Who Is Zooko Wilcox? The Zcash Founder and Cypherpunk Behind ZEC

Search for "Zcash founder" and one name comes back: Zooko Wilcox. The label is accurate, but it hides most of the story. Zooko did not invent the cryptography that makes Zcash private, he did not build the network alone, and he does not run it today. He founded and led the company that turned an academic paper into a live currency, steered that project for seven years, stepped aside in 2023, and in 2026 is still working on Zcash from a different organisation. This profile separates what he actually did from the shorthand, with primary sources for every claim.

Who is Zooko Wilcox? The short answer

Zooko Wilcox is an American computer-security engineer and cypherpunk who has worked on private, decentralised digital systems since the 1990s. His career runs through most of the field's history: David Chaum's DigiCash in 1996, the peer-to-peer system Mojo Nation around 2000, the encrypted storage system Tahoe-LAFS from 2006, the company Least Authority from 2011, and the BLAKE2 and BLAKE3 hash functions. In 2015 he founded the Zerocoin Electric Coin Company, later renamed Electric Coin Company (ECC), together with scientists from the Zerocash research project. That company launched Zcash on October 28, 2016. Zooko served as its CEO until December 18, 2023.

Since August 2024 he has worked at Shielded Labs, an independent Zcash organisation based in Switzerland, where he is Chief Product Officer. He also advises Cypherpunk Technologies, a listed company that holds ZEC in its treasury.

One person, two names

Readers will find both "Zooko Wilcox" and "Zooko Wilcox-O'Hearn" in reliable sources. The hyphenated form appears on his academic work, including the 2008 Tahoe paper and the 2013 BLAKE2 paper, and in older Zcash material. The shorter form is what he uses today on Shielded Labs' team page and what z.cash uses. This article uses "Zooko Wilcox", or simply "Zooko", which is how the Zcash community has always referred to him. Reports giving a birth name and a birth date exist, but we found no primary source for them and leave them out.

Before Zcash: DigiCash and the search for private digital money

Zooko's first job in the field was at DigiCash, the Amsterdam company founded by cryptographer David Chaum to commercialise eCash, a digital-cash system built on blind signatures that let a bank sign a coin without seeing which coin it was signing. Zooko has said in interviews that he dropped out of his computer-science studies at the University of Colorado in 1996 when DigiCash offered him a job as a junior coder, and that he worked there alongside some of the best cryptographers in the world. His own speaker biography lists DigiCash first among the projects he is known for.

DigiCash failed commercially and filed for bankruptcy in 1998, but the problem it worked on, money that is private by design rather than by policy, stayed with him. He later described having spent twelve to fourteen years trying to come up with something like Bitcoin without being able to make it work. That remark is worth keeping in mind: Zcash was not his first attempt at private digital money, it was the one that succeeded.

Cypherpunk roots

The cypherpunks were a loose movement of programmers and cryptographers who argued, from the early 1990s, that privacy in a digital society would have to be built with code rather than requested from institutions. Their mailing list produced many of the ideas Bitcoin later combined. Archived posts show Zooko writing to the list from a Dutch email address in 1997 and 1998, including a thread on DigiCash issuers in which he anticipated banks competing on eCash fees. In a biography he supplied for a 2017 conference talk he described himself as having been an active cypherpunk for 24 years, and in 2024 court testimony he was reported to have acknowledged being one of the original cypherpunks.

The point matters for Zcash because it explains the project's framing. Zcash was never pitched as a faster Bitcoin or a cheaper one. It was pitched as the cypherpunk answer to a public ledger: a currency where the transaction graph that makes Bitcoin traceable is simply not there.

Mojo Nation, Tahoe-LAFS and Least Authority

Between DigiCash and Zcash, Zooko spent most of two decades on decentralised storage, a field that shares Zcash's core problem of coordinating strangers who do not trust each other.

