The Ethereum Foundation Just Made Privacy Non-Negotiable

On March 13, 2026, the Ethereum Foundation published its formal mandate. Inside it sits a plain commitment: four properties Ethereum must not trade away for convenience.

That framework is CROPS: Censorship Resistant, Open Source, Private, Secure.

Direct quote from the EF Mandate (March 13, 2026):
“Ethereum must, above all, remain censorship resistant, open source, private, and secure (CROPS). Its self-sovereign use must be extraction-resistant and experience seamless. These are the conditions that make Ethereum worth using, and therefore worth building, and worth defending. They must never be traded away for convenience: without them we have nothing.”

The mandate was also published on-chain in an Ethereum transaction (0x5dd574df963a1df1f064791e0f6ff41ec972cdbba12293b7e1ece582052ba855). Anyone can read it. No one can quietly rewrite it later.

Mar 13 2026
MANDATE PUBLISHED
Ethereum Foundation
5 years
TORNADO CASH SENTENCE
Pertsev, Netherlands 2024
4
CROPS PROPERTIES
C · R · O · P · S

Why CROPS matters, and why "P" is the hard one

Three parts of CROPS already fit Ethereum well enough. Censorship resistance is a core goal. Open source is normal. Security has absorbed years of research and money.

Privacy is the missing piece. Ethereum's base layer is public. Wallet balances, transfers, and contract calls are all readable. So CROPS is not a status report. It is a direction.

That direction cuts against the current regulatory climate. Tornado Cash was sanctioned by OFAC in August 2022. Developer Alexey Pertsev received a five-year prison sentence in the Netherlands in May 2024. Roman Storm was indicted in the US. By naming privacy as non-negotiable, the EF put itself on a direct collision course with that pressure.

What the mandate actually changes

The EF Mandate is not a protocol upgrade. It changes no Ethereum code. What it changes is priority and cover.

What the EF Mandate Changes
LayerWhat changesSignificance
Research prioritiesPrivacy-enhancing technology should get EF attention and fundingAztec, ZK-rollups, and privacy L2s now fit the mandate cleanly
Grant criteriaProjects that weaken privacy now clash with the mandateSurveillance-heavy dApps face more resistance at the EF level
Developer relationsPrivacy tools are core work, not side projectsThat shifts the tone around protocol privacy proposals
Legal positioningThe EF now has written language defending privacy as mission-criticalCounsel can point to the mandate when privacy work is challenged
Ecosystem cultureThe EF set a standard it expects future stewards to keep“When we are gone, we hope the principles here will continue on without us”

The on-chain publication is the point

Publishing the mandate on Ethereum was not decoration. It means:

  • The document is hard to erase
  • The timestamp is fixed on-chain
  • Anyone can verify the content has not changed
  • The publication method proves Ethereum's censorship-resistant use case in the act of making the claim

It also pushes back on the line that Ethereum is just speculation and collectibles. The EF is saying the chain exists to defend user freedom, and privacy sits inside that claim.

What this means for privacy in practice in 2026

The mandate gives more cover to work already underway.

01
Aztec Network and ZK privacy L2s. Aztec is building a private Ethereum L2 with zero-knowledge proofs. Under CROPS, that work moves closer to the center. See our ZK proofs explainer.
02
EIP proposals for base-layer privacy. Proposals around encrypted mempools and private ZK transactions now have a stronger case inside Ethereum governance.
03
Developer liability defense. The Tornado Cash prosecutions chilled privacy development. CROPS gives a clear answer: privacy tooling is aligned with the mission.
04
Friction with OFAC and KYCKnow Your Customer rules require users to submit identity information such as passports, selfies, addresses, or phone numbers before accessing a service.Glossary → pressure. Validators have already faced demands to censor sanctioned transactions. CROPS turns resistance to that pressure into a documented EF position.
What CROPS does not do: It does not make Ethereum private today. The base layer is still public. Every ETH transfer, every DeFi interaction, every NFT mint stays visible. CROPS is a commitment to move, not proof that the move is finished. For financial privacy today, Monero and Zcash still offer stronger live options. See: Zcash vs Monero 2026.

The broader context: “the Infinite Garden”

The mandate places Ethereum inside what the EF calls the “Infinite Garden,” a wider set of tools and communities working to keep systems open, private, resilient, humane, and free.

That frame matters. The EF is not claiming Ethereum is the whole answer. It is placing Ethereum beside Monero, TorThe Tor network uses onion routing to obscure IP addresses and browsing paths by relaying traffic through multiple volunteer-run nodes.Glossary →, and other privacy tools. That makes the mandate broader, not narrower.

Sources

Follow the Money

Ethereum still sits on concentrated wealth. That matters. Any privacy mandate has to survive the incentives of the people and firms holding the capital.

$Ethereum Foundation and ecosystem capital. Who holds what
Ethereum Foundation
~$1.3B holdings as of 2026, mostly ETH and other assets. Annual spend around $100M for research, grants, and operations.
Vitalik Buterin
Estimated $200M+ in ETH across public addresses. Publicly backs shielded transactions and privacy work.
ConsenSys
Founded by Joe Lubin. Raised $450M. Builds MetaMask and Infura. Infura centralization remains a weak point against CROPS goals.
Railgun / Tornado Cash
Railgun Association is a Swiss non-profit with no VC equity and clear CROPS alignment. Tornado Cash was sanctioned in August 2022. Roman Storm was indicted. Pertsev was sentenced.