Ecash

Ecash (electronic cash) is a class of bearer-token money in which value is represented by cryptographic tokens passed directly from holder to holder — like physical cash — rather than recorded as balances in anyone's ledger. The concept traces to David Chaum's pioneering 1980s work on untraceable payments, decades before Bitcoin. Modern Bitcoin-backed ecash systems issue tokens that are redeemable claims against bitcoin held by an issuer, combining the privacy of cash with the settlement assurance of the underlying asset.

How ecash preserves privacy

The defining property is unlinkability, achieved with a blinded signature scheme. When a wallet requests a token, it first "blinds" the token's secret — mathematically envelopes it — before the issuer signs. The issuer's signature is valid on the unblinded token, yet the issuer never saw what it signed. When that token is later redeemed, the issuer can verify its own signature but cannot connect the token to any issuance event or any person. There are no accounts, no logins, and no balances to observe: holding the token is holding the value, and the mint's view of its users is close to nothing. This is a categorically stronger privacy posture than on-chain Bitcoin, where every transaction is public forever and tools like CoinJoin exist precisely to blur the trail.

The custody trade-off

Ecash pays for those properties with trust. A holder trusts the issuer — the "mint" — to honor redemptions and not to quietly inflate the token supply, and a dishonest or seized mint means lost funds, full stop. Blinding actually sharpens the auditing problem: because the mint cannot see individual holdings, outsiders cannot easily prove the outstanding token supply matches the bitcoin backing it. Ecash is therefore not a replacement for self-custody; it is a deliberate, bounded compromise — the right shape for small, frequent, private spending, and the wrong shape for savings. The sensible mental model is a cash wallet: keep walking-around money in it, keep the vault elsewhere.

Where it fits in the stack

Bitcoin ecash pairs naturally with the Lightning Network: users typically fund a mint over Lightning, transact privately in ecash — instantly, with no fees and no channel management, even offline in some designs — and redeem back out over Lightning when done. The mint absorbs the operational complexity of channels and liquidity, which is why ecash is often pitched as the easiest private on-ramp for people who will never run a node.

Two designs to know

The leading Bitcoin ecash implementations split on how to soften the custody risk. Cashu uses single-operator mints — simple to run, so trust can be spread across many small mints holding small balances. Fedimint distributes each mint across a federation of guardians so no single operator can abscond. Both lean on Chaumian blinding for privacy, and both represent the same wager: that for everyday spending, cash-like privacy with bounded trust beats a public ledger with none.

For miners and node runners, ecash is also a reminder that Bitcoin's layers serve different masters. The base chain optimizes for verifiable, censorship-resistant settlement; Lightning optimizes for speed at the cost of channel management; ecash optimizes for privacy and simplicity at the cost of custody. A sovereign stack does not pick one — it routes each payment to the layer whose trade-offs fit it, the same way a homestead routes power between grid, battery, and generator. Understanding what each layer sacrifices is what keeps the routing honest. Ecash's revival after four decades also carries a quiet lesson: Chaum's design failed commercially in the 1990s for lack of a bearer asset worth denominating it in — Bitcoin supplied the missing half, and the old cryptography turned out to have been waiting for it all along.