Mojo Nation (2000 to 2002) was a peer-to-peer file system built by a small Mountain View company whose employees styled themselves "Evil Geniuses for a Better Tomorrow". It combined swarm downloads, erasure coding and an internal micropayment token called Mojo, years before BitTorrent popularised swarming. Zooko was one of its developers; the January 2001 release announcement was sent from his address. When the company ran out of money in 2002 he kept the code alive, forked it as Mnet, and wrote up why Mojo Nation had failed. Bram Cohen, who later created BitTorrent, also worked at the company.

Tahoe-LAFS (from 2006) is an open-source, encrypted, fault-tolerant storage system that Zooko co-designed with Brian Warner at the backup company Allmydata. The two presented it in a 2008 paper, "Tahoe: The Least-Authority Filesystem". Its "least authority" principle, giving every component only the minimum permissions it needs, is the design philosophy Zooko has carried into everything since, including his view that a currency should not have to trust its own developers.

Least Authority (2011) is the company he founded to continue that work: secure storage products and, from 2014, security audits for other projects. Its own company history records that in 2015 "Zcash started and spins out of Least Authority Enterprise LLC into another company, the Electric Coin Company, LLC". Least Authority is now led by Liz Steininger; we found no source describing an active operational role for Zooko there today.

Zooko's Triangle

In 2001 Zooko published a short essay arguing that a naming system can have at most two of three desirable properties: decentralised (no central authority assigns names), secure (a name cannot be hijacked) and human-meaningful (people can remember it). Phone numbers are secure and decentralised-ish but not meaningful; domain names are meaningful and secure but centralised; cryptographic public keys are secure and decentralised but unreadable.

The observation became known as Zooko's Triangle and is still the standard starting point for discussions of naming and identity. In 2011 Aaron Swartz argued in "Squaring the Triangle" that a blockchain could deliver all three properties at once, and the Namecoin project, launched that year, was built as the first attempt to do so. It is the piece of Zooko's work most people outside cryptocurrency have encountered, usually without knowing where it came from.

BLAKE2, BLAKE3 and Zcash's own hashing

Zooko is a co-author of two widely used cryptographic hash functions. BLAKE2, published in January 2013 with Jean-Philippe Aumasson, Samuel Neves and Christian Winnerlein, is a faster derivative of the SHA-3 finalist BLAKE and is used across modern software. BLAKE3, released in January 2020 by Jack O'Connor, Aumasson, Neves and Zooko, is faster still and was sponsored by Electric Coin Company.

This is not a side note for Zcash. The Zcash protocol specification uses BLAKE2b and BLAKE2s throughout: the Equihash mining algorithm's generator is BLAKE2b with the personalisation string "ZcashPoW", and BLAKE2 also appears in the protocol's key derivation and signature hashing. A hash function Zooko helped design is inside every Zcash block ever mined.

Zooko and the very early days of Bitcoin

Zooko was one of the first people outside Bitcoin's own creator to write about it publicly. Reporting by Fortune and others places a post titled "Decentralized Money" on his blog in January 2009, weeks after the Bitcoin network started. The post itself is only reachable through web archives today, so we treat its exact date and wording as reported rather than verified.

What is verified is Satoshi Nakamoto's reaction. In August 2010 Zooko opened a thread on the Bitcointalk forum about using Bitcoin payments in Tahoe-LAFS. Satoshi replied: "Hey Zooko! I wanted to thank you for posting about Bitcoin on your blog a year or two ago, back when I announced it on the Cryptography mailing list." That public reply is the only documented exchange between the two that we could find.

It is also the limit of what can honestly be said. Some articles describe Zooko as a Satoshi collaborator or correspondent. In testimony given under oath in the 2024 COPA v Wright trial in London, as reported by Protos, Zooko said he did not recall any email from Satoshi, thought it more likely he had seen the whitepaper on the mailing list, explicitly denied being "pals" with Satoshi, and said he had initially regarded Bitcoin as a scientific curiosity. This article therefore makes no claim that the two knew each other.

From Zerocoin to Zerocash

Zcash's cryptography did not come from Zooko. It came from a research group that set out to fix Bitcoin's privacy problem.

