Zama is taking DeFi privacy further by encrypting balances, trades, and yield strategies on public blockchains. Its Confidential Vaults and Swap Protocol aim to keep sensitive data private while still allowing onchain verification.
DeFi has always promised open, verifiable finance on public blockchains. But that openness comes at a cost: anyone can see wallet balances, transaction amounts, and yield positions. For institutions and wealthy users, this level of transparency can reveal trading strategies, asset allocations, and even give away competitive moves. Zama is betting that the next step for DeFi is not about hiding everything, but about letting users control who sees what-and when.
How encrypted DeFi works
Zama's Confidential DeFi uses fully homomorphic encryption (FHE). This lets smart contracts work with encrypted data without ever decrypting it. Users can deposit, trade, and earn yield on public blockchains like Ethereum, but their balances, transaction amounts, and yield positions stay hidden from the public. There's no need for a separate privacy chain or mixer. Instead, Zama adds a privacy layer on top of existing networks. When needed for audits or compliance, users can choose to reveal data.
Zama expanded from a single confidential vault to 16 vaults on Morpho, with the first cUSDC vault reaching nearly $40 million TVL in just seven weeks.
On September 15, 2026, Zama launched its Confidential DeFi suite at scale. This included 16 confidential vaults on Morpho and the public rollout of the Zama Confidential Swap Protocol. The company says these features are "live today." At launch, five asset classes are supported: USDC, USDT, WBTC, AUSD, and tGBP. Five institutional managers-Steakhouse, Armitage by Wintermute, Flowdesk, RockawayX, and Bitwise-curate the vaults.
Each vault encrypts deposit amounts and yield positions. Only authorized parties can access this sensitive data. The Confidential Swap Protocol lets users trade between Confidential Tokens without showing transaction size, direction, or price limits to the public. This setup keeps protocol states verifiable but shields individual user activity. That's key for institutions and for meeting regulatory rules.
Privacy and verification: finding the balance
Traditional DeFi depends on transparency for trust and risk checks. But that same transparency can hurt privacy for both individuals and institutions. Zama's Confidential DeFi tries to find a new balance. Protocol-level data stays auditable, but user-level details are encrypted by default. Users can give auditors or regulators access when needed, so compliance is possible without making everything public.
Zama's Confidential DeFi leverages fully homomorphic encryption to process encrypted data directly on public blockchains like Ethereum, without the need for a separate privacy chain or mixer layer. This enables confidential access to existing yield strategies while maintaining protocol verifiability.
This model does not turn DeFi into a black box. It's about programmable privacy-deciding what data must be public, what can stay private, and who gets access. This is especially important for institutions, which need to meet regulatory reporting and internal controls. Confidential DeFi is closer to default encryption with on-demand disclosure than to full anonymity.
Trading and yield under encryption
Confidential Vaults encrypt both deposits and yield positions. Users can join DeFi strategies without showing their fund sizes or allocation changes. The vaults use batch processing and encrypted state management, making it harder to guess individual deposits from onchain activity. Asset ownership and strategy participation are proven through encrypted proofs and access permissions, not public ledger entries.
For trading, the Confidential Swap Protocol lets users rebalance or swap assets without leaking transaction details to the market. This helps protect large trades or strategy moves from front-running or information leaks. The protocol aims to extend privacy from single transactions to full financial workflows-covering deposits, yield, and trading.
Limits and challenges
Confidential DeFi is still early. FHE is resource-heavy, and working with encrypted data takes more computing power than plaintext. This makes scaling to high-volume DeFi activity harder and more expensive. Encrypted states also mean users can't easily check balances or transaction records, so strong permission management and user interfaces are needed.
Regulatory compliance and selective disclosure are still being worked out. Institutions need to make sure audits, tax reporting, and risk controls work even when data is encrypted. Whether Confidential DeFi can reach bigger financial markets will depend on new standards, tools, and compliance frameworks for privacy-preserving assets. As Zama builds out its Confidential Token, Vault, and Swap systems, the project is moving from a technical demo to real financial products.
This push for privacy and programmable data permissions on public blockchains fits into the wider move toward tokenization and onchain financial infrastructure, as reported earlier.
Confidential DeFi is not meant to replace DeFi's transparency, but to add to it. Public DeFi data is still needed for market analysis, protocol governance, and risk checks. Confidential DeFi adds a data-permission layer, letting protocols and users decide what stays public and what stays private. For U.S. users and institutions, being able to use onchain finance without exposing every transaction could drive wider adoption-if the technical and compliance issues can be solved. Zama is betting that programmable privacy, not total secrecy, will shape the next phase of DeFi infrastructure.
As of September 2026, Zama's Confidential DeFi suite had 16 Morpho-based Confidential Vaults for assets like USDC, USDT, WBTC, AUSD, and tGBP, with five strategy managers running different vaults. The Confidential Swap Protocol allows swaps between Confidential Tokens, keeping transaction amounts, directions, and price limits encrypted. These changes move DeFi privacy from isolated tools to integrated, workflow-level features.
Fully homomorphic encryption (FHE) is a cryptographic method that lets you compute directly on encrypted data, without decrypting it first. In DeFi, FHE lets smart contracts handle transactions, yield, and swaps while keeping sensitive info hidden. This is different from mixers or privacy coins, which usually hide the source of funds but don't allow programmable, selective disclosure. FHE-based systems like Zama's Confidential DeFi aim for privacy by default, with the option for users to give access to auditors or regulators. The trade-off is higher computing costs and more complexity, but the upside is a more flexible, compliant, and privacy-focused onchain financial system.
