v0.14.2 upgrade, includes encrypted viewing keys for compliance, allowing selective disclosure to regulators without exposing uninvolved users.
How STRK20 works: Notes, not mixers
Starknet is careful to distinguish STRK20 from traditional mixers like Tornado Cash. A mixer routes assets through a separate destination to break the transaction trail. STRK20 instead embeds shielding directly into the asset itself.
Here’s how it actually works: when you shield an ERC-20 token, it goes into a pool and shows up as an encrypted note. When you send tokens, you’re basically swapping old notes for new ones. Every move is backed by a zero-knowledge proof (ZKP) that double-checks that the notes are legit, you actually own them, and the math adds up, all without revealing the details.
Starknet then verifies that proof onchain to update the pool. Anyone watching can see that something happened in the protocol, but the sender, receiver, and the specific amounts stay totally hidden. Damian Chen, VP of Growth at the Starknet Foundation, described it as “practical privacy in the truest sense.”
The compliance path: Viewing keys and legal disclosure
Crypto privacy has always been a bit of a regulatory headache. Just look at Tornado Cash; it got hit with sanctions because it offered total anonymity with zero accountability. STRK20 fixes this with a clever viewing-key system. A third-party auditor keeps an encrypted key that can trace specific transactions if there’s a legit legal request, all without snooping on everyone else.
StarkWare CEO Eli Ben-Sasson explains that STRK20 uses a risk-based model where privacy is the standard, not a brick wall. Assets get screened before they enter the shielded pool, and the viewing keys are there only when a lawful request comes through.
The framework provides the infrastructure for disclosure but does not itself determine legal compliance. That’s the difference between “private by default, accountable when required” (STRK20) and “private always, no exceptions” (sanctioned mixers).
What this means for Starknet and the Ecosystem
The launch positions Starknet as a leader in compliant privacy, a niche that’s about to get very crowded. Sui launched confidential transfers (concealing amounts, not full flows) in public beta this week. Aztec shipped Nyx v2 with private accounts governed by Ethereum keys earlier this year. Zcash is recovering from an Orchard counterfeiting bug.
But STRK20 has two key differentiators:
- First, it targets existing ERC-20 assets rather than requiring users to move to a separate privacy-native asset. Any ERC-20 on Starknet can be shielded through the same pool without fragmenting liquidity.
- Second, the compliance framework is built in from day one, not bolted on later.
The first major application built on STRK20 is strkBTC, bringing shielded balances and private transfers to Bitcoin activity on Starknet. Broader DeFi integration (private lending and borrowing) is planned for future phases, along with cross-chain capabilities and an open-source Software Development Kit (SDK) for builders.