In 2013 Ian Miers, Christina Garman, Matthew Green and Aviel Rubin of Johns Hopkins University published "Zerocoin: Anonymous Distributed E-Cash from Bitcoin", proposing an extension to Bitcoin that let users break the link between coins they received and coins they spent. A year later a larger group, Eli Ben-Sasson, Alessandro Chiesa, Garman, Green, Miers, Eran Tromer and Madars Virza, published "Zerocash: Decentralized Anonymous Payments from Bitcoin". Zerocash replaced Zerocoin's bulky proofs with zk-SNARKs, hid the sender, recipient and amount of every payment, and brought proof sizes under one kilobyte.

The History of Zcash covers both papers and everything that followed on the protocol side in detail. For this profile the relevant point is simple: when Zcash's own website says the protocol was "invented by a group of scientists", those seven authors are the scientists it means.

How Zooko became involved

Turning Zerocash into a currency needed an organisation: engineers, funding, a launch plan and someone to run it. Zcash's official account is that "Zcash was invented by a group of scientists and brought to life by Electric Coin Co. and Zooko Wilcox, a computer security specialist and original cypherpunk."

A widely repeated version of the story has Matthew Green persuading Zooko to found the company. We could not locate that statement on the Zcash Foundation's site or in any other primary source, so we do not repeat it as fact. What the primary record shows is that in 2015 Zooko and several Zerocash authors formed a company together, that the company spun out of Least Authority, and that Zooko ran it. His background made him an obvious choice: a cypherpunk with DigiCash on his résumé, years of experience shipping decentralised systems, and a company already doing cryptographic engineering.

Building the company that launched Zcash

The company was registered in 2015 as Zerocoin Electric Coin Company, LLC, a legal name it kept. It traded publicly as "the Zcash Company" until February 21, 2019, when it adopted the name Electric Coin Company, partly to stop people confusing it with the separate Zcash Foundation. Zooko was its founder and CEO throughout. Engineers who joined early included Nathan Wilcox, Daira-Emma Hopwood and Sean Bowe, three of the four authors of the Zcash protocol specification.

Zcash's launch was financed by investors (reporting at the time put the seed round at over three million dollars) and by a mechanism written into the protocol itself. The Founders' Reward directed 20 percent of each block's new coins during Zcash's first four years, equal to 10 percent of the 21 million ZEC that will ever exist, to the founders, early employees, investors and advisers, and from 2017 to the Zcash Foundation. It was controversial from the start and ended, as designed, at the first halving in November 2020. Zooko pledged half of his own share to the Foundation.

The 2016 launch and the Ceremony

Zcash's original zk-SNARK proving system needed a trusted setup: generating its public parameters produced secret values, nicknamed toxic waste, that had to be destroyed or they could be used to counterfeit coins undetectably. The team's answer was a multi-party ceremony on October 22 and 23, 2016, in which six participants in six locations each generated a share of the secret and destroyed it. As long as one of the six was honest, the parameters were safe.

Zooko organised the Ceremony and took part in it. Peter Todd, one of the participants, has described being invited by Zooko and running his share from a vehicle in rural Canada. Another participant used the pseudonym John Dobbertin and was revealed in 2022 to have been Edward Snowden. The episode of the Radiolab podcast that documented the event introduced Zooko as its master of ceremonies.

Zcash's mainnet went live on October 28, 2016, with its first shielded protocol, Sprout, and a "slow start" that ramped the block subsidy up from zero over the first 20,000 blocks to limit the advantage of early miners. The first ZEC traded at absurd prices because almost none existed; that frenzy was reported widely and had little to do with the technology.

The ECC years, 2016 to 2023

For seven years Zooko was the public face and chief executive of Zcash's main engineering company. The milestones belong to teams, not to him alone, but he led the organisation through all of them:

