A proposal on the Ethereum forum suggests a private stablecoin: pUSD, backed by USDC locked in a smart-contract vault by @_PLabs.
Why it matters: public stablecoins leak data. Once a wallet is linked to a person or business, balances and payment flows are easy to trace.
How it works (inventory vs spendable money):
- An operator creates private units that can’t yet circulate or redeem.
- A payment provider deposits 100 USDC, which activates a matching 100-unit private note.
- Both actions happen atomically in one transaction (all-or-nothing).
This means a recipient can receive funds privately from the start—no need to first take public USDC on-chain.
Privacy mechanics rely on zero-knowledge proofs to validate transfers without revealing parties or amounts. Nullifiers prevent double-spends. Redemption is intended to work without the operator’s signature, minus a fee.
Key limits and risks:
- Backing: the vault proves USDC on-chain, not Circle’s off-chain reserves. Circle can still freeze USDC.
- Privacy: mint and redeem amounts stay public; the operator keeps viewing keys for audit.
- Control: a compliance admin can freeze notes; a bad freeze root could halt spending.
- Fiat rails: users still rely on payment providers for bank transfers.
On the composability level, DeFi integration isn’t plug-and-play: pERC20 differs from standard ERC-20. Competing systems (e.g., RAILGUN, Aleo’s USDCx) already offer private stablecoin paths, so PLabs needs to show clear usability and issuance advantages.
Costs are unclear: an older pERC20 benchmark cited ~5.47M gas per transfer (~$263 at 20 gwei, $2,400 ETH), but those numbers may change.
Biggest open question: implementation.
The paper claims fixed verifier keys, but reference code allows admin changes, and there’s no clear evidence of a deployed, independently audited pUSD.
Demand is plausible (payroll, suppliers, treasury), but the case depends on audited contracts, reasonable fees, and transparent viewing-key and freeze policies.
What do you think of pUSD?
What if we extend the protocol so that anyone can participate in issuing a private stablecoin backed by USDC? @circle@jerallaire@psneville.
Participants would have four potential sources of YIELD:
* Basic yield: the USDC locked in the contract can be deployed to @aave and @Morpho to earn interest.
* Mint/redeem fees: fees from buying and redeeming pUSDC.
* Transaction fees: fees from private pUSDC transfers and trades.
* Token incentives: potential token rewards from the protocol operator.
Beyond yield, the design has major technical ADVANTAGES:
* Permissionless : anyone can participate in issuing the private stablecoin.
* Trustless: funds are held in smart contracts. pUSDC issuers can redeem trustlessly, and pUSDC holders can redeem trustlessly too.
* Always 1:1 pegged: there is no depeg risk. You only have to trust smart contracts and math.