Roadmap

Toward an Ethereum where no address is ever reused.

Ethereum plans its own future in parallel tracks, each with one goal. So do we. Every phase below removes one way a payment can be traced back to the person who received it. Phases overlap; statuses change as things ship. We publish status, not dates.

liveAvailable nowbuildingBeing built nownextStarts after the current worklaterPlannedresearchOpen research, may change
PHASE 01live

The Measure

Know exactly how stealth payments leak.

  • Leak study of every Umbra and ERC-5564 payment on Ethereumlive
  • Open-source scanner with aggregate-only outputlive
  • Findings upstream: the ERC-5564 thread and the stealth-address SDKnext
  • Leak check for your own wallet, in the browsernext
  • Public leak rate over timenext

Every later phase is judged against a number anyone can reproduce.

PHASE 02building

The Receive

A private place to get paid, on open standards.

  • Client: receive, send and local scanning with view tagsbuilding
  • Withdrawal policy engine that closes H1 to H5 by defaultbuilding
  • The same keys on Ethereum, Arbitrum, Base, Optimism and Polygonnext
  • Private names: name.ephmrl.eth through ENS and CCIP-Readnext
  • Read-only viewing access for an accountantnext

Privacy that works with every ERC-5564 wallet, not only ours.

PHASE 03building

The Hook

The privacy layer for Uniswap v4.

  • Stealth Buy: buy a v4 token straight into a fresh address, gas includedbuilding
  • Pay in any token: the payer sends ETH, you receive the token you chose on a one-time addressnext
  • Stealth Buy for every Uniswap v4 pool, hooked or notnext
  • Private payouts for hooks: NFT rewards, buybacks and airdrops to one-time addresseslater
  • Launch kit: an immutable anti-sniper hook with private buys built in, for other projectslater
  • Relay network: independent relayers pay the gas for private withdrawalsresearch

Hooks are turning tokens into products, and every one of them still pays and receives in public. One privacy layer that any hook can call fixes that for all of them at once.

PHASE 04next

The Vanish

No link when you move it.

  • Gas tank: sponsored withdrawals, never funded from a linked walletnext
  • Withdrawal scheduler that splits, rounds and delays for younext
  • Receive, then shield: one step into a shielded poolresearch
  • Private payouts to many recipients in one transactionlater

Closes the last habits that undo privacy.

PHASE 05later

The Spread

Private by default, in every wallet.

  • SDK that other wallets embednext
  • Wallet integrationslater
  • Payroll and invoicing: a fresh address per payslip and invoicelater
  • Merchant checkout: one name per store, one address per orderlater
  • Standards work upstream on token transfers, registry and namesnext

A layer grows when others build on it. The aim is that ephemeral becomes how Ethereum receives.

PHASE 06later

The Machines

Payments for agents.

  • Agents paid to a fresh address for every joblater
  • MCP server so any agent can receive privatelylater
  • Private AI credits funded from a stealth addresslater
  • Pay-per-request APIs that settle to one-time addressesresearch

Agents may soon receive more payments than people do. None of them should publish its income.

PHASE 07research

The Proof

Private, and still provable.

  • Prove one payment without revealing any otherresearch
  • Scoped viewing keys, limited by time or by payerresearch
  • Tax and audit reports generated from the viewing keylater

Privacy that funds, companies and auditors can use without trusting us.

PHASE 08research

The Endgame

Never reuse an address again.

  • Scanning at scale without trusting an RPCresearch
  • Post-quantum stealth addressesresearch
  • Stealth accounts with native account abstractionresearch
  • Decentralised name gatewaysresearch

The long horizon: the default Ethereum address is one nobody ever reuses.

How we choose what comes next

The biggest measured leak goes first.

01

Measure the leak.

Where a phase closes a leak, it starts from a number in our public scan and ends when that number moves.

02

Close it by default.

A setting people have to find protects almost nobody. Safe paths are the default ones.

03

Keep it a standard.

Everything ships on ERC-5564, ERC-6538 and ENS, so other wallets can adopt it without us.

04

Say what is research.

Research items can change or be dropped. They are marked as such, here and in the docs.

This roadmap states intent, not a promise. Details for each item live in the docs.