• Sapling (October 2018) cut shielded transaction times from tens of seconds to a few seconds and made shielded Zcash usable on phones. See the network upgrades timeline.
• The Dev Fund debate (2019 to 2020). With the Founders' Reward ending, Zooko published a personal letter in July 2019 saying he hoped the community would renew a development fund, and that ECC would accept the community's decision even if it chose to defund ECC. The outcome, ZIP 1014, gave ECC 35 percent of a new 20 percent fund, the Zcash Foundation 25 percent and community grants 40 percent, and stated that increasingly decentralised governance was the goal.
• The trademark (November 2019). ECC donated the Zcash trademark to the Zcash Foundation under an agreement that requires both organisations to agree before either can say which chain is "Zcash". Neither can act alone.
• Bootstrap (2020). In October 2020 ECC's owners voted to donate the company to the Bootstrap Project, a US non-profit, making ECC a wholly owned subsidiary. Zooko announced the owners' support on the community forum on October 12, 2020.
• Halo and NU5 (2022). ECC's Sean Bowe discovered Halo, a proof system without a trusted setup; it reached mainnet as the Orchard shielded pool in the NU5 upgrade on May 31, 2022.
• Proof of Stake. In August 2021 Zooko published a post asking whether Zcash should switch from Proof of Work to Proof of Stake and argued that it would make ZEC more valuable to more people. That position became the seed of the work he does today.

Throughout this period his public message stayed consistent: privacy is normal, and tools that give people free choice should not be treated as exotic. He repeated that framing in interviews after the 2022 sanctions on Tornado Cash.

Zcash becoming an ecosystem, not a company

The most important thing to understand about Zooko's relationship to Zcash is that it has been deliberately diluted, with his cooperation, since 2017.

The Zcash Foundation was created in 2017 as an independent US charity, endowed with 273,000 ZEC from the Founders' Reward, with Andrew Miller as chair. It became a second protocol developer (it builds the Zebra node software), co-holder of the trademark, and co-signatory of every network-upgrade agreement. Zcash Community Grants (originally ZOMG, 2020) funds independent work from the Dev Fund. The 2024 Dev Fund, ZIP 1015, sent 8 percent of the block subsidy to ZCG and 12 percent to an in-protocol lockbox whose use is decided by coinholder voting. Shielded Labs, founded in Switzerland in December 2022 by Jason McGee, became the first major Zcash organisation never funded by block rewards.

Protocol changes have always gone through the public ZIP process and take effect only when node operators and miners adopt them. Zooko has been explicit that this is not his network. In a 2020 interview he said of Zcash, "we do not control it", and described how the community's Dev Fund decision had effectively taken power over Zcash's future from him. Our article on who controls Zcash walks through the current organisations in detail.

Why Zooko stepped down as ECC CEO

On December 18, 2023, ECC and its parent Bootstrap announced that Zooko was stepping down as CEO and that Josh Swihart, until then ECC's head of growth, would take over the same day. Zooko's own explanation, published on Medium, was personal: Zcash, he wrote, had taken over not only his life but also his identity, and that conflation of Zcash with him was healthy neither for him nor for the project. He added that he was stepping down as CEO but would never leave Zcash.

He initially stayed on as a director of Bootstrap. On July 5, 2024, Bootstrap announced that he was leaving that board seat and his executive-director position as well, to focus on Zcash's resilience from outside the company. When the entire ECC team resigned from Bootstrap in January 2026 and founded Zcash Open Development Lab (ZODL), Zooko was a bystander: reporting described him only as ECC's former CEO, and he publicly vouched for the integrity of the Bootstrap board members involved while telling users they could safely keep using Zcash. As of October 2026 he holds no role at ECC, Bootstrap or ZODL.

What Zooko Wilcox is doing today

Shielded Labs

Shielded Labs is an independent, donation-funded Zcash support organisation registered as a Swiss association in December 2022 and led by Executive Director Jason McGee. Its early donors included the Winklevoss twins and Vitalik Buterin. Zooko did not found it. He joined on August 8, 2024, announced on the community forum as Head of Product with a seat on its board, "to help lead the development of Crosslink". By December 2025, press releases and the organisation's team page listed him as Chief Product Officer, alongside Nate Wilcox as Chief Technology Officer and Ulrich Haböck as Chief Cryptographer. We found no announcement dating the title change.

In 2026 his work there has been concrete. He co-authored the April 2026 disclosure of several remediated Zcash vulnerabilities and the June 2026 disclosure of the Orchard counterfeiting vulnerability. With McGee and Taylor Hornby he co-proposed Ironwood, the new shielded pool with verifiable supply that went from proposal in early June to mainnet activation as NU6.3 on July 28, 2026. See our Ironwood status article.

Crosslink

Crosslink is Shielded Labs' proposed upgrade to add a Proof-of-Stake finality layer alongside Zcash's Proof-of-Work mining. Miners would keep producing blocks; a set of ZEC stakers would then finalise them through a Byzantine-fault-tolerant protocol, so that finalised history could not be rolled back by hash power alone, and stakers would earn rewards. The construction descends from the Trailing Finality Layer research that began at ECC under Nate Wilcox. Zooko's role is product lead and advocate; he is not the author of the protocol design.

Its status matters more than its ambition. As of October 2026 Crosslink has no ZIP, no target network upgrade, no activation height and no mainnet date. Shielded Labs' roadmap lists a prototype in April 2026, production-readiness work through 2026, an upgrade candidate in the first quarter of 2027 and mainnet deployment as "TBD", explicitly requiring broad community and coinholder consensus. Incentivised test networks have run since April 2026, were restarted in September 2026, and have been candid about crashes and stalled finality along the way. Zcash has not switched to Proof of Stake, and anyone telling you that you can stake ZEC on mainnet today is wrong; our Zcash staking guide explains what exists and what does not.

Epoch and future-proof cryptography

On October 1, 2026, Shielded Labs announced Epoch, a research and engineering project to future-proof Zcash's cryptography against quantum computers, AI-assisted attacks and well-resourced adversaries, with a target of production-ready post-quantum components by the end of 2027 and formal verification of critical code. Epoch is led by Chief Cryptographer Ulrich Haböck with Luke Edwards and Suyash Bagad, not by Zooko. His part has been to champion it publicly; on the day of the announcement he wrote that "the world needs Zcash, and Zcash needs future-proof cryptography". Days later Shielded Labs and Eigen Labs launched HashSmash, an open competition testing how far AI can advance attacks on hash functions including BLAKE3, with Zooko quoted as a co-founder of Zcash and Shielded Labs' Chief Product Officer. The only post-quantum feature already on Zcash mainnet is Ironwood's recoverability design, covered in the article linked above.

Cypherpunk Technologies

In December 2025 Cypherpunk Technologies, a Nasdaq-listed company (formerly the biotech firm Leap Therapeutics) that had adopted a ZEC treasury strategy after a private placement led by Winklevoss Capital, appointed Zooko as Strategic Advisor on privacy-preserving protocols and its ZEC holdings. It is an advisory role, not a board seat or an executive one.

Why "Zooko's cryptocurrency" gets Zcash wrong

Putting the pieces together:

• The cryptography was invented by academic researchers and has since been rebuilt twice, by Sapling and by Halo, by engineers who were not Zooko.
• The company he founded has been owned by a non-profit since 2020 and has not employed him since 2023; its engineering team now works at a different organisation he is not part of.
• The protocol's rules change only through public ZIPs that the network adopts, and its funding is split between a foundation, a grants committee and a coinholder-controlled lockbox.
• The organisation he works for today cannot change Zcash by itself and has said so about its own flagship proposal.

Zooko remains one of the most influential people in Zcash, through argument, proposals and reputation. Influence is not control. Treating ZEC as a bet on one person misreads how the network is run, and the person in question has spent years saying so.

Zooko's legacy in privacy technology

Few careers in applied cryptography span so much of the field. Zooko worked on the first commercial digital cash, on peer-to-peer systems before BitTorrent, on the storage design that popularised capability-based security, on two hash functions that run in production everywhere, and on the first currency to put zero-knowledge proofs into everyday use. His lasting contribution to Zcash is less a piece of code than an institutional one: he built the company that shipped the research, then helped take that company's power apart so the protocol could outlive it. Whether Crosslink or Epoch join that list is, as he would be the first to say, up to the Zcash community rather than to him.

For the deeper protocol story, start with The History of Zcash. For how the network is governed today, see Who Controls Zcash?, and for what the coins actually do, What Is Zcash?

Sources and methodology

Every date, role and quotation above was checked on October 6, 2026 against the sources below. Primary sources (Zcash's own sites, papers, specifications, the community forum, organisations' own announcements) take precedence; press reports are used only where no primary source is reachable, and are marked as such in the text.

Zcash origins and protocol

• z.cash, "Who created Zcash?": z.cash/learn/who-created-zcash
• Miers, Garman, Green, Rubin, "Zerocoin" (IEEE S&P 2013): ieee-security.org
• Ben-Sasson et al., "Zerocash" (IEEE S&P 2014): eprint.iacr.org/2014/349
• Zcash Protocol Specification (slow start, Founders' Reward, BLAKE2 usage): zips.z.cash/protocol/protocol.pdf
• ZIP 1014 (Dev Fund 2020 to 2024) and ZIP 1015 (2024 onward): zips.z.cash/zip-1014, zips.z.cash/zip-1015
• Zcash Foundation, protocol agreements and the trademark agreement: zfnd.org
• Peter Todd, account of the 2016 Ceremony: petertodd.org
• Zooko on the forum, ECC's owners donating ECC to Bootstrap (October 12, 2020): forum.zcashcommunity.com
• Zooko, "A personal letter about the possibility of a new Zcash Dev Fund" (July 31, 2019): medium.com
• The Block on the 2019 renaming to Electric Coin Company: theblock.co

Stepping down and roles after 2023

• Bootstrap board, "Welcoming a new season at ECC" (December 18, 2023): zodl.com
• Zooko, "A new era for me personally" (December 2023): medium.com; quotations via CoinDesk: coindesk.com
• Bootstrap, "Zooko and a new focus for Zcash resilience" (July 5, 2024): zodl.com
• Shielded Labs founding thread, including the August 8, 2024 post announcing Zooko as Head of Product: forum.zcashcommunity.com
• Shielded Labs team page (Chief Product Officer): shieldedlabs.net/team
• Shielded Labs, Crosslink overview and feature-net roadmap: shieldedlabs.net/crosslink, feature nets, six-week reflections
• Shielded Labs, Ironwood proposal (June 6, 2026) and Orchard vulnerability disclosure: ironwood, disclosure
• Shielded Labs, Epoch announcement (October 1, 2026): shieldedlabs.net
• Cypherpunk Technologies, Strategic Advisor announcement (December 9, 2025): prnewswire.com
• Eigen Labs and Shielded Labs, HashSmash announcement (October 5, 2026): prnewswire.com
• ZODL, about page (2026): zodl.com/about

Earlier career

• Zooko's own speaker biography, 34C3 (2017): fahrplan.events.ccc.de
• Cypherpunks mailing-list archive, Zooko's 1997 to 1998 posts: cryptoanarchy.wiki
• Mojo Nation 0.936 release announcement (January 2001) and the 2002 hibernation thread: diswww.mit.edu, mojonation-devel
• Wilcox-O'Hearn and Warner, "Tahoe: The Least-Authority Filesystem" (2008): eprint.iacr.org/2012/524
• Least Authority company history: leastauthority.com/about-us
• Aumasson, Neves, Wilcox-O'Hearn, Winnerlein, "BLAKE2: simpler, smaller, fast as MD5" (2013): blake2.net
• BLAKE3 repository (designers, ECC sponsorship): github.com/BLAKE3-team/BLAKE3
• Satoshi Nakamoto's reply to Zooko, Bitcointalk (August 22, 2010): bitcointalk.org
• TechCrunch on Zooko joining SimpleGeo (December 2009): techcrunch.com
• Fortune profile (December 2017), used for the 2009 blog post and DigiCash background: fortune.com
• Protos, report of Zooko's 2024 testimony in COPA v Wright: protos.com
• ForkLog interview with Zooko (October 2020), "we do not control it": forklog.com

Known gaps. Electric Coin Company's blog archive was unreachable at the time of writing (its URLs redirect to zodl.com and return errors), so ECC's original announcements are cited through the Bootstrap mirror on zodl.com, the forum, or press. Zooko's 2009 blog post and his 2001 essay survive only in web archives. A birth date and birth name circulate online without a primary source and are omitted.